Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File:                     dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier:          Za4/soHK6Se4Ll5xjM/73H43yYw04JFUClkc8QU9Ojg=
Subject key identifier:   C8:5B:BF:31:CD:91:31:77:BE:3D:97:06:F2:7C:9E:5B:5D:76:95:18
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer:       /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial:       01936A4705853A78FDE5C0DB53F365AAD295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number:          0677
Signing time:             Tue 26 Nov 2024 21:00:59 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:59 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:59 +0000
Files and hashes:         1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: zTqFGi+fOfpJ20jU+W8S3fAyMbn5HR40+nKtXgy+p9c=)
                          2: dIZEm9fL49OCExDhgXUwk08Kuc4.roa (hash: 1Z9lUELPkp5kgiAsyGj7/0xHE8Toh2V0zOpyYvsKItY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:47:05:85:3a:78:fd:e5:c0:db:53:f3:65:aa:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
        Validity
            Not Before: Nov 26 21:00:59 2024 GMT
            Not After : Nov 27 21:00:59 2024 GMT
        Subject: CN=c85bbf31cd913177be3d9706f27c9e5b5d769518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:c0:80:63:9b:2f:de:e7:1e:e8:5b:c5:04:
                    e7:8d:3d:46:5f:ef:1a:18:26:d6:0f:2b:e4:85:12:
                    6d:71:e9:a9:48:1b:4e:24:08:05:66:2b:28:4d:65:
                    4b:c5:24:29:7c:fd:2f:a4:04:d1:2d:44:c7:eb:5d:
                    b4:4f:71:7b:df:e5:85:90:4f:9c:91:28:2c:c7:93:
                    16:ae:f1:fb:ed:97:bf:9c:0c:c7:5d:f6:c2:04:36:
                    98:be:2b:1b:cc:5a:4f:b6:16:cc:b4:36:9f:09:5f:
                    9c:d9:47:b1:48:58:5f:96:d5:bb:f3:a9:41:ed:6d:
                    65:de:de:bf:81:f0:eb:16:38:dd:22:d8:71:8d:c9:
                    95:ed:38:b8:6b:28:91:13:e2:50:0d:59:85:89:dd:
                    fb:31:40:9e:9b:bc:f2:c4:63:db:7b:40:0c:d0:c0:
                    91:71:64:b2:e1:cb:85:ba:0d:9c:81:69:9d:51:41:
                    79:15:37:51:7e:b5:3f:b3:ab:86:6d:1f:21:08:58:
                    a8:b5:fe:c5:a6:0b:d1:60:a4:8f:85:37:10:14:c3:
                    3f:7c:8d:b5:73:1e:c7:88:be:6a:32:c5:bc:bd:78:
                    cb:10:0d:80:36:42:6b:55:9b:62:d3:6c:de:5d:41:
                    e0:5e:18:87:fa:4c:37:8d:ec:bc:c3:28:a7:eb:6c:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5B:BF:31:CD:91:31:77:BE:3D:97:06:F2:7C:9E:5B:5D:76:95:18
            X509v3 Authority Key Identifier:
                keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:fc:b1:17:1c:b2:b1:ca:92:b8:59:59:21:fe:04:60:66:
         22:f2:4e:47:6b:b3:4c:d4:d3:ec:4d:3b:3b:7e:4b:4d:ce:c3:
         b3:7c:5b:1e:22:31:fe:69:e6:e0:b9:78:05:cf:69:c7:fe:21:
         f2:2a:d1:fa:b2:4d:db:fb:49:3d:58:3e:9c:03:3e:0a:96:ae:
         bf:86:f4:7b:07:a6:72:b6:de:6e:a4:7f:fa:55:b4:0e:04:e3:
         44:88:91:dc:fe:36:1d:73:57:ae:bf:c3:88:0a:63:79:b1:d7:
         0e:ab:e5:9d:80:99:4d:be:21:e7:58:88:0d:da:d9:85:d4:5e:
         b4:37:0f:f1:5e:a1:fa:c5:d2:0e:e7:04:9c:2b:55:af:5e:5d:
         25:65:a9:c8:08:81:6b:8f:6c:52:ce:63:b1:52:73:24:47:11:
         90:a7:56:ff:f3:4c:50:ae:54:5b:5a:1c:ce:ae:ba:93:d5:3c:
         25:3a:48:7a:76:0c:c9:84:6b:a4:62:b8:ff:70:ce:38:b6:aa:
         f7:ee:49:b2:8c:ae:53:53:7c:98:ef:60:9c:67:fa:1e:6a:c1:
         a1:26:c8:76:42:dd:ea:d4:a0:74:2d:8d:46:0a:10:93:aa:f5:
         42:9b:0f:f4:0d:8c:9a:37:92:5d:98:6a:9c:ac:64:7f:b8:23:
         0a:61:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:20 2024 by rpki-client on console-ams.rpki-client.org