Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File:                     cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier:          uD8WMCoAMUCa+FEXDwR9TIifJlGA6u2eY54OhjSaqAw=
Subject key identifier:   C1:D9:7C:E3:98:C3:15:E4:C5:3B:24:5C:E7:8E:79:47:B3:86:E1:D2
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer:       /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial:       0193572D80A85F49755C546FAE5AC002AFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number:          063B
Signing time:             Sat 23 Nov 2024 04:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:20 +0000
Files and hashes:         1: 0LZMir0uuDoFg0PdGmRq1GGJBKk.roa (hash: UyhgKSRuuQ9SKkT+mmeIg60OXHvJlNCVomnqrO9cXYU=)
                          2: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: O5CNqBQGjnWC1lFYcajIH+lJaGK5LklMYyX2g1W/7Sk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:80:a8:5f:49:75:5c:54:6f:ae:5a:c0:02:af:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
        Validity
            Not Before: Nov 23 04:00:20 2024 GMT
            Not After : Nov 24 04:00:20 2024 GMT
        Subject: CN=c1d97ce398c315e4c53b245ce78e7947b386e1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:ea:32:d5:ad:ed:56:80:84:b6:78:47:ba:
                    b3:3f:60:8b:ec:0c:b1:ca:ee:e3:31:6b:15:86:bc:
                    ac:4f:fb:2f:1a:97:09:2e:3c:3a:ef:23:c0:63:77:
                    24:92:a0:05:95:f9:ba:55:50:f3:39:0c:ae:8c:85:
                    cf:7c:18:03:2b:ac:1a:ce:c3:8f:8c:db:d7:30:11:
                    20:f9:8d:a8:13:c1:77:b6:73:d8:64:d6:48:79:a6:
                    63:5c:f2:54:d0:41:92:56:94:04:78:ab:a0:72:1d:
                    d6:41:b6:a1:47:d5:01:72:26:99:ff:63:3b:80:51:
                    d8:07:d7:04:e4:13:fa:ec:e8:ed:39:62:86:18:1c:
                    1a:13:f5:09:fe:d7:02:9f:51:9f:05:07:ff:c8:97:
                    36:f5:90:e9:9c:6d:9c:fd:fc:2e:da:11:17:60:1b:
                    98:34:d4:5a:f6:7c:e2:60:cc:e9:3f:dc:fa:4a:24:
                    19:7c:75:c5:82:f8:4e:fd:49:57:40:b2:de:66:4e:
                    b7:80:ad:92:a7:44:b2:62:8b:22:b6:aa:52:75:b8:
                    b6:52:86:bf:ff:b6:fe:5c:11:c1:91:cb:8c:f0:78:
                    d6:de:22:e8:32:7e:bf:f9:32:9e:66:32:00:e0:73:
                    52:34:90:b3:d6:54:72:90:c1:aa:da:a0:9f:7a:31:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D9:7C:E3:98:C3:15:E4:C5:3B:24:5C:E7:8E:79:47:B3:86:E1:D2
            X509v3 Authority Key Identifier:
                keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:45:1a:f4:35:b2:3e:85:09:4c:88:cc:51:26:c9:ed:61:
         12:f5:30:39:db:cb:30:f0:7b:21:b3:a1:3b:c1:43:c9:a8:0d:
         1b:39:63:2b:1e:bd:c0:ae:46:e4:af:5a:72:6b:41:f7:44:97:
         7a:7d:36:75:c4:b1:29:03:06:e6:69:b7:47:d0:63:88:ce:45:
         4c:c4:bf:ee:9e:61:6f:0d:0d:9a:a5:18:32:54:86:dc:75:26:
         64:e5:7c:88:92:d0:ce:17:b5:6f:5c:5f:4d:d9:5d:b3:27:27:
         62:02:46:2f:ac:8a:cc:84:4c:f0:f5:5b:cf:21:2c:a0:b0:a7:
         52:99:61:a9:5e:f8:37:b1:71:8a:9c:41:17:f2:d3:5e:6e:9a:
         37:0f:70:c8:fa:e8:31:56:5c:60:b5:cf:a8:51:3f:91:dd:be:
         fb:87:d5:1d:1d:ee:24:1c:88:2e:9d:13:6f:71:22:e6:a1:9d:
         5c:20:9a:5e:01:9c:e5:c4:c1:00:4e:6f:fe:86:3b:fc:41:85:
         f7:41:6d:bc:70:81:fd:50:b2:e1:af:6f:4c:a3:7e:c0:37:60:
         8f:a2:cb:79:74:a6:77:1c:c7:b6:c7:f2:02:3d:25:fb:56:9c:
         cd:bd:a9:b1:e7:db:75:60:39:13:b4:9e:fc:34:94:aa:6f:2b:
         6f:57:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:56 2024 by rpki-client on console-fra.rpki-client.org