Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File:                     8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier:          3dQ44+HVi7x0f1yArM+nbQ5GW0nmBuviyTYXTQDUocM=
Subject key identifier:   6F:A2:91:7C:97:17:5E:48:DC:6F:48:1F:11:92:AE:D5:AD:3A:66:5A
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       019355AD68AD2D894B5E0283558885CBA397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number:          0A66
Signing time:             Fri 22 Nov 2024 21:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:47 +0000
Files and hashes:         1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: 1yQVURkUgeeezlD0Zfdz/uVYWYKEK2YjBubGDbvO6eY=)
                          2: fMVJhbXopv8mEyCFI82TBlpDbjc.roa (hash: ZLdIs37mbOshj8zXSmXosjit8Y0Jw2K1Kc6K0Y0zHtI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:68:ad:2d:89:4b:5e:02:83:55:88:85:cb:a3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: Nov 22 21:00:47 2024 GMT
            Not After : Nov 23 21:00:47 2024 GMT
        Subject: CN=6fa2917c97175e48dc6f481f1192aed5ad3a665a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:52:86:27:d2:5f:13:89:cf:9d:2a:ca:e9:
                    48:87:79:fd:0b:2b:4f:b7:45:b6:6e:27:75:c9:c2:
                    56:23:15:68:de:7f:6f:d1:ee:f0:fd:d9:e5:05:4d:
                    c0:99:8d:f2:d5:db:4a:a5:7c:36:05:b1:d7:49:09:
                    3c:36:c5:11:c4:89:6d:58:73:4d:07:80:83:27:4d:
                    d3:fc:ce:cd:fc:e8:c2:9a:57:4a:a9:1a:e6:ef:2f:
                    eb:6c:20:f5:e5:47:89:16:7c:55:7f:67:60:b3:85:
                    cb:fb:6e:61:7c:9c:b4:f7:f0:e1:9d:ee:d3:ef:a9:
                    7b:49:8d:05:ef:7d:96:c1:ea:af:73:53:d8:e0:6e:
                    5f:eb:78:08:ca:90:8b:de:76:00:7e:70:23:44:a0:
                    be:b4:0e:4d:0e:73:e1:ed:48:c1:e4:37:01:b6:bf:
                    6d:72:00:b0:7b:f2:c3:1f:1d:36:d5:a5:c3:1a:36:
                    3f:53:e1:8d:52:4d:09:5b:85:e1:72:a3:4a:56:3d:
                    16:57:c6:92:b7:98:06:3c:35:c4:51:fc:c5:29:f7:
                    ee:51:69:19:4d:81:5d:d0:b3:3e:1a:8a:e1:37:1c:
                    9e:ee:c9:6f:6e:51:16:94:3a:2a:1f:74:68:30:7d:
                    78:1f:1b:3d:01:6d:a8:2b:bc:cd:af:b4:91:de:d8:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:91:7C:97:17:5E:48:DC:6F:48:1F:11:92:AE:D5:AD:3A:66:5A
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:dc:98:ce:6a:c1:2a:c9:5e:29:a1:94:52:cd:74:7f:5f:
         92:b3:67:63:c7:ae:f3:ed:75:14:e8:7f:02:48:cf:c4:81:ad:
         ae:c2:cc:e5:47:4a:b7:32:a0:08:a0:e1:97:71:ed:22:37:0a:
         c6:6b:0b:a1:3d:ff:c8:7e:da:7f:71:95:f0:44:68:51:0e:b3:
         c2:4c:eb:62:2d:8b:ea:ee:eb:76:0f:43:c5:dc:92:97:2b:89:
         ee:16:97:ca:8a:03:1c:ca:22:68:8c:21:30:42:7d:98:a7:31:
         98:12:16:5d:b1:ee:83:fc:5e:79:3e:51:e7:dc:5b:d8:95:17:
         85:0f:c7:a0:cf:02:7a:90:83:7b:a5:c9:e3:03:3c:b1:6d:07:
         a4:17:92:4b:1e:cb:7e:af:aa:94:61:70:32:39:e6:b1:f5:44:
         4b:52:ea:67:a9:28:fd:3f:1b:97:95:6c:93:da:1d:6a:47:31:
         89:4a:c8:f5:c8:ed:df:29:73:23:09:3c:d9:bb:c6:7c:8e:0d:
         4f:33:9a:e7:91:0f:a9:9b:a4:c9:2e:14:53:ab:d7:33:98:5f:
         52:21:38:b9:7a:68:a8:df:9c:76:3c:f0:29:54:b8:27:28:48:
         a1:2a:ed:f0:4b:29:98:bc:7c:fe:aa:75:54:20:53:c1:19:f8:
         c5:5b:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:03 2024 by rpki-client on console-ams.rpki-client.org