Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File:                     Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier:          PKexeVDtZs13x9P+qy9NIKMRCVVZ72J9Uz8ogpTL6iQ=
Subject key identifier:   EF:A0:55:D2:AE:A3:33:3B:53:30:E8:C1:E5:92:11:05:D6:27:25:9C
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       01935388002655E21790E0DE96C1DF25EB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 11:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:42 +0000
Files and hashes:         1: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: 9pK0PkXXtz7kFOzg3r0JribOduN9aBPcMFYsukKJDFs=)
                          2: nam681pBUC-hLpxtasMSXp9x1A0.roa (hash: ywKIcUBQf76AAY6zBvOKqvcvrcb1Deqv3sjuC2xfBJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:88:00:26:55:e2:17:90:e0:de:96:c1:df:25:eb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Nov 22 11:00:42 2024 GMT
            Not After : Nov 23 11:00:42 2024 GMT
        Subject: CN=efa055d2aea3333b5330e8c1e5921105d627259c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:9b:5e:b7:5c:6f:53:63:ea:a3:53:46:8d:
                    94:83:3c:3c:14:01:1c:ed:6d:3d:63:28:08:01:1a:
                    08:9c:1d:01:80:68:1d:c9:c8:57:a8:2a:f0:65:f8:
                    07:64:57:8f:65:a1:e5:68:af:2d:06:66:d6:2f:d8:
                    57:45:ac:46:16:c3:1c:ea:8d:cd:50:69:d0:af:8e:
                    dc:e0:94:f9:f5:9a:ea:aa:75:78:20:d8:00:8a:3c:
                    2d:35:41:c1:ad:de:e2:41:8f:f5:85:36:fc:fa:8a:
                    bc:86:6d:85:09:a4:fc:67:3d:95:40:f2:e5:44:11:
                    fc:c3:54:53:4b:f6:42:61:d4:14:be:a6:7b:e5:ef:
                    a6:5c:b2:74:de:3b:b4:4a:fc:5f:32:92:c4:26:b4:
                    be:d3:c1:d2:6b:ab:d5:a4:3d:ea:62:bc:fa:0e:b7:
                    2a:d4:35:a2:e6:88:1c:68:2b:13:60:f9:dc:31:05:
                    82:38:7b:3c:ad:0e:a5:91:24:01:85:40:c1:28:63:
                    40:de:f3:29:de:70:c2:c8:25:40:18:eb:3b:b2:8d:
                    6e:9c:31:48:9e:d3:9e:08:aa:ca:65:0a:69:8f:ae:
                    64:95:53:80:a6:33:a1:25:f3:83:7b:f7:71:54:2a:
                    c5:19:76:e2:7a:2d:23:0b:eb:7b:96:f2:bf:87:e0:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A0:55:D2:AE:A3:33:3B:53:30:E8:C1:E5:92:11:05:D6:27:25:9C
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:82:4f:31:81:a7:f0:16:4b:35:56:6c:b5:7b:f2:8e:e3:db:
         3e:0b:d6:7b:0c:d8:58:72:ee:b1:a3:57:b0:3c:24:b0:36:30:
         da:32:3a:b6:c1:94:e5:76:3b:8c:d0:07:e9:fe:fa:53:d6:c6:
         2e:dc:28:e2:15:1c:8d:94:00:91:84:eb:9d:46:d2:af:29:29:
         da:0d:10:00:d7:15:84:51:1d:40:a6:08:8b:42:79:59:4a:37:
         95:37:fb:fc:b7:a2:c1:2d:70:fe:4a:88:7d:48:c5:5b:55:d7:
         77:18:ef:a9:42:85:cc:9d:ba:91:df:17:4c:1f:69:af:8d:0d:
         c7:83:d7:8c:18:89:96:37:83:ec:52:26:87:a3:e3:07:5c:ac:
         ac:56:83:54:bb:c4:55:72:4c:de:fd:93:7e:1d:6e:93:0d:c7:
         05:e6:06:11:4c:ab:f0:28:15:af:78:1f:f7:9c:2f:c0:6f:b8:
         63:f5:b1:8d:0c:30:6c:5b:ee:80:ec:a5:b4:43:34:21:50:42:
         7e:b9:de:8d:6c:ce:f4:7a:9b:99:32:8d:ed:79:c2:0c:09:2c:
         0a:7a:05:9f:06:1b:56:fe:9e:d1:49:d2:95:2d:4d:80:83:5d:
         2f:bc:88:a9:03:12:3b:5f:b7:c5:f9:c7:9b:05:c4:e3:22:6a:
         12:18:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:01:51 2024 by rpki-client on console-fra.rpki-client.org