Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File:                     maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier:          jJisfdBGualHCmhg/SQl1ZIR51Amn6THh800crpAKjI=
Subject key identifier:   B2:F1:A5:A3:A4:5C:40:34:7B:BC:FC:C6:3F:93:CE:BC:8A:37:F6:66
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer:       /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial:       0192376ED5BE4AFEB2C44BDDCE0AD9EB0500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number:          09F0
Signing time:             Sat 28 Sep 2024 07:01:03 +0000
Manifest this update:     Sat 28 Sep 2024 07:01:03 +0000
Manifest next update:     Sun 29 Sep 2024 07:01:03 +0000
Files and hashes:         1: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: oM33CW1vOgdPLni3GGMAL0qrxJ3+hyAZJCcx3WfMjOc=)
                          2: tTmI3SbUTMEtPJO7ar4QADZl2AM.roa (hash: E2sPfv4dqqKXrj9f7hSM74WnjHXYi6R9aubjtYMefMk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:6e:d5:be:4a:fe:b2:c4:4b:dd:ce:0a:d9:eb:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
        Validity
            Not Before: Sep 28 07:01:03 2024 GMT
            Not After : Sep 29 07:01:03 2024 GMT
        Subject: CN=b2f1a5a3a45c40347bbcfcc63f93cebc8a37f666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:29:be:06:58:e0:e4:3f:5e:42:7c:0d:9b:
                    03:1c:25:4b:20:8e:cd:6d:ab:dc:ce:e9:c6:21:f8:
                    ef:3c:52:8a:58:e4:66:0f:53:b3:1e:4b:4c:bd:f5:
                    5f:63:f7:89:51:c7:a5:21:ac:91:1c:45:bf:bc:d0:
                    dd:9d:e3:c3:ec:1d:5d:be:1a:59:21:4a:2c:59:53:
                    7f:75:1d:7d:bc:49:2e:8e:17:29:f2:dd:20:ce:6e:
                    70:c1:14:ca:c3:28:40:c9:e0:34:a8:cc:25:8e:4b:
                    65:12:35:b3:b5:6f:af:43:59:49:8f:2b:ab:9f:30:
                    82:7c:ad:84:7c:1f:1a:09:36:ca:07:57:8a:0c:da:
                    65:cb:ea:43:74:cc:59:77:88:c3:98:87:34:a7:cb:
                    7f:69:1c:c4:59:72:e1:4b:74:ff:8b:26:2d:7d:73:
                    96:05:dc:03:69:42:68:73:73:15:c0:5b:3d:a5:ae:
                    a7:47:b7:2a:e6:3f:cd:d4:d9:0f:b2:a2:ce:c2:cb:
                    87:10:08:aa:c7:94:9f:5c:7f:b6:2f:a3:53:7a:65:
                    3c:cd:39:cb:e9:14:e1:b2:19:49:8c:f1:21:3e:b0:
                    12:13:00:a1:1b:4c:c4:07:f2:fb:05:c8:12:cd:90:
                    cb:89:f1:fd:4a:23:92:5b:57:36:09:8a:fc:75:9e:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:A5:A3:A4:5C:40:34:7B:BC:FC:C6:3F:93:CE:BC:8A:37:F6:66
            X509v3 Authority Key Identifier:
                keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:73:73:d3:3c:bf:58:71:29:36:4a:77:16:db:2d:e2:12:
         a7:1b:2c:9d:bd:33:5c:db:0b:9b:f4:23:67:15:60:29:83:67:
         56:ef:df:0f:e0:76:c4:34:62:9f:2d:74:0e:2f:95:23:7d:a0:
         a8:4c:91:d9:fb:26:db:c8:3c:85:16:ec:3d:c5:05:90:3a:00:
         eb:b0:33:0b:38:db:9d:ac:4d:e8:3d:16:aa:23:87:8d:0c:0f:
         a3:33:81:e2:d6:98:ba:7f:0f:b2:58:cd:c8:f9:68:36:90:f2:
         0b:40:d5:73:2a:e2:40:20:fc:4a:12:00:77:61:4b:6c:39:25:
         24:be:57:49:ad:6e:61:dc:1f:1d:3c:56:38:db:88:58:2e:3b:
         57:30:8c:b2:c8:55:a9:6b:05:1b:31:db:bd:2c:23:4d:83:3e:
         d6:fd:a2:67:62:e0:d2:b9:83:bd:61:33:3a:f6:aa:cc:dd:b4:
         86:9e:63:69:e8:fb:9b:02:2d:4b:3c:a9:7b:25:65:cb:96:63:
         4b:ff:34:af:83:88:2f:26:ef:9e:c1:8b:ff:06:df:2a:cc:9a:
         77:4f:1a:e7:5d:9d:2d:e7:f3:c6:0d:8a:47:ce:e1:f8:5c:c1:
         b9:5d:e3:91:80:12:06:27:36:22:8f:ba:a0:63:70:e5:a6:70:
         b6:15:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:08:22 2024 by rpki-client on console-fra.rpki-client.org