Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          vzq/8t4xg3rBCz59/yyRRpoIiOOkN2/7MO969eQIwE0=
Subject key identifier:   9D:D4:F0:02:D2:4C:67:27:92:D4:9D:3E:E2:46:F0:71:7F:F7:D8:8B
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       0193579BE9974D6320B60C4B9FEC4A3D29F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          0D82
Signing time:             Sat 23 Nov 2024 06:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:55 +0000
Files and hashes:         1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: NgYbaEfKh6fc+KTa2vq6DR6WvJc2WXxjusGNqiM4ixo=)
                          2: ciaLEow_VCUI6Y9EhWoOqmPoXlU.roa (hash: zLk/YXGfjywOQ3dk1p1gUZfr4hKaPMXAYPiXektSHXI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e9:97:4d:63:20:b6:0c:4b:9f:ec:4a:3d:29:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: Nov 23 06:00:55 2024 GMT
            Not After : Nov 24 06:00:55 2024 GMT
        Subject: CN=9dd4f002d24c672792d49d3ee246f0717ff7d88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:91:5a:bc:24:2c:53:9e:0c:81:6d:6f:0f:
                    70:a2:e3:2e:77:3e:4b:02:cf:08:fa:8e:10:57:e4:
                    db:c3:4c:8f:13:0d:cb:82:0a:12:1a:de:f1:a9:2b:
                    2c:7a:b2:24:b8:4b:c3:7a:5f:70:44:d1:98:13:c5:
                    2b:58:a4:0f:f0:33:5c:b9:96:09:74:58:0d:17:48:
                    62:0c:44:75:76:20:37:7c:c7:b6:6e:96:36:f2:9d:
                    b6:75:cf:a9:89:0a:27:8e:d4:f8:83:17:55:46:5b:
                    3d:ce:08:c1:af:91:d0:c4:79:c5:b3:6b:0a:31:ab:
                    b1:65:60:44:44:0e:2a:34:71:3e:66:bc:43:cd:39:
                    c0:9a:fb:2d:f8:29:9a:b1:be:27:ff:b2:60:b7:f1:
                    31:5a:f2:a6:4c:66:4d:62:56:b9:d8:33:31:78:27:
                    2c:e7:bf:06:7e:21:4d:c1:ab:1f:be:d7:99:ba:e1:
                    31:8a:91:68:cf:cc:f2:9f:61:56:a1:75:c8:2f:7a:
                    91:2f:4e:5a:37:04:13:da:35:ef:42:79:6f:78:00:
                    32:f9:06:63:a6:67:cf:70:28:5b:5e:bf:c9:d1:53:
                    91:15:63:85:bb:e4:24:2b:16:46:3e:df:92:a2:8d:
                    a9:b8:a6:0d:fd:76:07:ac:c2:09:94:f2:2f:56:44:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:F0:02:D2:4C:67:27:92:D4:9D:3E:E2:46:F0:71:7F:F7:D8:8B
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:94:c2:7d:d8:30:c2:ab:3c:1f:5c:5a:b8:b1:5e:d7:be:40:
         27:aa:ba:75:f4:d0:41:13:d0:f2:80:6b:b3:c5:75:c7:7c:82:
         29:8a:ed:52:58:b2:e3:0e:9d:0e:02:5e:bf:d6:5f:08:43:67:
         9b:e6:4e:fe:a1:4d:a7:de:c9:ab:b5:5b:70:dc:ca:de:c8:17:
         b5:6b:a3:dc:f6:51:ce:02:19:2e:fc:02:3b:a0:a7:e2:11:0e:
         53:3d:76:1a:52:f6:9b:bc:24:b3:c0:27:81:fe:30:13:60:05:
         73:bc:78:73:27:94:8b:b7:42:e6:ab:47:0c:a0:57:63:7d:49:
         6a:68:fe:4d:ca:52:d8:ac:e8:7d:2a:59:25:c6:d2:09:d2:13:
         59:d2:50:ea:eb:42:62:16:a8:0b:fd:89:8e:53:79:30:61:e9:
         1f:7d:fd:12:1f:85:5e:d5:a6:8a:e5:14:08:8b:28:ed:8b:09:
         1a:55:dd:df:e3:79:da:4f:40:47:25:29:05:90:31:23:5b:87:
         f9:23:4a:60:05:01:c1:fc:99:d7:dc:be:22:f6:db:ec:9a:2a:
         41:7c:2b:31:dc:e7:b9:7f:c0:cc:94:17:28:dd:5e:8d:a3:63:
         9e:35:31:aa:15:4f:da:db:d8:c8:3d:93:06:a5:59:7b:2a:30:
         c8:ea:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:00 2024 by rpki-client on console-ams.rpki-client.org