Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          NKGGmeOhsFFRx49yrfLncl611wbsv00XRrY+Z7BsOWE=
Subject key identifier:   01:FD:B4:0C:C6:B9:8C:D8:6D:F8:31:5F:13:F5:FF:5A:68:AC:C2:AD
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       019369DA1E290FA8ACC9E92D7B6882B0BDA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:02:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:02 +0000
Files and hashes:         1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: 3aYgjaq6j5KpJh2E9hSk86QH0+xbrYT+1cgtcH8S6YM=)
                          2: LRfPva0k2oMOx3GCnDbTeeGyq8I.roa (hash: KFzGMEjtjzgaz/CTbnF+zbi2TPwMg49Y0OnpeoXgiLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:1e:29:0f:a8:ac:c9:e9:2d:7b:68:82:b0:bd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Nov 26 19:02:02 2024 GMT
            Not After : Nov 27 19:02:02 2024 GMT
        Subject: CN=01fdb40cc6b98cd86df8315f13f5ff5a68acc2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:f3:ed:df:dd:9f:c0:38:51:dc:6f:d6:76:
                    9d:3c:c2:26:74:d0:cc:ce:cd:55:64:4e:07:1f:be:
                    21:b0:8c:20:2d:10:7a:55:e1:6f:d8:ec:76:da:75:
                    6e:43:ac:7d:b9:34:e4:ec:18:e1:d5:fc:4e:b4:d0:
                    2a:9c:27:a0:2a:39:d6:8f:65:7d:28:ec:1d:3f:42:
                    4d:2d:ee:08:a4:8c:ec:b7:56:16:a3:51:1c:06:58:
                    93:dc:b3:8a:19:92:5a:76:05:6b:1d:23:d0:56:cc:
                    67:e5:1f:a7:fe:f9:a8:2b:47:04:74:1d:38:0b:af:
                    68:4b:85:1a:3e:cb:77:c2:b7:7e:7b:13:bb:dc:69:
                    57:e9:87:e3:2d:6b:8a:8a:2d:1d:94:c3:ba:87:ba:
                    39:99:35:d4:35:9f:84:98:19:f3:27:88:f6:4f:4c:
                    3e:27:66:85:45:c7:9f:30:4c:bd:81:45:ac:a8:ce:
                    c3:8c:70:14:73:ff:4d:51:46:5f:13:80:c9:23:18:
                    a0:db:2b:eb:45:b1:31:bd:67:96:38:18:6c:0f:8d:
                    88:bd:9a:f6:0c:ac:d2:bb:52:04:32:ca:86:8e:f5:
                    75:02:eb:ac:4f:66:09:d4:2e:b7:bf:4e:9b:7c:15:
                    da:ef:94:c7:7b:0d:a7:30:dd:75:22:c7:4b:13:6f:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FD:B4:0C:C6:B9:8C:D8:6D:F8:31:5F:13:F5:FF:5A:68:AC:C2:AD
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:80:ac:89:e1:6c:bc:cf:b4:8e:41:6b:00:8e:03:f7:b2:
         1f:e7:27:10:16:ff:1c:4e:87:8f:1c:e5:32:b3:97:9c:6f:5c:
         2f:32:c1:bf:6c:6c:e8:f7:2c:9b:62:3f:8a:65:18:6d:07:a3:
         80:cd:14:3a:08:b1:14:c9:fc:39:ac:49:43:8d:50:39:4b:6b:
         2f:a1:2b:74:8b:f9:aa:7f:6a:67:e3:61:13:09:50:c9:91:5a:
         a2:bb:b3:2f:3f:fb:fd:c6:09:42:02:89:0c:5d:a2:85:ba:b9:
         13:b3:a5:b9:35:0c:a7:85:10:ef:30:18:3e:b0:2b:66:af:d3:
         9f:8a:a8:61:d4:e4:b7:15:91:0b:c3:a5:b8:ff:93:98:2c:16:
         80:8a:ee:29:7b:cc:c5:ef:79:b6:d7:c2:73:85:3c:50:cd:d4:
         4a:92:67:c3:a7:e6:b1:f1:01:da:b9:d1:f9:29:10:b2:6a:22:
         40:c2:db:93:17:6d:9f:5c:73:ed:22:95:00:19:43:b5:1a:ca:
         21:db:42:3c:09:01:76:73:e0:e6:fa:97:c1:ed:6e:0c:ce:f2:
         04:a6:ca:94:38:e5:a4:a1:66:ae:ef:80:4b:86:ae:87:43:b6:
         9a:81:8b:fe:ee:60:6d:1f:f0:de:67:ba:bf:53:ae:2a:cf:d6:
         da:73:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:26 2024 by rpki-client on console-ams.rpki-client.org