Manifest

$ rpki-client -vvf repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
File:                     0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft (raw, json)
Hash identifier:          CWkdoe8QqOtxC6sCk5UHpgf/uHQjzd4cxFkFV847o4I=
Subject key identifier:   1C:C9:50:A9:AF:81:16:C8:34:C3:98:28:75:31:89:C5:FD:3B:B1:C5
Authority key identifier: 0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4
Certificate issuer:       /CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
Certificate serial:       31BDC17CF0F214A38E858A3B86B66678CC6C9A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
Manifest number:          F1
Signing time:             Thu 21 Nov 2024 10:10:21 +0000
Manifest this update:     Thu 21 Nov 2024 10:05:21 +0000
Manifest next update:     Fri 22 Nov 2024 10:52:21 +0000
Files and hashes:         1: 0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl (hash: 8lwJRPMhz0GoA1bukSsngTWXOEV9KeEvfJRnNjUBP/U=)
                          2: AS60223.asa (hash: VPtvQsfy9hkQtY+govFQjm42rosel1PjQ0Wya72Fbe4=)

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl
                          rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:c1:7c:f0:f2:14:a3:8e:85:8a:3b:86:b6:66:78:cc:6c:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
        Validity
            Not Before: Nov 21 10:05:21 2024 GMT
            Not After : Nov 22 10:52:21 2024 GMT
        Subject: CN=1CC950A9AF8116C834C39828753189C5FD3BB1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:83:9a:2c:69:da:86:49:39:48:ed:55:c6:
                    e4:a9:61:b1:e3:60:02:17:58:94:55:4b:de:00:ce:
                    db:af:29:9f:41:2e:39:56:7f:70:cc:1c:51:14:12:
                    b3:bb:6c:4b:b7:32:b0:9c:d6:a5:83:e8:f5:21:53:
                    8c:56:1b:1c:f8:82:d1:5b:c5:de:37:01:2d:4f:fa:
                    ab:31:cf:c2:d9:26:fd:6e:cf:62:b3:90:a9:8d:48:
                    8c:5b:3e:72:e4:e0:a7:1d:d2:ff:5a:39:3b:c0:52:
                    60:34:00:14:e5:4b:5e:50:c3:a8:43:22:2b:00:82:
                    89:77:90:a5:49:1b:45:98:89:6e:1b:0f:17:27:b0:
                    d4:a6:4a:ca:62:3b:ca:16:4f:7e:30:a3:e7:c1:30:
                    41:81:43:81:04:28:60:23:67:a4:3e:64:56:a2:08:
                    b6:ce:b8:68:8e:63:18:1e:23:16:61:45:13:c6:62:
                    35:36:34:f7:80:57:ec:50:c7:b3:9e:7d:88:03:44:
                    e1:24:a0:fa:4a:5e:b6:63:a2:76:3a:ed:90:e6:7f:
                    00:a1:e7:ce:42:7d:62:7c:64:07:14:25:85:e6:9d:
                    6f:42:1e:8a:49:38:f1:5d:6a:39:4d:36:08:39:00:
                    04:07:87:59:df:c3:71:56:eb:d7:9f:59:df:74:8e:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C9:50:A9:AF:81:16:C8:34:C3:98:28:75:31:89:C5:FD:3B:B1:C5
            X509v3 Authority Key Identifier:
                keyid:0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:71:23:e5:70:44:12:bb:fd:f0:bf:46:f7:7d:43:1a:87:e6:
         87:90:5c:80:26:b6:c6:11:56:31:2f:8a:cb:08:e8:df:dd:59:
         6c:39:c0:fe:c2:f5:5a:3c:6b:40:36:8c:26:5c:e8:aa:8d:0f:
         e4:b1:4a:e0:8b:f8:3f:5e:8c:02:48:dd:aa:3e:ed:5d:71:fa:
         50:d8:7a:dc:9a:c0:c5:63:e5:68:5f:5e:b4:81:87:96:11:5d:
         8b:69:c6:24:6c:3b:55:51:46:03:d2:66:f9:95:23:80:8c:64:
         cc:4a:e1:72:0a:27:66:da:67:45:e0:27:8f:88:d6:6e:5e:b3:
         7f:8b:87:18:be:fc:b7:82:0a:e0:89:a6:8b:b5:44:e8:fa:e0:
         1d:a3:74:1a:83:d7:2e:19:54:fe:3e:7a:a3:cb:1a:d7:16:76:
         50:da:0d:c9:29:d9:6c:7a:0f:31:fc:7c:82:4d:5d:58:98:a5:
         71:20:1b:65:a1:4d:d9:d5:6e:36:9d:9f:88:f3:a4:b1:b3:ae:
         e0:43:82:e0:4e:63:d7:fb:3b:cd:07:e3:b5:a9:9b:53:e2:4d:
         58:bf:26:1c:83:0b:4d:f6:a9:cf:1e:fe:82:14:b2:e8:47:86:
         2e:fd:fd:6e:5b:7d:7c:25:06:36:ba:5d:72:c1:38:95:ec:ac:
         fd:32:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org