Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File:                     1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier:          b0GsLZPjvEOLtBoMX1TeYo61raTwhcFZSwPYt2IMdu8=
Subject key identifier:   2F:55:FA:F0:CC:4D:52:B9:14:77:A4:10:3C:C4:C3:15:93:F3:47:C7
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer:       /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial:       019406471B40C36B7F638DE26A8ADC931F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number:          0C65
Signing time:             Fri 27 Dec 2024 04:01:50 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:50 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:50 +0000
Files and hashes:         1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: fjd6n97JgvO6yIcz8Ehw4adgY2UAfYe07TbXjiTTT/E=)
                          2: SQR_PCGGPtI-7S2Zes3_1VAWFWw.roa (hash: 9trz3+K+ov764Jc30Z2MdXh71td4q1Lvo2th19Cmg9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:1b:40:c3:6b:7f:63:8d:e2:6a:8a:dc:93:1f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
        Validity
            Not Before: Dec 27 04:01:50 2024 GMT
            Not After : Dec 28 04:01:50 2024 GMT
        Subject: CN=2f55faf0cc4d52b91477a4103cc4c31593f347c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:98:2c:60:f2:b6:ca:a4:6d:f7:2f:88:ab:
                    39:2b:23:2d:5b:02:f3:38:28:4d:44:8e:71:d1:38:
                    5a:f4:cc:2f:80:dd:b2:25:f5:5c:eb:c4:b3:da:77:
                    e2:81:a3:27:76:5a:5f:da:26:f3:9b:0b:cc:ba:d8:
                    03:1f:5f:21:df:96:30:28:11:f3:9b:4e:35:0e:9a:
                    c8:1d:96:64:e8:b2:6d:3a:bc:a2:cd:73:6a:2b:43:
                    d1:85:b4:56:03:96:6b:d0:d8:4a:3a:05:a1:c0:2b:
                    88:9d:04:ce:cf:99:cb:92:86:c2:b9:55:4f:0f:8a:
                    9b:7b:a9:9d:6f:8b:b3:65:b1:e4:27:d2:ad:7c:3e:
                    08:cf:47:7e:3c:c0:00:eb:1f:2b:41:31:b7:79:03:
                    2d:89:c5:36:a9:84:58:e0:ad:85:59:66:97:3c:f0:
                    ed:3d:94:78:2c:11:dc:6f:6f:15:31:d5:fb:b1:9c:
                    c6:48:a8:82:32:91:a4:5e:d9:4c:e7:29:8d:f1:89:
                    00:00:e6:7d:8f:92:23:05:5b:0e:62:a3:28:ef:53:
                    fb:88:c2:ba:8b:a3:f3:5a:f2:f0:45:3f:e9:63:6f:
                    17:04:bc:67:03:a4:19:91:cb:20:f9:0c:14:d6:9b:
                    4c:f2:c4:53:b6:8e:a2:ca:c1:c2:4c:31:bc:5b:4f:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:FA:F0:CC:4D:52:B9:14:77:A4:10:3C:C4:C3:15:93:F3:47:C7
            X509v3 Authority Key Identifier:
                keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:15:85:dd:4e:c4:48:71:9a:ce:a0:98:26:9f:9e:22:01:
         f7:64:a6:f4:4a:31:5c:59:dc:c5:4b:74:bd:23:c4:99:67:52:
         c4:cc:e3:ec:e2:d1:c1:3a:6c:a5:ce:94:db:b8:a3:3f:70:56:
         62:7e:74:8c:93:08:af:5a:1b:b6:63:bc:30:84:bf:b9:f9:32:
         4d:de:be:cc:eb:5f:d5:c2:b0:47:ad:e1:af:8f:ab:b3:ec:be:
         ff:41:ec:44:45:ae:88:14:c9:06:5c:b4:ea:82:ba:83:93:ff:
         98:3f:a9:36:76:76:69:bc:57:53:9a:a0:57:84:02:83:ab:c4:
         35:16:4e:fb:e2:d2:7f:05:bb:2c:89:3f:09:3d:42:26:b5:60:
         30:14:46:f8:73:79:09:05:3c:eb:0e:de:62:84:b3:70:aa:31:
         45:00:76:41:77:7d:5c:bd:19:9d:2f:8d:37:24:1d:b2:f6:13:
         4e:f6:4b:10:a7:d1:c9:86:4b:9f:1d:f3:70:91:ab:68:88:d4:
         b6:e0:ee:a0:c6:73:e1:14:68:8b:5f:ce:3b:24:6d:b2:39:84:
         f5:e3:f0:c7:1c:a8:d3:f6:47:47:cb:e8:4e:28:92:a6:92:d3:
         18:2e:f0:a9:d0:dd:1e:db:f2:6d:a7:d2:c0:99:bc:1b:75:08:
         ac:ba:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:41:22 2024 by rpki-client on console-ams.rpki-client.org