Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File:                     6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier:          fW8qhVBY7DifeJllX/H5MzCKIjBcD4dLqmo8pCEB37U=
Subject key identifier:   F3:5A:74:1E:D2:51:47:FE:B8:5D:C8:04:0C:87:1A:14:9F:70:96:2F
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       019369DAF8F027D8BA3745EC0F08868CD826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number:          0D1F
Signing time:             Tue 26 Nov 2024 19:02:58 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:58 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:58 +0000
Files and hashes:         1: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: ugjDKteSMyfP6jOdpyQi3vwinqubfK2gkBNG52W0ayg=)
                          2: b_D16kReGm_BCAFcnaQ7Cou3xe0.roa (hash: O+Nn4dIyYB8h3QIWTX7YCcHWVFrXDMpB7mt38i8SdeM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f8:f0:27:d8:ba:37:45:ec:0f:08:86:8c:d8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Nov 26 19:02:58 2024 GMT
            Not After : Nov 27 19:02:58 2024 GMT
        Subject: CN=f35a741ed25147feb85dc8040c871a149f70962f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:04:dc:92:80:2b:75:c6:e9:eb:0b:5d:88:
                    2c:e4:63:37:d8:ba:ae:98:a5:40:e2:e7:89:6a:04:
                    39:39:8e:a9:ed:6f:89:05:48:1a:a7:59:1a:c1:55:
                    37:bf:04:72:ed:65:4b:ee:77:9f:ad:f9:8f:64:34:
                    0a:98:83:5f:c8:49:7f:d9:e5:b9:a1:15:2e:6a:5d:
                    bb:11:2a:ee:cb:79:b7:fc:09:b8:80:46:b3:a0:50:
                    65:69:55:73:75:1f:23:a2:d3:42:00:8b:ba:9f:57:
                    57:c8:c9:b7:fd:dc:68:28:c6:e7:04:ad:d4:c5:1b:
                    3a:8a:3e:db:ba:b3:0a:1f:e7:fc:e7:71:4a:19:48:
                    d4:89:81:ec:e8:c6:74:2f:cc:55:20:29:e3:af:86:
                    64:3e:a0:84:3d:c0:6b:93:0e:8f:81:9e:0a:67:7e:
                    6a:79:e6:36:cd:1c:86:64:80:b8:83:0a:1f:21:16:
                    76:85:45:66:a6:02:e3:d9:bb:6a:47:dc:fd:a4:f7:
                    0d:c3:9b:1f:89:5a:27:85:2b:32:30:34:f6:e2:73:
                    38:9e:68:7e:81:18:1c:23:3a:3a:16:73:a9:7a:63:
                    52:04:81:f1:7b:3d:29:9d:4a:ca:9e:ee:f9:8b:bb:
                    fc:10:81:35:e5:1a:3e:f8:04:c4:5a:5a:0d:a5:9c:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5A:74:1E:D2:51:47:FE:B8:5D:C8:04:0C:87:1A:14:9F:70:96:2F
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:f6:13:19:77:64:7a:d7:58:10:72:63:35:ff:50:2d:16:
         ce:83:70:5a:ff:33:ca:a4:be:b5:96:50:3c:49:9e:f2:1a:98:
         c4:85:16:7d:4e:b9:1f:e6:3f:35:97:f1:fe:c4:bb:6a:26:23:
         a9:02:97:18:b0:8f:79:52:13:73:fb:0f:23:26:5f:d1:40:bd:
         df:48:37:35:a3:d9:76:f9:19:80:e8:1d:4a:4e:96:60:4d:e1:
         eb:ea:ad:dc:86:ea:b2:ef:a3:ca:97:93:89:d5:50:34:d8:fa:
         99:25:2e:1b:74:63:99:7a:ff:bd:6d:3d:19:4a:0a:fd:a6:8e:
         1d:e7:49:a8:71:85:13:e7:fd:35:67:98:da:f3:b7:7f:76:2c:
         09:cb:bb:48:bd:e0:8e:65:1c:30:7f:7c:74:9f:54:23:51:bd:
         67:f5:c9:d1:55:4d:d6:24:56:82:19:32:5a:5b:56:55:0b:15:
         a3:92:68:27:ad:45:4b:2d:74:ea:e1:e4:b9:3f:ed:04:87:be:
         75:0f:86:01:ac:25:3b:eb:90:bc:26:45:76:3d:ee:74:a0:f5:
         81:dd:5f:5a:e7:fe:24:9d:f9:f6:e3:b5:d7:be:01:19:c1:5e:
         6e:60:21:c3:dc:fc:70:66:86:be:62:91:8c:07:50:2c:58:71:
         5d:7c:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:41 2024 by rpki-client on console-fra.rpki-client.org