Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File:                     cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier:          FuJk5/TnytovQfw59Y4UlV2IQo9CEzaqozHkEWIV2zk=
Subject key identifier:   3E:20:76:8E:A0:9B:9F:D6:77:12:39:36:8D:7B:43:4A:6D:A5:21:C9
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer:       /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial:       0193579BA78AB6A397F1D9D87DB3D8B1E079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number:          06A9
Signing time:             Sat 23 Nov 2024 06:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:38 +0000
Files and hashes:         1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: 5m7kAIxodlHESSYaFbQUO0bsBiHkJimOnMzCsIKBup8=)
                          2: pRJUPtIRtZsDeXMk5fJ-2dwyDNQ.roa (hash: L830XiwJALuL5XwNI9NRCUKTCJ2VFxdn9zrBUEkOEsQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:a7:8a:b6:a3:97:f1:d9:d8:7d:b3:d8:b1:e0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
        Validity
            Not Before: Nov 23 06:00:38 2024 GMT
            Not After : Nov 24 06:00:38 2024 GMT
        Subject: CN=3e20768ea09b9fd6771239368d7b434a6da521c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:08:ae:32:d2:ed:9d:78:1f:fa:80:69:60:
                    10:9b:32:85:b3:33:52:0b:69:54:40:da:8c:0b:91:
                    dc:a6:9d:53:c3:cd:38:a6:11:c1:2e:0f:f4:e5:37:
                    7b:3a:4a:9b:9d:d1:41:94:38:ba:5c:5b:53:f7:d5:
                    d2:bd:6c:70:b4:99:41:f4:8a:1b:4a:46:ae:46:4a:
                    0f:63:53:a2:c6:84:9a:5c:15:3b:65:3d:10:f4:b9:
                    47:8c:0c:36:3b:09:67:31:e4:fb:ce:8c:bd:94:0b:
                    c1:8b:ab:71:db:51:b3:d7:b9:4b:d0:74:85:ae:97:
                    05:c5:72:61:9c:3c:ca:e6:f9:5c:94:f1:3a:f2:72:
                    b2:d1:9f:e9:22:6a:59:8a:e1:77:17:05:8e:f6:ad:
                    27:37:65:28:2d:52:48:cd:37:21:1e:77:f1:a3:85:
                    39:37:cc:80:53:5d:8d:e0:d8:3a:f3:e9:c2:03:88:
                    b1:06:4b:8e:31:93:3d:00:b4:98:ea:de:16:18:77:
                    fb:66:17:91:20:6f:c4:15:da:35:c1:a9:6e:52:5e:
                    74:ce:35:00:ee:00:95:0c:0e:03:03:e1:89:3e:42:
                    88:7a:78:52:9e:25:87:b4:53:f8:d2:a0:ed:d3:ce:
                    9a:9f:6c:d9:95:9c:92:55:93:2b:4f:e9:34:bd:f3:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:20:76:8E:A0:9B:9F:D6:77:12:39:36:8D:7B:43:4A:6D:A5:21:C9
            X509v3 Authority Key Identifier:
                keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:32:cb:68:ce:fd:0f:b7:6e:45:78:ea:9c:cc:ed:31:28:f8:
         4d:5e:46:0c:d8:4e:8b:d2:cc:4c:c7:6c:0e:6c:31:5d:e0:62:
         1b:49:a0:07:10:cf:74:9c:8c:16:90:2f:a9:fb:b0:f1:54:5b:
         aa:83:3b:81:f9:67:88:6b:69:25:b7:db:a3:a9:21:b0:a2:fb:
         90:cc:d1:eb:3c:8d:57:28:dc:f6:24:79:cb:15:aa:b7:79:c8:
         b6:0d:2a:24:8a:21:35:65:41:b9:19:da:0e:68:f6:a7:30:57:
         db:f9:77:b1:df:f8:30:a0:49:02:54:1e:73:db:93:16:cf:f6:
         2f:05:1b:13:20:02:fd:46:8e:50:6d:06:12:43:a3:1b:31:79:
         ac:18:7c:4c:74:8c:62:73:a0:06:ef:17:4d:04:72:86:24:19:
         3a:74:17:4a:db:46:36:df:50:55:ae:42:40:41:c8:30:c9:f2:
         ef:2b:df:8c:7e:db:67:a3:55:d2:4d:34:30:2b:61:1b:4e:e3:
         60:6d:6b:2f:84:9b:00:5d:e7:88:de:7e:c5:ce:f5:b0:ef:9d:
         82:e1:78:49:8e:b5:59:88:68:4d:e9:d1:a3:98:17:3a:74:7c:
         08:db:5c:41:50:d7:47:29:5e:65:07:6e:f9:36:02:9e:45:8b:
         de:94:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:32 2024 by rpki-client on console-ams.rpki-client.org