Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
File:                     0elpYhQkgMux04QRdx60_z45g58.mft (raw, json)
Hash identifier:          SwRU7FXwg1qzy5VB7O9A0VHdcXgmsPyRWqWs6llw/48=
Subject key identifier:   53:0E:CC:44:2A:BF:6F:A8:04:4D:F9:3E:84:E6:23:9E:82:D3:02:33
Authority key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Certificate issuer:       /CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Certificate serial:       019355E436D0157B02D8FA10A9A2ADFB411F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
Manifest number:          07CF
Signing time:             Fri 22 Nov 2024 22:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:39 +0000
Files and hashes:         1: 0elpYhQkgMux04QRdx60_z45g58.crl (hash: vFFYfxTliEWbJg7KIpS18C50IfLhFdF2ImeWII1gLU8=)
                          2: 4kGOvVII1N9GAUPIKx349wExsMc.roa (hash: +fdEtS9sxnjMDcD26SiHCTVteVYzXC+qK/ngEaiD1EM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:36:d0:15:7b:02:d8:fa:10:a9:a2:ad:fb:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
        Validity
            Not Before: Nov 22 22:00:39 2024 GMT
            Not After : Nov 23 22:00:39 2024 GMT
        Subject: CN=530ecc442abf6fa8044df93e84e6239e82d30233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:72:2c:23:05:ee:0f:d6:9f:d8:82:88:6b:
                    14:c9:5b:6c:4c:76:8f:a6:e6:d6:15:92:23:38:02:
                    f2:d4:74:6d:7e:1e:d5:5c:07:06:06:1e:8e:59:e2:
                    20:03:b0:9b:d5:31:8d:74:ff:71:17:75:d8:8b:2c:
                    46:83:0d:02:09:95:11:3f:29:0e:aa:fc:f5:85:e4:
                    b7:56:53:6f:17:7e:f0:c9:93:51:9b:80:be:19:a0:
                    b3:d1:25:90:cf:b5:db:5b:01:03:1a:30:3a:c2:f4:
                    d4:c4:32:37:33:9d:57:94:7e:c2:9a:30:96:63:bb:
                    22:19:a0:d5:6f:f4:ff:e6:59:b9:b4:af:aa:05:53:
                    51:e7:68:6b:01:2d:31:a5:57:a9:40:ab:5c:d2:33:
                    24:ac:43:c5:81:c0:11:97:cb:34:45:6f:84:d9:da:
                    e0:1c:ee:60:8f:a8:d6:76:b2:ce:12:d0:22:73:f3:
                    ae:d2:64:21:04:42:90:e8:24:46:a0:1b:49:d0:d2:
                    29:32:cc:f7:42:36:63:c0:41:44:2f:83:ac:ce:aa:
                    68:10:57:af:03:10:81:56:24:ea:00:cc:46:da:5a:
                    cf:39:cd:74:33:1e:c8:27:d5:ab:c8:e0:46:8c:72:
                    d3:0a:5f:7e:80:dc:ff:bd:e7:48:65:ce:2b:f1:38:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:CC:44:2A:BF:6F:A8:04:4D:F9:3E:84:E6:23:9E:82:D3:02:33
            X509v3 Authority Key Identifier:
                keyid:D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:60:00:60:06:30:56:d5:f8:ad:1e:bf:73:5a:f2:1c:b8:
         a6:d4:91:68:ea:e5:61:f6:5c:f0:e8:bc:4c:5a:df:88:ab:7c:
         50:da:86:47:78:9d:54:f0:84:cc:36:b0:b4:0d:c2:02:79:ba:
         4f:1a:da:ff:1f:34:73:79:a8:b7:02:5c:0e:30:f8:f9:87:fc:
         b7:53:8d:2a:f0:46:19:cb:63:8f:be:c7:22:df:c3:2d:4f:99:
         7d:8c:c6:6d:79:1e:0b:de:9c:49:9b:86:77:95:d7:f6:c0:0e:
         ce:4d:47:83:22:b7:7c:2e:7f:3d:3a:8f:12:27:b9:2f:a7:4f:
         ac:ba:b3:3c:52:a6:40:6e:71:33:f6:26:87:88:1b:2c:eb:93:
         ab:de:32:fb:18:9a:15:4f:ef:77:15:34:e2:d3:43:fd:7f:15:
         35:1b:d7:20:eb:48:fd:55:27:9a:24:1c:9f:39:5d:40:79:89:
         27:c8:ea:fb:7b:17:6d:71:83:bf:1c:24:a5:cb:90:86:3f:e7:
         83:b0:a3:43:3d:e5:7f:f7:eb:ea:ef:b9:4a:a8:a8:cd:ad:60:
         7f:34:8f:6d:c4:49:6c:49:70:2e:1c:a7:67:85:9a:c8:ad:bf:
         0d:4f:10:dc:f9:47:34:7d:4d:bc:8b:bf:5b:97:20:66:e4:43:
         36:20:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:41 2024 by rpki-client on console-ams.rpki-client.org