Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File:                     r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier:          a/H+OBnkansNpOkAdlu0oqovsZV0aVxYYbfkaYWxlM8=
Subject key identifier:   6A:7D:E1:0B:8E:BA:0A:8B:79:1C:96:2E:C1:39:9F:17:B8:00:FE:8E
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer:       /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial:       019365FE0C98707F4F20D2349C921073BA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number:          0C50
Signing time:             Tue 26 Nov 2024 01:02:48 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:48 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:48 +0000
Files and hashes:         1: pqNDUbD91OwfVOH0iq8TBqIv9Q0.roa (hash: bHVwDjd/VTodxgJXmsGUMSiliJoU/0iu9WwX0LGD5+E=)
                          2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: ZXScI7PlsxduONDGbnPvRoUAk72X4eKk2aVhVKLD9dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:0c:98:70:7f:4f:20:d2:34:9c:92:10:73:ba:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
        Validity
            Not Before: Nov 26 01:02:48 2024 GMT
            Not After : Nov 27 01:02:48 2024 GMT
        Subject: CN=6a7de10b8eba0a8b791c962ec1399f17b800fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:92:03:86:c8:00:5f:90:c4:b4:54:ca:92:
                    7c:62:66:82:1e:01:17:e1:64:d2:a9:4c:55:6f:5a:
                    be:6c:5f:f5:f2:7c:63:55:f0:93:c3:4d:7d:04:89:
                    48:d4:41:d1:96:62:95:6a:89:ec:ed:a5:c7:e5:15:
                    6c:42:a8:46:66:3b:b2:87:ff:1e:a3:83:4f:cb:da:
                    3e:64:fe:f5:da:ac:4b:65:a0:b6:7b:1a:6f:9f:2d:
                    49:7c:3b:39:b9:9b:20:cc:f3:06:95:71:95:97:d2:
                    a1:bc:00:f1:43:f8:3d:23:5c:a3:5b:f8:f5:9e:8c:
                    b0:75:85:a0:1a:1c:d8:3c:d5:84:ed:01:41:df:9d:
                    89:1b:33:31:9e:5b:43:29:9d:c5:c9:a0:83:07:b3:
                    80:72:a7:23:24:59:57:53:62:00:78:a3:62:dd:b2:
                    2d:0c:6e:a9:37:26:d7:5e:28:b4:55:10:87:64:01:
                    c8:06:15:18:74:87:25:28:b5:26:6f:ca:8f:f4:5e:
                    a1:1d:8d:9b:00:98:4a:02:84:32:a1:8b:39:c9:cd:
                    8d:31:db:a6:09:42:a2:78:b1:34:ca:ce:80:87:78:
                    73:22:34:37:72:2d:11:80:89:d7:1d:a3:f8:3a:90:
                    ec:9e:37:53:1d:63:dd:cf:0d:fe:0a:66:f4:49:ad:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7D:E1:0B:8E:BA:0A:8B:79:1C:96:2E:C1:39:9F:17:B8:00:FE:8E
            X509v3 Authority Key Identifier:
                keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:2c:1d:84:95:04:94:10:c1:78:e9:7e:1d:15:5b:3c:5b:
         87:5a:b1:34:2f:e1:bb:1e:60:3e:1a:3a:73:ad:ed:f4:b6:1d:
         3a:57:eb:28:b7:87:c7:39:23:00:c7:ac:91:43:af:5e:05:c3:
         3f:1c:13:09:c9:28:80:6a:3c:39:44:90:b3:4b:be:50:b5:d4:
         e7:e7:8a:4d:17:94:5d:d6:36:77:fd:02:ea:7f:2d:44:f8:29:
         6e:f9:41:73:9f:e9:1a:45:fe:05:c6:71:52:65:3e:9f:fe:29:
         01:80:d9:76:ba:bd:eb:b6:e0:63:a1:52:45:51:e4:23:e7:90:
         e3:cd:62:6c:6b:e4:ad:ca:b0:2d:be:31:5b:b1:34:5e:d3:eb:
         80:04:e3:91:ff:1b:36:44:a1:b9:a7:50:d4:89:f5:d6:83:ab:
         9e:71:b3:05:49:aa:50:10:5d:39:45:46:e8:23:a6:b1:7c:ce:
         f4:fb:cb:ff:68:8c:dc:9b:cc:2b:6c:b8:09:a8:b8:2d:ef:5e:
         26:18:10:67:6b:cd:94:3e:c5:f6:c6:52:92:26:f0:13:70:d8:
         be:97:36:6e:44:b5:3d:37:e9:f1:73:d7:4c:b5:1f:a0:42:6a:
         77:7f:e9:10:67:e5:31:a9:49:6e:40:d7:0e:41:5a:16:a2:dd:
         c5:cc:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:52:47 2024 by rpki-client on console-ams.rpki-client.org