Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File:                     fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier:          EOCZmMlyPfaNZyZ3lDm0aANKP0g2Nb4eV0S379aQv6g=
Subject key identifier:   FB:38:0E:21:2A:D6:AA:81:3C:CC:10:D2:3C:F0:F5:6B:9A:C8:FE:01
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer:       /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial:       01936A7DA2B9816DA32455BF7D47EFC13B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number:          1103
Signing time:             Tue 26 Nov 2024 22:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:38 +0000
Files and hashes:         1: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: ohWdNFsJj11hUc3v4R4rJQ1jx+BFz87yUmdxmejBjGg=)
                          2: tWfCBE2U413d4Ojw2IVpE19-YWs.roa (hash: 7W+IpAOdWmf8tWYaSTwbeGJtCDiZos4PkOxwUnlxSLg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:a2:b9:81:6d:a3:24:55:bf:7d:47:ef:c1:3b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
        Validity
            Not Before: Nov 26 22:00:38 2024 GMT
            Not After : Nov 27 22:00:38 2024 GMT
        Subject: CN=fb380e212ad6aa813ccc10d23cf0f56b9ac8fe01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:8c:84:4e:f4:76:43:ff:ac:89:45:1e:62:
                    46:86:d2:f8:9e:2b:79:6a:3c:be:b2:54:f5:7a:e0:
                    91:a7:e3:b1:da:10:43:f8:9e:a7:11:67:6a:18:e7:
                    b0:14:18:2c:73:5c:a1:ff:e7:09:8c:37:aa:aa:e8:
                    0b:2e:d5:54:31:99:46:98:eb:4b:7a:24:2d:bb:a1:
                    f4:c8:30:90:99:d2:9e:70:63:61:54:55:0d:0d:a6:
                    1b:f1:6f:4c:74:78:ed:43:b7:d3:a2:b9:63:c4:a5:
                    3a:1e:50:5f:50:8c:3d:59:60:e5:33:79:37:f2:b2:
                    f5:f2:80:0b:44:8b:35:f0:72:ab:22:0c:ea:0d:a9:
                    7d:14:d4:5e:ca:6e:aa:66:17:3b:82:ba:61:aa:60:
                    fa:75:d2:f4:24:f6:3e:6e:65:18:42:0a:15:a3:cc:
                    2d:e8:4f:88:0f:62:2f:dc:f7:01:14:3e:43:9a:26:
                    ec:04:0c:d5:71:11:25:d6:c9:2f:59:ff:e3:83:95:
                    5f:14:2b:78:10:45:84:8b:9b:1e:74:2c:4f:29:50:
                    88:1f:58:25:b8:e2:de:84:c1:c8:07:b1:d8:95:59:
                    e8:ff:95:8a:ec:2f:15:a5:af:9f:c0:5d:3b:79:12:
                    61:14:31:9e:df:22:c6:4e:b0:6d:f0:e3:3c:ac:aa:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:38:0E:21:2A:D6:AA:81:3C:CC:10:D2:3C:F0:F5:6B:9A:C8:FE:01
            X509v3 Authority Key Identifier:
                keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3a:cc:26:9f:a8:7f:c8:3f:6e:57:ed:f7:c1:21:b3:c8:c5:
         19:17:e6:2c:99:02:02:46:71:ab:25:25:dc:71:47:2e:5e:ea:
         bb:cf:a7:fb:33:4c:c5:d8:93:2b:10:20:b1:d8:98:bf:08:98:
         4d:7f:3e:10:c8:32:08:77:5e:69:56:1c:35:6d:82:f1:d7:5f:
         7b:1f:c6:f2:ab:bf:a6:b5:af:08:fb:b2:b5:71:64:c9:b2:67:
         12:2d:f9:be:51:aa:9c:85:01:94:38:9a:a9:32:01:21:c2:2a:
         d0:af:0d:bc:78:8b:54:98:a9:78:d2:73:01:fa:2d:3a:b1:9d:
         e1:56:cb:d5:2e:6a:38:3f:8b:b0:cf:94:02:53:3a:1a:ee:87:
         d0:79:18:93:6d:4e:4e:7f:cf:73:8b:38:cd:cf:a2:0b:b4:35:
         49:70:00:46:6f:67:a7:9b:50:07:eb:f0:07:81:34:66:2c:9b:
         13:f5:a2:9c:aa:43:c9:4f:c2:bf:96:ae:60:ae:78:c5:98:02:
         a4:a0:f8:35:a1:ba:09:ee:20:c1:f0:80:c2:57:f9:81:cc:52:
         e9:aa:48:2f:5d:1f:ad:03:89:70:46:61:7f:ea:36:1d:ef:21:
         a8:7b:b6:e1:7d:d1:e1:37:64:06:f7:93:de:36:4d:88:eb:d8:
         6d:97:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:57 2024 by rpki-client on console-fra.rpki-client.org