Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File:                     mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier:          RtzMQZUt7kC27+4R+uc0orRqr0lA82tVETfa3Jfn6yk=
Subject key identifier:   D7:96:7C:27:37:4C:87:17:44:9D:2F:B1:79:24:03:A5:21:29:0C:31
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer:       /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial:       01936A7D8D4A7D2CDAF5ED8583C5D567E50A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number:          130B
Signing time:             Tue 26 Nov 2024 22:00:33 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:33 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:33 +0000
Files and hashes:         1: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 73cO1Qj5W2DuoKg6oyQWVO2JUpfj13976CChAdWsW9E=)
                          2: p0GYzovoibRpIcNL4x5zm5sbcEM.roa (hash: La9kggZVzZnTCmHjgvtIBc9XIxyweBnCuqu6zwbucBc=)
                          3: tKcJ7cK8YTDpJbcUUK_4eURk_X4.roa (hash: IzsPIF5RtaP+WwJ3d64OUgSLbl03PGkJlsk3ktJx3X0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:8d:4a:7d:2c:da:f5:ed:85:83:c5:d5:67:e5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
        Validity
            Not Before: Nov 26 22:00:33 2024 GMT
            Not After : Nov 27 22:00:33 2024 GMT
        Subject: CN=d7967c27374c8717449d2fb1792403a521290c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:57:76:f1:ee:c0:71:c0:df:1d:ce:30:92:
                    e9:86:9f:4a:f5:09:60:52:ac:5b:b5:fd:1b:ef:74:
                    da:fd:9c:a2:f4:cd:2d:a4:94:94:09:a7:c2:41:40:
                    b7:f2:ea:a4:d4:4b:ac:82:23:0e:48:e3:a8:f1:e6:
                    9a:1e:dd:28:61:19:2e:e5:46:a4:55:00:59:4f:e0:
                    3b:aa:60:c4:7e:7a:89:a5:b9:7c:e5:9e:c5:89:b0:
                    0d:ac:58:df:45:77:29:13:af:fc:4c:3a:75:fb:9d:
                    8d:e4:2d:6a:43:e6:6a:10:30:76:fc:08:bb:31:e6:
                    df:90:4d:ac:99:05:c9:09:b4:49:f5:6d:17:5c:bb:
                    7c:6a:f9:27:86:5c:1c:fa:2c:5f:cd:28:a0:8f:86:
                    7f:01:c0:18:5c:20:d1:55:77:96:cf:fa:3c:af:2a:
                    95:60:5f:a2:39:46:7d:7f:7b:21:ff:84:84:48:f7:
                    42:5b:f4:26:1b:6e:cd:57:69:28:95:fe:d2:9d:84:
                    f4:70:e6:19:08:7b:84:bc:68:a1:9d:51:54:dc:c6:
                    1e:99:1b:67:c3:23:68:58:75:fa:04:9e:df:97:b3:
                    d5:1e:9f:f9:58:2f:9d:09:af:bd:87:83:ba:69:ba:
                    b7:a3:1d:64:1a:8a:b1:25:d6:c9:e5:f2:9c:43:6c:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:96:7C:27:37:4C:87:17:44:9D:2F:B1:79:24:03:A5:21:29:0C:31
            X509v3 Authority Key Identifier:
                keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:57:77:26:28:b8:b2:66:67:83:bd:0a:f2:3f:e0:fa:74:ca:
         91:14:e5:18:d7:79:b2:ea:11:34:42:7a:fb:a6:53:6c:1c:da:
         b9:33:9b:e6:ad:df:13:82:42:69:73:37:66:5c:d7:b5:51:b2:
         1e:b5:6d:43:ce:ea:34:9a:c1:a2:b4:3f:73:66:1f:91:3b:89:
         5f:49:bc:21:1c:e6:bc:47:1a:77:c7:da:35:ef:79:c0:6f:4a:
         37:03:4e:87:91:59:04:1d:a1:f9:23:e1:74:b5:8a:64:a5:7a:
         19:83:fc:80:c9:9c:59:d2:81:fc:18:1b:cc:46:b4:27:79:0a:
         76:e8:ac:ab:86:c3:64:b8:1d:fa:58:9d:43:10:9a:6e:96:66:
         f3:60:99:f7:ab:ed:0c:ea:ac:88:ee:c5:ae:5e:c5:60:e9:b7:
         d9:ea:12:69:80:dd:52:8c:e2:88:ec:83:c0:40:e5:b3:a7:bb:
         69:b8:5b:42:79:7e:9c:ca:eb:a7:2c:ff:d5:9d:0e:a1:3d:cd:
         04:37:31:32:80:b8:6a:3d:77:e8:de:f0:e2:0a:6c:66:73:46:
         b1:76:00:31:14:d5:df:96:35:f7:53:f6:11:46:38:93:7c:58:
         02:d1:84:63:f8:41:d7:89:12:fd:31:56:48:a5:94:ed:20:b7:
         77:00:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:55 2024 by rpki-client on console-fra.rpki-client.org