Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File:                     aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier:          Uh6jHoyH+OQ8zj8wwaC17QXE12OQ2ZUppUsgVyr+vSs=
Subject key identifier:   D4:4D:EB:87:24:88:E9:EC:E4:D2:4C:9B:BC:0A:68:07:38:3E:A4:28
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer:       /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial:       019369D8CE51B1CE652368FCE35DB2FF9513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:36 +0000
Files and hashes:         1: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: L3au8rdDVufGhSMfEqJwEzKv8RieANgYy55Ra6jDKzQ=)
                          2: bPLFD2TiQjZpBe2a58r9Q8wSj20.roa (hash: zdepWLhDQBTVGXZPy52L0+xqt8i2lFTPj84GmXfWW4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:ce:51:b1:ce:65:23:68:fc:e3:5d:b2:ff:95:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
        Validity
            Not Before: Nov 26 19:00:36 2024 GMT
            Not After : Nov 27 19:00:36 2024 GMT
        Subject: CN=d44deb872488e9ece4d24c9bbc0a6807383ea428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:2a:fd:1a:74:62:2a:25:38:69:d6:d2:dd:
                    f5:2d:cb:90:c3:47:fe:0b:3f:13:70:5d:1e:f3:87:
                    65:f3:46:59:16:85:18:6d:97:e2:02:6a:c3:8c:9b:
                    91:c0:3d:0d:5b:cc:68:1a:18:35:51:35:d2:23:98:
                    94:d3:91:31:72:e7:8f:4d:65:c8:49:37:03:3b:8f:
                    ad:aa:75:27:3c:23:99:5c:75:8e:0f:ac:61:49:b6:
                    34:8f:d5:ad:12:55:67:d7:a3:ca:e1:93:17:a9:32:
                    6a:5f:fc:99:18:aa:77:87:39:39:37:b4:86:5d:a2:
                    d7:3d:4d:1b:dd:97:6b:4e:95:f7:ab:76:c2:14:ac:
                    85:20:18:e7:6b:23:86:52:cb:ec:19:72:b6:68:c5:
                    81:0f:51:43:2d:2f:2e:11:73:b2:20:3a:2c:da:d6:
                    b1:72:eb:67:bc:61:96:6d:ed:8f:b6:03:8e:d9:21:
                    a8:3f:74:5a:c2:08:81:ac:30:e2:29:00:bd:ab:d8:
                    7c:ba:04:21:95:4f:85:cd:12:6b:d1:12:4d:8b:b9:
                    ed:7a:ac:c1:59:5a:6a:82:1b:0c:7b:c0:35:8d:57:
                    a9:3b:14:12:5d:2d:fb:06:cf:45:18:dc:c4:6d:52:
                    d7:b2:bc:bb:ab:47:21:14:1b:2e:68:08:9d:53:5f:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:EB:87:24:88:E9:EC:E4:D2:4C:9B:BC:0A:68:07:38:3E:A4:28
            X509v3 Authority Key Identifier:
                keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b2:d4:b2:bc:34:ab:a2:ad:97:7f:d5:62:01:0c:3f:3d:85:
         2f:b7:32:06:b4:da:19:0a:01:64:dc:2b:aa:8e:99:42:12:b8:
         64:3e:48:e4:7b:0c:0a:de:6c:44:48:cb:01:6c:95:2b:c3:aa:
         73:d9:f0:ec:40:b1:95:d0:af:1b:3a:29:9c:24:62:54:94:23:
         44:3a:a0:9a:52:63:64:27:54:51:f8:05:a4:51:eb:03:6d:b2:
         76:f8:a0:94:6c:18:dc:00:b5:e9:59:aa:8f:b7:a9:01:f1:44:
         e0:90:91:1f:00:c1:29:2f:6a:0c:d8:cc:4e:51:f6:4f:1e:a6:
         57:f3:fc:47:44:a9:19:6d:02:b1:e6:15:37:db:a6:70:b8:1f:
         f7:6a:09:87:b2:52:bf:56:d7:3d:72:84:a3:21:4b:89:55:b1:
         d1:19:29:0c:19:85:16:f5:02:36:f8:fa:c1:8c:3f:23:e6:52:
         70:88:8f:eb:28:07:02:41:1f:16:29:c3:34:90:f1:1e:45:8a:
         b8:97:0b:b4:3b:9e:11:97:54:d6:2f:86:1b:70:55:bc:67:a5:
         33:ea:29:8f:f1:fd:bf:3b:5d:a1:da:df:06:2a:b3:cb:32:9b:
         12:60:b5:c3:c0:f1:7e:92:30:c7:36:44:4f:1d:ac:0f:90:de:
         52:7b:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:03 2024 by rpki-client on console-ams.rpki-client.org