Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File:                     L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier:          tyt78tW22O24bBHJvFLHkLshIVQREPdlycPLxpQy4o8=
Subject key identifier:   23:99:2F:E6:77:06:F4:74:ED:12:9E:94:8A:80:2B:06:4D:D9:6B:C0
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer:       /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial:       019352AD9C24000E2BD0B6A714310D4E85CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number:          01B5
Signing time:             Fri 22 Nov 2024 07:02:09 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:09 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:09 +0000
Files and hashes:         1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: ahaonaVg21W0XkEcY/iC0LEyp0xATxt7VQBDzVIhSSU=)
                          2: _BNdL1nkWsa1ge0tfXbjeDkuF-M.roa (hash: c7iF/alcqxsVdwXvuSk3TMqbNVEzBa06GjA45r5qL3g=)
                          3: rYcjTUP6rykQSUiUOvduk_DjAIo.roa (hash: ANV7q6qJKzFC/LymYoQWchNl/Tip0jQlaGt+8hbXUcA=)
                          4: wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa (hash: J+CNTv35bAtzQQX7fD7iTBUVuqCPtQKllVQ5fl4bDaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:9c:24:00:0e:2b:d0:b6:a7:14:31:0d:4e:85:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
        Validity
            Not Before: Nov 22 07:02:09 2024 GMT
            Not After : Nov 23 07:02:09 2024 GMT
        Subject: CN=23992fe67706f474ed129e948a802b064dd96bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:e1:3a:95:b2:78:47:61:f4:9b:ec:a5:3e:
                    a3:e5:a0:2c:4f:80:47:0d:ea:26:a8:fe:d6:ef:9c:
                    06:61:ad:65:1b:a8:2a:d5:41:ba:a3:1d:b1:72:44:
                    e2:94:21:83:b8:c4:e3:32:2c:ec:93:72:28:2a:bd:
                    9e:7e:5a:89:2e:ea:2a:2c:0d:01:6b:dc:a7:45:ae:
                    91:3f:cb:cd:dd:c1:77:c6:3c:ce:9a:d1:6c:57:33:
                    19:b8:80:f4:36:b6:d8:bd:1a:df:0f:96:0f:c4:40:
                    b3:1e:c8:a7:e5:c7:63:9b:23:bd:9d:f3:96:bc:26:
                    da:b6:e8:a2:f0:fe:84:25:d1:ef:cd:5f:bb:69:53:
                    b7:8d:16:91:1d:66:35:48:2e:6b:a1:2c:58:cb:ae:
                    a3:de:85:de:e9:ba:4f:52:45:c0:c6:73:ac:28:d7:
                    90:7b:5a:e4:88:8c:75:69:2a:f4:07:e7:06:b2:b1:
                    4a:28:09:5e:26:9d:39:b6:d4:87:1f:13:e6:2e:55:
                    80:e9:e1:54:40:58:7e:ba:8d:13:77:21:3e:89:28:
                    a7:f6:ec:20:fd:3f:fd:57:ec:fb:c2:2d:8f:f9:1b:
                    00:41:26:17:ec:09:7a:f7:89:33:e9:ef:55:88:39:
                    a4:7b:07:3f:03:d0:1b:90:4d:21:71:8c:9e:83:bb:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:99:2F:E6:77:06:F4:74:ED:12:9E:94:8A:80:2B:06:4D:D9:6B:C0
            X509v3 Authority Key Identifier:
                keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:4e:1e:08:56:e4:df:f6:8c:bc:31:32:82:d8:de:c1:ba:
         a5:b2:35:d4:51:af:ff:4b:bd:fd:92:a4:4e:e4:83:87:85:50:
         66:fe:fa:eb:2b:be:ac:55:78:d7:65:63:d5:94:d3:38:23:b4:
         5b:38:36:ee:53:8f:a0:dc:fb:04:e2:41:22:65:60:21:36:38:
         53:4f:c6:ea:e5:03:5f:9b:f3:4a:cf:7a:b3:b6:52:bc:b0:0e:
         02:be:28:f2:fc:a2:76:d4:97:c1:81:9c:c5:3d:3d:0f:84:54:
         5b:ec:bd:b3:ef:b6:c3:2f:e6:20:8a:08:49:9c:33:b8:f5:02:
         5a:00:e4:1f:06:59:c3:ed:72:74:ff:fc:38:c3:fa:f9:2b:1a:
         65:fc:6c:62:a9:59:15:5a:42:27:af:66:3c:04:64:b1:65:9d:
         03:7e:23:fe:bd:43:6f:24:32:4c:49:a5:14:3e:8a:2b:20:e4:
         24:2e:5e:83:bd:0b:f7:8b:61:9e:ab:cc:3d:ac:ba:03:f1:c9:
         ba:4b:f5:86:c5:ee:77:94:ce:bf:18:f4:85:d9:0a:57:18:98:
         48:5f:b7:08:fb:2e:5f:0e:d4:9a:8d:7e:e8:e3:a9:67:18:e3:
         a8:8e:7d:d1:2a:9d:3f:80:0b:41:15:fe:5f:85:75:ef:6f:e9:
         fe:1f:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:10 2024 by rpki-client on console-fra.rpki-client.org