Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File:                     bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier:          NuqSgy8W5BjKen4Iu+YHP2dbNGQfQOfJwT2Hp+om7YY=
Subject key identifier:   6F:CA:7D:93:2E:F2:EC:50:7F:D0:FD:87:AE:16:CD:C7:9E:7D:20:8B
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer:       /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial:       0193549C4FB8DCC3221782D6FCCE5A8C3BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number:          1272
Signing time:             Fri 22 Nov 2024 16:02:30 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:30 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:30 +0000
Files and hashes:         1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: antEgPC5KN/e9uaTXcWbjjutpwkTlnLbQlW0UYl2ndk=)
                          2: jxeFKyut1iZvlnsyn9UpHH2X2Vw.roa (hash: jAKV81FzJg7A5FvDA2RBrSdw4xTuM7nlgpWC0k0fGWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:4f:b8:dc:c3:22:17:82:d6:fc:ce:5a:8c:3b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
        Validity
            Not Before: Nov 22 16:02:30 2024 GMT
            Not After : Nov 23 16:02:30 2024 GMT
        Subject: CN=6fca7d932ef2ec507fd0fd87ae16cdc79e7d208b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:2d:72:b7:20:0e:b2:76:b4:73:8c:99:43:
                    b4:ac:c0:29:99:c5:30:f3:93:df:2e:f0:d2:f1:4b:
                    88:4a:7b:a8:38:58:c2:ba:6e:c4:10:29:6a:0b:f4:
                    ba:10:05:b5:78:7d:ca:fe:63:c1:f4:02:42:8b:e5:
                    b9:97:b2:66:62:58:08:52:f0:3b:1a:08:be:81:1e:
                    be:e3:ee:1c:1e:5d:af:69:af:88:74:83:36:1f:49:
                    0b:39:4f:3e:22:76:3e:7d:85:8b:93:fd:63:1f:42:
                    2d:7e:42:cc:be:23:30:71:13:b6:b4:d4:f3:ba:be:
                    14:9f:cb:0d:1e:75:10:24:0e:a7:8b:24:92:a9:bb:
                    f7:ee:31:12:01:70:3d:69:c9:27:c7:1f:4f:98:57:
                    4e:7c:25:fd:1b:32:e7:9d:40:b0:6f:b6:66:f7:e9:
                    9d:9e:ca:67:2a:e7:5d:03:44:68:95:2d:fc:b6:6c:
                    f7:9c:e2:a5:d6:f6:5b:1e:00:32:aa:4b:83:e0:4d:
                    47:ac:53:41:f1:47:b0:e5:29:76:af:b4:11:33:7b:
                    92:22:b8:eb:e5:b7:e0:28:45:e6:8b:9c:25:1a:cb:
                    aa:c1:67:2b:3a:a0:5f:81:41:40:b4:d6:63:97:49:
                    98:4e:bf:04:fb:33:f7:99:91:87:b7:2f:be:df:e8:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CA:7D:93:2E:F2:EC:50:7F:D0:FD:87:AE:16:CD:C7:9E:7D:20:8B
            X509v3 Authority Key Identifier:
                keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:90:fb:63:10:b8:fe:43:61:bb:e1:54:fd:0e:ab:98:0d:
         9b:c5:e9:1c:81:45:4b:da:20:4a:56:39:bd:b0:9b:75:96:4c:
         27:57:96:e8:06:e0:c5:e6:40:ac:00:e4:29:dd:40:06:fc:ba:
         40:ce:a3:9c:4b:88:b8:da:bc:f4:13:11:ce:07:27:5e:10:0a:
         ef:21:2b:bf:ea:ab:07:3f:7a:a3:31:32:6d:06:4e:5d:a9:78:
         66:1d:e9:ac:80:15:4e:6a:1c:26:18:9b:8c:1f:97:40:b6:4f:
         d6:49:d4:fc:e2:48:dd:98:5d:30:0e:e6:a8:86:62:5d:b7:72:
         82:dc:8d:c2:d0:f2:41:c0:1c:8d:0f:2e:d9:c7:3b:77:ed:7f:
         c0:75:38:04:45:a1:dd:19:16:9f:7f:ac:e7:9d:9e:92:0b:47:
         1f:0a:94:6f:76:91:68:ef:62:31:75:f6:2f:5f:21:b8:81:6c:
         a0:b0:2a:7d:1f:79:3f:d5:38:f7:9a:7e:bf:bd:1d:ba:50:da:
         ed:e3:c0:da:93:3c:51:c4:56:1f:b7:4f:f5:8d:42:70:f2:5a:
         b4:56:ae:3e:b6:60:40:be:69:27:78:38:b5:f0:96:cb:23:96:
         d6:95:82:1a:be:c5:89:70:c9:47:52:26:b8:66:9b:84:a4:6e:
         27:bd:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:34 2024 by rpki-client on console-ams.rpki-client.org