Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          oTTo127d/17rHW9ppDy9s8+xZ68wiy74UsSRxc6xKyM=
Subject key identifier:   B1:76:C9:DB:94:2C:14:B8:D4:8B:95:73:DE:58:A4:51:FA:2C:EB:BE
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       0193579B82AC01677BF5279EE699D90B4FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 06:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:29 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: vzPmYO/tJmvAAeZn20+xV1gICyyRBg2aEm+vcbQb9js=)
                          2: bGEtg8HRG22cZRcPvkPLCVyCzDk.roa (hash: TT7jtFQbtnPJLTUZEX6aUJw3aAnM2gbQm9Naj8EA+2Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:82:ac:01:67:7b:f5:27:9e:e6:99:d9:0b:4f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Nov 23 06:00:29 2024 GMT
            Not After : Nov 24 06:00:29 2024 GMT
        Subject: CN=b176c9db942c14b8d48b9573de58a451fa2cebbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:b0:88:ec:17:69:3b:06:75:46:8c:2d:be:
                    5a:ab:55:ed:ef:9b:cc:4d:9b:1c:32:c7:ea:91:d8:
                    fb:f7:cb:b8:a1:2d:12:8e:b3:0f:1e:12:1c:b1:e5:
                    bb:59:bb:fc:c7:1e:0a:69:6e:05:7c:e2:17:df:bc:
                    10:48:47:90:c0:49:b4:87:18:4b:1e:53:94:72:8a:
                    a6:13:cd:8a:46:d5:cb:2e:02:e1:92:51:71:6a:10:
                    12:6d:b4:e2:04:9e:6b:ae:2f:01:9a:df:6e:49:53:
                    fa:85:01:ff:90:13:5f:66:aa:5e:a1:07:cc:57:4e:
                    34:ac:15:a1:74:48:44:02:3f:3e:ca:98:b7:02:47:
                    f1:d5:af:94:45:c8:8e:ef:f0:60:fc:10:b2:55:d3:
                    29:30:3e:df:c8:af:c9:09:e6:84:0a:ed:aa:ee:52:
                    f4:29:36:9b:44:b9:61:23:19:fb:ca:8b:b0:de:f2:
                    61:b5:af:4e:7d:66:89:27:01:1e:00:29:1c:6b:e9:
                    96:45:30:05:11:80:a6:c3:f3:b9:d8:ef:e5:5a:84:
                    38:49:70:0e:ea:f9:94:de:5c:45:75:e1:a4:5e:cb:
                    91:7e:35:9d:f9:ad:8d:f0:ab:23:31:40:ba:72:93:
                    28:55:03:56:e1:68:25:69:f8:2d:02:eb:27:6d:97:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:76:C9:DB:94:2C:14:B8:D4:8B:95:73:DE:58:A4:51:FA:2C:EB:BE
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:aa:f0:7b:ae:d8:1f:50:bc:99:89:4b:b6:94:01:6b:cf:
         d8:38:86:fa:b3:4e:98:69:d3:f2:2a:55:60:0c:a4:c8:8f:51:
         a4:a1:82:4e:fc:aa:89:f7:3e:1e:47:7e:78:4f:d0:60:48:33:
         83:86:87:46:9f:c5:f1:d4:6e:e1:df:46:e0:bf:94:9e:63:63:
         42:c2:b6:85:9d:d6:27:fa:62:4b:6f:4c:55:a6:52:e7:3b:86:
         9c:bb:b8:b2:89:6a:6f:f5:15:f3:69:14:15:e6:e0:4c:f2:51:
         d4:d6:6a:f3:8c:f9:b3:e6:2e:36:7a:77:9a:8a:4e:1c:79:3a:
         c6:76:8c:6e:45:27:86:bb:20:43:27:94:0f:27:e8:46:10:31:
         4c:40:3e:38:08:78:e7:17:2e:50:9f:b6:aa:19:15:c8:a5:df:
         b6:10:98:62:eb:54:d5:d4:9d:4d:bb:99:17:d4:f9:d1:ef:53:
         76:16:29:d1:64:14:c4:cd:a0:cd:3a:14:2f:31:73:fd:fd:dc:
         41:e7:40:14:1d:34:a4:44:7b:f7:16:cb:c8:98:68:c7:66:ee:
         9b:ec:b3:79:57:0c:a0:83:f4:4f:d1:46:20:ee:f8:5d:73:72:
         5c:b8:7b:54:7d:4b:74:6c:0d:84:17:18:e8:f6:ad:0b:99:fb:
         7a:a1:d9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:58 2024 by rpki-client on console-fra.rpki-client.org