Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File:                     9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier:          wAW63PAed6jfWtUyV4SLKQ9qIHuX98qGsrjxb9dA76M=
Subject key identifier:   A0:D0:8D:23:83:C2:E6:E1:4F:87:97:00:86:9B:73:7F:88:FD:CB:49
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer:       /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial:       01938B1B90B73B3F5C8A5293F3B7EB44F0F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number:          0656
Signing time:             Tue 03 Dec 2024 06:00:59 +0000
Manifest this update:     Tue 03 Dec 2024 06:00:59 +0000
Manifest next update:     Wed 04 Dec 2024 06:00:59 +0000
Files and hashes:         1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: FQ3/cmwAMG7xH889x2f/z/qtM52XqR58UTDv6H9tcAo=)
                          2: RQw6_t1n5qCmw8MdzAcx5Qgbk5o.roa (hash: v0ZMJD284Kc7xj717Txs350Ui70x2/pqbCgbZlM1p/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:1b:90:b7:3b:3f:5c:8a:52:93:f3:b7:eb:44:f0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
        Validity
            Not Before: Dec  3 06:00:59 2024 GMT
            Not After : Dec  4 06:00:59 2024 GMT
        Subject: CN=a0d08d2383c2e6e14f879700869b737f88fdcb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:ed:e6:60:7f:1f:ab:c2:2d:2b:33:96:6c:
                    33:2a:ad:a0:c8:ab:a9:ca:e4:55:e9:66:99:0b:11:
                    53:d5:9f:4c:ba:d2:e3:12:03:14:66:b0:1e:d1:25:
                    ed:cf:3b:ce:4e:4f:bf:b7:15:3d:7f:d2:de:30:04:
                    9a:9c:8d:2e:4e:d1:12:28:f2:52:17:58:5a:69:af:
                    c8:af:68:c4:f0:78:3b:c0:36:3d:01:85:f0:c0:be:
                    e8:82:a5:f5:48:90:a2:fc:33:46:7b:a4:5d:07:ba:
                    c0:da:93:c5:b8:72:44:77:08:f8:73:fe:18:c2:b2:
                    d0:b0:d7:98:23:03:26:12:50:ab:8e:a6:38:dd:b3:
                    8c:eb:ca:88:a1:0e:36:e3:ed:59:fd:91:11:43:ab:
                    9d:d6:32:c0:1d:e3:47:d1:d4:7e:ae:6b:95:45:96:
                    6d:79:b3:b6:81:b8:70:44:2d:2d:1c:a8:61:df:c8:
                    43:4c:ad:de:d4:6d:29:b7:35:36:8c:6b:2e:39:5b:
                    38:39:37:78:bc:47:9c:92:74:13:9f:88:c0:bf:84:
                    11:a2:d8:42:1d:6d:4c:6d:4d:c8:b5:cb:7a:c1:e2:
                    c0:50:c1:da:52:2e:17:87:f8:d7:42:4a:78:f0:8b:
                    0d:bb:ca:59:1e:71:36:97:33:70:e5:75:93:bb:0a:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:8D:23:83:C2:E6:E1:4F:87:97:00:86:9B:73:7F:88:FD:CB:49
            X509v3 Authority Key Identifier:
                keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:b9:0a:e8:13:99:4b:e8:07:ef:5f:21:33:de:ec:28:01:
         c5:21:7f:b0:3a:2f:cc:fe:fd:f7:bb:03:3f:1d:90:5b:70:d2:
         b7:8c:77:a9:3e:b8:3f:0c:30:bd:ac:40:79:58:9a:be:cd:cf:
         c0:a0:e9:33:dc:4b:e7:0b:37:06:ba:a1:23:6d:4e:f5:41:e9:
         ef:b3:2b:75:0b:62:54:7c:13:da:8c:21:ed:c5:aa:3e:34:b7:
         6b:64:ad:45:00:5f:11:5f:d1:b9:44:65:4a:09:15:00:62:15:
         66:a3:2e:16:a5:77:c2:3c:60:9d:c3:9f:e6:fc:de:c9:dd:bb:
         1d:4f:d0:1f:63:6e:4c:a8:da:99:4a:0a:a6:e0:50:d5:c3:c9:
         17:55:ec:b4:d8:52:ca:92:b8:cf:fa:7b:ec:4d:f4:f4:a8:bc:
         9d:48:50:83:69:1c:66:35:15:a2:fd:cc:e3:11:c9:ab:77:eb:
         68:5f:b0:8e:e2:2f:31:21:47:1a:e0:4d:1e:54:30:42:b7:98:
         0f:11:c8:8b:94:07:ae:6c:e1:6a:6b:4c:81:46:1b:0c:66:38:
         20:34:20:b5:e5:d2:66:2a:4e:c8:62:14:43:31:a8:01:d0:45:
         fe:3b:d5:6d:ae:b3:ad:06:f4:8b:a5:a3:08:67:c8:3b:a6:20:
         51:13:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:36:33 2024 by rpki-client on console-fra.rpki-client.org