Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
File:                     970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json)
Hash identifier:          Xb4lu9WKyS3pYorD7/teis2gHt1YTvajxKhhqs08SQA=
Subject key identifier:   D7:C5:D9:DF:A7:26:A1:E2:4F:27:E6:FF:85:A7:9F:DE:4C:08:20:4D
Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Certificate issuer:       /CN=970AD94C83244100A97F9186D53DADAB07995EE9
Certificate serial:       2002D1319B17AE7297AF314B6E7823E237D3DA0B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
Manifest number:          B8
Signing time:             Thu 21 Nov 2024 01:02:21 +0000
Manifest this update:     Thu 21 Nov 2024 00:57:19 +0000
Manifest next update:     Fri 22 Nov 2024 02:42:19 +0000
Files and hashes:         1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY=)
                          2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: IqGq3J66Fxvk7CrAD42beGNlxfjHVHXRjMgHU1ER3cA=)
                          3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: tepnhtpStfx+iROmpj+cPwbcFtzKc4geGeglxL8Depc=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 11:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:d1:31:9b:17:ae:72:97:af:31:4b:6e:78:23:e2:37:d3:da:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9
        Validity
            Not Before: Nov 21 00:57:19 2024 GMT
            Not After : Nov 22 02:42:19 2024 GMT
        Subject: CN=D7C5D9DFA726A1E24F27E6FF85A79FDE4C08204D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:ca:47:48:74:df:60:45:d8:cd:4b:4b:ef:
                    3e:0b:6d:a2:e9:5d:8a:7e:67:58:67:cc:6f:80:8c:
                    7d:23:23:c7:af:7b:67:df:c8:d2:6a:f9:20:70:ce:
                    73:1c:47:76:f8:30:eb:f2:5e:3a:5f:01:e3:7e:eb:
                    6b:b9:c7:d0:fe:9a:de:e9:80:47:5d:d4:ae:77:4e:
                    52:4f:88:81:35:9e:0a:60:51:28:b1:fb:47:52:3c:
                    78:29:e3:6e:b4:0f:3d:ca:f7:a5:79:a0:b0:d8:6d:
                    dd:c7:c5:14:d5:22:2a:ed:b4:d4:9d:4e:21:da:92:
                    45:f7:87:95:af:c9:24:35:e7:1b:26:c2:cc:f4:28:
                    b6:b2:0e:4f:11:3d:93:88:09:98:ad:3e:be:bd:61:
                    2f:3f:cb:81:ee:cd:8c:7c:75:36:6c:60:3b:85:a1:
                    06:ee:f5:a7:43:79:67:fe:0f:d8:bd:b0:1a:88:51:
                    12:3c:40:b4:e2:cd:ac:ee:66:bc:b6:fd:57:29:70:
                    1a:58:92:75:c8:c9:50:09:d2:d0:af:f4:84:6c:3b:
                    e7:e4:f5:ef:1d:cb:25:e4:27:ac:c2:53:5e:00:94:
                    99:7e:b6:c6:77:5b:c7:4e:69:a0:ec:b1:45:01:31:
                    ad:33:20:4f:2d:53:11:4a:68:55:d5:e7:bf:35:a6:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C5:D9:DF:A7:26:A1:E2:4F:27:E6:FF:85:A7:9F:DE:4C:08:20:4D
            X509v3 Authority Key Identifier:
                keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8a:80:10:d0:ba:49:62:2b:57:37:08:38:f1:bb:eb:6f:ef:
         40:6b:f6:be:78:f1:05:b7:a6:99:ec:c9:9d:c7:02:37:a5:ef:
         65:36:c5:ea:ce:2c:cd:38:29:d8:8f:3e:71:36:4f:4c:b4:51:
         08:dc:ee:bd:8d:3a:5e:b2:12:4c:f1:b2:70:dc:db:3d:3b:76:
         28:b1:fc:90:36:cb:27:94:68:52:84:09:97:c6:c6:4f:c1:19:
         9f:65:0e:40:a7:c4:22:88:9f:a1:9b:8b:11:e5:3e:4d:f1:1b:
         a5:c9:2e:9e:fe:a2:03:38:db:64:8c:9e:7b:4c:a7:17:66:70:
         9e:87:a1:2d:8a:23:14:fb:dc:0f:6b:c8:2e:85:36:76:cd:51:
         29:ff:9c:b1:b3:3c:af:48:95:af:1b:60:7a:00:05:9e:93:5f:
         d7:24:96:68:75:cf:3d:3f:6d:58:16:81:01:42:bd:1e:50:64:
         c3:31:42:d5:c1:3d:e9:a1:34:e9:30:f2:1c:54:7c:79:4c:22:
         8a:1c:a1:2f:9e:3b:36:86:48:06:b7:16:27:da:4e:29:3d:6b:
         49:d3:3a:b8:64:cc:f4:b2:61:43:1d:c9:d4:1a:42:3c:c1:d8:
         2d:3a:68:e6:8a:a8:e2:33:c0:c0:98:fa:3c:3c:78:fe:dc:66:
         e3:52:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org