Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
File:                     qiIvVnO4KKeuUvmboMYqzXCXSjg.mft (raw, json)
Hash identifier:          81J+wqKEv1eV69/xUaq6uowOrJjwMhtRHObh+Tt12gA=
Subject key identifier:   9C:04:11:0D:8A:F4:C0:15:D6:B9:EF:4D:7E:EF:D5:87:DB:1E:F9:9B
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Certificate issuer:       /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial:       01936A0F9785241099C7FFE0883CFD7A65C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
Manifest number:          75
Signing time:             Tue 26 Nov 2024 20:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:26 +0000
Files and hashes:         1: 6vdBpIhry23wCTCh0bp0fpcZ71Q.roa (hash: tG4aQVeO5m/kay99wOYUe2ZCXsVSJzwMQtJ+cnf8wbA=)
                          2: qiIvVnO4KKeuUvmboMYqzXCXSjg.crl (hash: PexZknDQLK4cvQER+3wAsW5Uf3y+YS3A6b7Qdt/xpSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:97:85:24:10:99:c7:ff:e0:88:3c:fd:7a:65:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
        Validity
            Not Before: Nov 26 20:00:26 2024 GMT
            Not After : Nov 27 20:00:26 2024 GMT
        Subject: CN=9c04110d8af4c015d6b9ef4d7eefd587db1ef99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:55:17:34:a7:b5:3d:cb:03:4e:12:7f:83:
                    50:51:d5:62:60:40:ee:a1:71:68:32:fb:a4:c7:d1:
                    49:43:7c:af:0a:ae:b6:e2:9a:60:ed:5a:63:15:2a:
                    3e:d6:d4:3d:07:5b:68:fb:76:91:ae:d8:f0:6b:f6:
                    06:58:44:eb:89:91:ac:94:cf:e1:d4:72:a5:ba:9b:
                    d5:71:e4:c2:cd:9f:30:11:d2:a7:e1:aa:5d:3f:3f:
                    e2:90:40:e2:f2:2b:9c:45:44:9b:54:6f:76:a9:9c:
                    3b:db:c4:17:af:06:a8:e5:24:40:fa:7f:16:1a:f9:
                    fe:d5:16:5a:ca:ca:39:2e:6c:91:0f:dd:64:a5:8d:
                    67:c4:53:16:e3:d5:a7:ce:ba:6a:11:97:bb:b1:78:
                    4f:5f:58:c7:e5:e0:ed:8c:29:33:34:33:6c:cc:b1:
                    10:18:14:85:bd:02:82:77:01:03:96:43:8d:ab:84:
                    30:82:ae:37:91:10:4c:95:1b:43:75:90:3b:96:f6:
                    b0:80:cf:94:64:c3:1d:ea:6d:e2:e8:e2:80:57:d6:
                    5d:55:75:e6:5e:0d:fc:30:08:22:64:9c:0e:64:7d:
                    31:f9:1b:83:90:88:8e:c6:1e:02:85:b0:67:1e:0d:
                    c9:cc:bc:79:39:7b:a9:38:9a:59:9a:fa:eb:81:5d:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:04:11:0D:8A:F4:C0:15:D6:B9:EF:4D:7E:EF:D5:87:DB:1E:F9:9B
            X509v3 Authority Key Identifier:
                keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:83:0d:fa:62:24:21:57:62:03:2b:57:65:b8:0f:e3:95:7f:
         1b:ac:2c:24:50:93:cc:6a:16:bf:6c:71:a8:55:73:7a:59:75:
         03:20:29:d6:3d:c4:7d:14:96:88:e1:8a:3b:ee:e6:0c:5e:60:
         91:0b:dc:69:e8:1e:a5:08:cd:24:67:a6:b8:8d:df:aa:56:eb:
         ce:dd:5b:af:88:b8:9a:17:cd:cc:07:55:f5:fd:4f:f4:8b:89:
         14:28:99:30:7d:92:2b:a1:28:ff:7d:3c:d4:ef:ad:ba:51:52:
         08:10:d3:51:d3:b9:21:ff:e7:dd:58:cf:26:eb:30:fa:2e:83:
         46:0e:ef:97:cd:e9:36:f4:35:a0:f7:16:ce:82:62:34:c7:1d:
         a0:ff:c1:c1:c1:80:b7:c1:3d:c6:f4:60:8d:e2:db:69:41:07:
         8b:97:a9:7a:ac:4d:95:3e:bb:19:6e:9f:e9:ea:0c:86:93:5c:
         ea:d8:85:67:3e:63:ee:c7:bc:62:4b:81:0b:01:99:b8:6a:ce:
         93:7b:e7:ff:77:e0:19:b5:77:28:00:0a:20:ec:f7:85:80:3b:
         48:c8:64:21:9f:52:b2:8d:bb:e0:7e:58:4a:64:3c:6b:16:13:
         84:df:a6:b0:aa:0c:a0:77:af:96:09:ec:5f:3c:ed:37:6d:3b:
         4b:8a:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:32 2024 by rpki-client on console-fra.rpki-client.org