Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          NlgvjQ8uxn2rCCsoFDmqZXz4nSfpn9iWCbk1IfIZT0Y=
Subject key identifier:   30:32:30:4B:0A:18:90:7E:CB:76:DE:62:86:96:01:A2:9F:C3:18:32
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       0193568A373FE43542A01590D4D46A71652D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          0E11
Signing time:             Sat 23 Nov 2024 01:01:58 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:58 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:58 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: bv4P70NR/FZb+SgJODGoDPj5Ex1uYnmlWJ88+wokGuQ=)
                          2: s29bQ7PRgYxDqhUGIYIDrIVy9_s.roa (hash: q3zHkU6zET7k+0xyPI7XYN78K+STfENEq1IeNExRXZE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:37:3f:e4:35:42:a0:15:90:d4:d4:6a:71:65:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: Nov 23 01:01:58 2024 GMT
            Not After : Nov 24 01:01:58 2024 GMT
        Subject: CN=3032304b0a18907ecb76de62869601a29fc31832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:94:a4:97:bf:0b:9d:5d:31:4e:84:1c:db:
                    70:50:81:4a:e3:2e:16:95:5e:01:4f:d8:2a:d7:37:
                    ef:13:3e:a1:a1:90:4c:a3:4e:e5:3a:76:ca:70:40:
                    0d:21:fa:94:8b:6c:be:3d:8c:70:b5:f4:bd:60:30:
                    bd:7f:d0:fa:e2:da:03:09:54:83:17:b3:cd:93:06:
                    37:41:cc:da:81:4c:d9:ba:1c:55:5e:46:e8:eb:e3:
                    eb:c4:41:e8:87:e2:39:6c:c1:32:e9:f2:b9:96:a6:
                    35:65:aa:96:13:3f:4d:6e:1d:20:4c:24:09:0e:3c:
                    1b:5b:b5:65:a4:7d:12:f1:c9:60:07:a3:01:cc:89:
                    6a:c4:b4:9a:54:fe:b5:45:25:1a:c1:1d:a2:07:ef:
                    fe:15:72:1b:ae:fb:2e:a7:ab:03:70:6f:81:fc:14:
                    c6:87:b0:51:da:61:6d:45:05:30:21:b8:e1:7d:e2:
                    34:a0:bf:7a:6c:69:99:2a:d6:0d:1e:ff:33:d3:4a:
                    89:ed:b1:0d:e2:1e:1c:b5:fc:29:14:4a:21:d2:4c:
                    bb:5f:11:ef:8f:68:63:bc:6b:ac:bd:c3:74:7c:49:
                    73:9f:3f:85:07:70:ff:a7:84:32:ff:a9:0e:d3:5e:
                    e6:36:c2:ab:fb:d8:8e:5f:7a:8a:ff:35:fc:76:3d:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:30:4B:0A:18:90:7E:CB:76:DE:62:86:96:01:A2:9F:C3:18:32
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:32:da:95:e2:d9:62:bb:47:6c:93:f8:03:df:ae:c4:4c:
         9c:c9:81:33:9f:89:5a:1c:9f:d2:1f:00:e5:d8:22:ff:b3:19:
         8a:53:13:c7:98:3a:01:93:04:e9:32:b0:5e:6b:7e:9d:5e:07:
         80:04:f8:c9:f5:3f:56:51:d9:e7:22:12:91:7d:2b:a8:48:f4:
         3d:5a:b7:6e:ba:94:b0:77:59:27:15:92:f7:89:cb:1d:65:39:
         da:af:a8:81:25:9d:85:5e:ff:01:29:aa:8c:8f:d6:6d:7f:92:
         f5:cb:4e:e7:24:06:cf:5b:ed:5d:59:40:8d:e2:5e:ea:c3:a5:
         b2:6a:de:9f:c0:c2:26:62:e1:ac:18:ae:ae:31:b9:3b:e8:02:
         2f:41:6f:fe:65:60:1b:f2:6f:fa:93:41:b7:67:9c:d3:5d:82:
         a3:ed:e8:0c:d1:ab:9a:a3:e9:00:b9:0f:ea:2d:93:97:0d:99:
         42:9e:e7:b6:3f:a6:c7:3b:32:7a:3d:6f:09:89:25:6d:cb:09:
         d8:88:6a:39:d1:3a:14:1b:6f:30:b0:59:94:e0:58:7b:bb:8c:
         1c:87:84:f2:5f:21:dd:23:ab:86:a6:2e:34:75:48:85:1a:17:
         b2:4a:85:b6:a1:cd:17:84:e6:2d:5d:03:5e:ac:b7:f2:8d:1d:
         21:c3:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:32 2024 by rpki-client on console-ams.rpki-client.org