Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File:                     aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier:          j7iPLYuGadew76LkR8HtFDS5d9EAaYAAs9Mt0+2IC3I=
Subject key identifier:   4F:FD:03:A6:E5:CC:70:D6:E6:07:4C:4C:F1:E8:35:B9:82:93:F6:35
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer:       /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial:       019262FDD1010FF6CDAF617EC7E4A93160E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number:          01B0
Signing time:             Sun 06 Oct 2024 18:00:54 +0000
Manifest this update:     Sun 06 Oct 2024 18:00:54 +0000
Manifest next update:     Mon 07 Oct 2024 18:00:54 +0000
Files and hashes:         1: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: bBpMIwVbN7TXb9xyGD6M25EgrAXROjsTzwhCEu4FDGo=)
                          2: u61WNtDjxE-OnfrEYLG7XoEW3Pc.roa (hash: 7IrTNWnrApPejSKGQbOzSMDTe0roBwEQ9DXpKBDTc6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Oct 2024 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:62:fd:d1:01:0f:f6:cd:af:61:7e:c7:e4:a9:31:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
        Validity
            Not Before: Oct  6 18:00:54 2024 GMT
            Not After : Oct  7 18:00:54 2024 GMT
        Subject: CN=4ffd03a6e5cc70d6e6074c4cf1e835b98293f635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:ef:3c:2e:f6:0e:52:ce:eb:e7:7f:2d:80:
                    29:c4:bf:d0:4e:c3:63:3b:35:50:92:b7:84:16:e0:
                    9a:89:70:9b:ed:23:5c:21:69:d3:79:f1:83:1e:4a:
                    43:3f:f6:98:49:5d:70:95:02:cc:21:90:b8:6e:78:
                    15:cd:6c:76:56:27:dd:9c:7f:d6:d4:60:18:db:bb:
                    30:02:60:47:9c:35:cf:05:b4:0d:a4:ae:31:c3:3e:
                    aa:91:a8:5b:00:89:e3:6b:3a:2a:62:bb:b3:f9:2a:
                    97:36:17:b3:d1:ce:e3:98:25:c1:08:c0:2c:a2:a6:
                    c6:ca:23:73:42:57:4f:33:e4:c1:bc:f4:27:91:9d:
                    c5:58:29:09:1b:ac:21:55:45:09:e0:58:0f:19:bb:
                    80:07:6e:f2:4c:76:cb:b0:47:e3:22:ba:ba:61:20:
                    a0:71:23:26:d0:a7:b4:21:02:8a:4c:d2:4a:01:f0:
                    b6:31:e3:ab:0e:5c:97:6b:59:7a:ba:d0:64:92:91:
                    c3:84:a9:96:31:20:27:5b:bc:99:d4:fa:17:43:61:
                    58:65:04:ca:00:54:e8:b9:ff:14:ca:10:0a:27:11:
                    64:63:74:2c:90:d1:6e:fa:1a:6c:5b:9d:c7:eb:96:
                    66:7a:87:f8:9e:dd:0b:c3:08:ca:80:d3:cf:d7:3a:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:03:A6:E5:CC:70:D6:E6:07:4C:4C:F1:E8:35:B9:82:93:F6:35
            X509v3 Authority Key Identifier:
                keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3e:8e:5d:ba:52:42:82:20:49:b6:d7:4c:24:d8:e6:44:0a:
         82:11:96:15:7d:72:3d:35:5f:f2:9a:cb:78:a3:3b:47:7f:60:
         0c:5c:94:36:52:fd:44:7f:a0:e9:e3:d4:6a:b3:ee:b3:b9:ad:
         7a:62:3e:bb:b7:59:74:9a:1d:83:ae:2a:ad:0f:53:1e:1d:1c:
         c5:e3:bb:e4:d7:05:9d:0b:fa:a8:0f:85:19:04:db:aa:05:03:
         a7:b4:de:e1:50:86:1a:cd:65:be:12:98:c9:bf:94:e1:eb:37:
         3d:7d:d2:51:e0:4e:42:a8:10:f2:d9:18:bd:bd:32:64:35:53:
         b5:88:c5:b0:56:23:0c:64:77:2f:54:4f:4c:66:fa:4c:0e:8c:
         06:08:80:2a:08:96:49:00:74:45:fe:e4:31:c7:8d:fb:e1:3b:
         e2:90:e7:50:06:b3:f9:17:55:c5:bb:ab:47:ad:f4:27:b6:c5:
         81:36:fc:04:83:d7:45:d5:76:aa:df:8c:d3:ac:c8:65:14:6b:
         db:7c:19:12:a6:76:1c:db:ae:14:6b:30:b4:c2:df:a5:60:e9:
         17:65:d6:3f:26:96:02:14:8a:7f:a7:b1:6e:1a:7e:3e:7a:ab:
         75:4c:d1:12:00:b3:11:82:64:4e:9b:df:2b:60:da:42:3e:a9:
         2f:d2:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 22:38:48 2024 by rpki-client on console-ams.rpki-client.org