Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          GdGvDdZJn0/tYi67m9enqgugIxiuJ+a5QfRcnNqMSLc=
Subject key identifier:   47:CD:85:E5:04:D5:E3:FD:0A:D6:08:4C:A4:3F:59:8B:1E:9E:CE:6C
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       297269B62C10C9FA72E7EC077536FF70F3A63917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          C8
Signing time:             Tue 03 Dec 2024 09:11:40 +0000
Manifest this update:     Tue 03 Dec 2024 09:06:38 +0000
Manifest next update:     Wed 04 Dec 2024 12:35:38 +0000
Files and hashes:         1: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: EMpJ3mgw0DJYTvgVV3jFiFPrriHiCwdcIaZd4OSS8C4=)
                          2: AS205789.asa (hash: tm9kecBeoxhQi2zzF7b51fHNd4VtuH+GdVkDh3gMetA=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:72:69:b6:2c:10:c9:fa:72:e7:ec:07:75:36:ff:70:f3:a6:39:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Dec  3 09:06:38 2024 GMT
            Not After : Dec  4 12:35:38 2024 GMT
        Subject: CN=47CD85E504D5E3FD0AD6084CA43F598B1E9ECE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:58:c6:29:ee:68:d5:e0:b9:29:f0:35:92:
                    23:f4:58:91:72:dd:72:71:53:2f:58:e9:8a:10:80:
                    c3:cb:82:f2:2c:19:0b:49:59:f8:d2:76:1c:45:47:
                    bb:f4:0e:9f:b4:ab:b6:a4:a2:4e:eb:7d:53:c3:b2:
                    ea:1f:8c:f7:f5:0c:ba:36:07:1f:b7:6d:c6:ee:ac:
                    e5:b2:17:87:7e:ce:56:c8:62:dd:31:72:8c:5c:b8:
                    b1:7c:f2:23:98:bf:cc:22:ca:c9:b8:fd:a1:1c:2e:
                    ac:38:8d:28:82:e1:0f:93:b5:07:5c:10:a7:f7:b3:
                    49:bc:47:ad:9d:29:a1:14:7d:5a:a7:b0:1c:57:7b:
                    ba:d3:e3:44:c6:71:3f:49:4c:24:e2:d8:e1:db:39:
                    48:82:93:d1:0a:2c:4e:b7:c0:da:7a:59:d7:f0:f8:
                    82:a5:08:b7:33:06:eb:44:a4:2e:f7:4c:81:dd:da:
                    b0:38:99:c8:67:e5:4d:6f:33:9c:d9:b5:5c:af:23:
                    06:7e:1a:33:11:c0:dc:8b:6f:99:c9:7c:d8:be:68:
                    0c:fe:90:6f:a1:10:08:f2:17:e7:f6:28:b5:ce:e3:
                    e7:b6:6d:78:87:62:ed:6b:9f:90:82:5a:c8:fa:f0:
                    79:c2:fb:b7:58:cf:cc:39:2c:32:c4:15:0a:b8:7c:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CD:85:E5:04:D5:E3:FD:0A:D6:08:4C:A4:3F:59:8B:1E:9E:CE:6C
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:44:9e:84:ef:e1:c3:a9:45:98:fe:03:cd:95:30:cb:71:7e:
         16:28:0f:28:3b:a8:f2:1b:46:ed:d6:36:7a:e1:57:58:8c:73:
         50:ee:63:1e:f8:aa:c0:52:81:5d:b1:3f:8b:45:7a:02:68:75:
         fd:05:22:7a:b9:5a:4e:29:b1:88:85:a6:cb:8c:b7:e0:e2:a9:
         0a:43:5e:62:3d:07:08:c0:d0:66:f2:c1:32:fe:83:f2:9c:10:
         fe:82:7f:ac:69:01:da:f2:27:b2:62:c3:7c:3c:d4:f8:59:bf:
         42:2f:64:28:f7:14:51:18:7f:f1:c2:67:f7:f4:5c:8b:8d:9c:
         88:d8:ce:6e:15:ff:c9:74:8c:ef:68:b6:eb:b3:63:77:74:00:
         49:a0:08:c4:72:fe:fb:13:2f:92:55:d6:a5:be:ed:3f:c9:dd:
         2a:f0:76:95:60:33:45:df:6d:5f:4c:e6:55:f7:0d:28:48:51:
         c5:a5:92:c9:26:aa:d6:1e:2a:41:01:1b:a0:67:53:7a:20:bc:
         08:07:2d:6c:f6:ba:4c:10:49:3d:43:23:7b:52:32:00:de:29:
         08:95:84:fd:09:d8:f8:57:99:f4:ae:5c:71:a5:ec:7c:74:e6:
         c8:89:ca:89:da:e7:44:fc:4f:6a:16:78:a5:2e:94:fd:c4:d0:
         72:79:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 11:04:25 2024 by rpki-client on console-fra.rpki-client.org