Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
File:                     e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft (raw, json)
Hash identifier:          diZa9PKYGbpRdp7BsRroaxRPvjrCS7ifYobMUmevKCA=
Subject key identifier:   6F:2C:D8:C1:20:8F:4D:9A:8D:EC:E0:53:15:94:D6:E9:9F:C4:96:A3
Authority key identifier: 7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF
Certificate issuer:       /CN=7bd78d9140ad6e742e167063206582c1c45952bf
Certificate serial:       0193568A0AEB0B7632C3826222E3E8BAD789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
Manifest number:          11E0
Signing time:             Sat 23 Nov 2024 01:01:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:47 +0000
Files and hashes:         1: e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl (hash: uU6NvKmVNqsS1N57cHnwE7bV/OvI2/gW9wikW/8SQfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:0a:eb:0b:76:32:c3:82:62:22:e3:e8:ba:d7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd78d9140ad6e742e167063206582c1c45952bf
        Validity
            Not Before: Nov 23 01:01:47 2024 GMT
            Not After : Nov 24 01:01:47 2024 GMT
        Subject: CN=6f2cd8c1208f4d9a8dece0531594d6e99fc496a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:7f:b4:1f:91:28:32:41:31:83:a0:7a:52:
                    5e:60:e7:e3:7d:71:6d:e7:52:11:a2:79:58:01:63:
                    87:ad:43:f4:4c:26:81:8e:b9:da:b8:e8:07:ab:0d:
                    da:77:0e:50:81:52:ff:30:d6:a7:a4:ec:a1:a3:60:
                    4f:ec:4d:ab:90:22:1d:03:54:32:69:ae:b4:c3:04:
                    3b:57:9d:c8:38:29:1f:fa:08:b4:d6:de:b0:a0:48:
                    67:ed:94:7e:4b:8e:b2:8e:97:de:92:14:aa:f1:b2:
                    b4:16:c3:64:39:7d:7a:54:ca:34:87:0e:d4:14:d9:
                    ca:41:98:88:d3:78:08:a2:f8:31:27:b7:33:b4:b9:
                    af:ad:cf:7a:d6:59:92:c4:15:aa:d6:1e:d6:11:dd:
                    29:12:8c:f1:98:bd:e0:44:9b:d2:3f:db:9d:c0:fc:
                    f2:8b:a2:02:ae:f3:31:fc:87:a6:ef:9f:00:a8:ad:
                    03:44:f5:93:1a:73:5d:36:8f:88:b1:a8:47:67:d7:
                    7e:3d:33:12:27:0e:eb:61:d3:40:8e:6d:e0:66:97:
                    7f:d2:6a:00:98:1e:d8:9c:61:59:80:16:eb:a6:85:
                    6d:94:79:47:c5:a5:4c:15:64:11:93:63:be:76:bc:
                    cb:d8:07:39:b5:42:5e:06:21:cc:cf:73:0c:df:af:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:D8:C1:20:8F:4D:9A:8D:EC:E0:53:15:94:D6:E9:9F:C4:96:A3
            X509v3 Authority Key Identifier:
                keyid:7B:D7:8D:91:40:AD:6E:74:2E:16:70:63:20:65:82:C1:C4:59:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9eNkUCtbnQuFnBjIGWCwcRZUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2d3850-29fb-4bfa-a806-3cfd8ed52a94/1/e9eNkUCtbnQuFnBjIGWCwcRZUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d9:ee:65:a1:0d:b2:67:fa:4c:d6:2c:51:a4:21:da:a6:3a:
         8c:fc:86:a0:12:eb:ff:01:27:d8:af:0b:00:e4:0c:1c:98:9a:
         0e:4d:fb:b2:e1:6f:45:2a:d0:d4:21:f4:1d:b2:6b:40:4a:77:
         9e:5a:01:5f:25:84:93:85:44:a9:fc:cc:67:6f:cf:9b:07:01:
         00:bd:93:a0:28:76:52:15:b4:95:8e:b3:24:13:c3:2d:f2:f7:
         02:d5:1b:f1:f4:c7:7e:ac:78:b5:31:7a:65:01:08:94:e1:49:
         54:60:e2:10:8b:e0:be:89:eb:bf:21:96:83:d7:6a:1f:33:d6:
         ae:c9:39:56:ec:be:b0:32:06:55:fc:6f:5f:2c:8d:7d:53:48:
         54:dd:e1:b2:e0:30:49:5f:ce:de:9c:27:33:14:b1:42:0f:f7:
         0c:70:41:d2:89:c3:8d:5e:0e:bd:ef:29:91:a4:30:38:ea:14:
         00:aa:4a:d0:e5:8b:4c:82:53:ab:67:3b:38:cc:d7:f3:9d:5f:
         cd:d0:d1:99:14:b1:62:ec:71:3e:55:32:57:79:53:8e:0a:2e:
         67:b4:cd:08:88:fa:cf:59:87:b2:3f:0f:7e:f1:ad:b3:29:73:
         ad:80:98:c6:88:7f:ff:2c:82:92:b5:23:ff:14:fc:2b:4e:77:
         66:82:72:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:20 2024 by rpki-client on console-ams.rpki-client.org