Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File:                     9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier:          TKsgJjWAhptkqadvBUfBm7ttnU4Gkp2gihoAtSiZE5w=
Subject key identifier:   B5:25:C2:8C:B8:FB:BA:87:09:15:CF:E7:28:14:98:68:EC:0B:19:4E
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       019353512BB948187094E4A479312561A0C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number:          0B84
Signing time:             Fri 22 Nov 2024 10:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:48 +0000
Files and hashes:         1: 51hMxja-DPgR6lGsgh0WPbIdlQg.roa (hash: OnTn6ishr1WhCnNbxOFS6cZxMDlKbjEz8OCtymvrbvU=)
                          2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: LHRXXqfL5TLQZ3TjdOHFtFEqR5ibS7MI1y9MakIblL0=)
                          3: E52LjLgd-DYeOuYi1kHI4xTDM8s.roa (hash: Rlsy4dmopXT02ShcrO0vpAQOHYgldsOMLSViF7cs3Qo=)
                          4: lpIXnkT8jxQu4crz6v_BoCLn_Io.roa (hash: idVvK2a9lZq6lQlSAQ6r4B30hDfDwllKXj0jNwvmqbs=)
                          5: pqa0yGiO6NzxHXsvvQ0EX996_-Y.roa (hash: ByJk63yARBdVbJn/eJ53+Dnf2oZYYasCWCknHlilKPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:2b:b9:48:18:70:94:e4:a4:79:31:25:61:a0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Nov 22 10:00:48 2024 GMT
            Not After : Nov 23 10:00:48 2024 GMT
        Subject: CN=b525c28cb8fbba870915cfe728149868ec0b194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:ce:41:39:51:d5:ff:06:e2:6f:d7:3f:45:
                    01:bd:df:76:1d:19:7e:b4:9d:96:e0:fc:c7:1c:7e:
                    8d:c8:90:b6:62:48:60:05:11:da:61:31:e9:fc:0c:
                    31:af:4f:6a:3d:a6:22:62:54:41:c5:45:64:eb:06:
                    e2:db:26:41:ee:7a:ff:39:7c:7a:7b:37:54:33:1d:
                    6c:df:9f:8e:8f:3c:c9:e5:ae:cd:24:00:3b:35:0b:
                    95:4b:ea:e3:19:d3:3d:07:6f:bd:c3:b2:35:f7:ac:
                    82:15:cc:46:6f:fd:7b:b5:1b:36:51:c6:c1:b6:40:
                    29:99:f2:15:8d:e2:5e:aa:d6:b7:9f:ec:5a:38:89:
                    3f:ca:2a:97:af:6e:de:11:3b:e9:bb:31:d9:31:bd:
                    99:0b:61:60:06:21:7c:3e:c0:93:b3:4d:22:12:98:
                    74:59:23:44:72:27:69:95:78:d9:b3:f5:9e:46:f9:
                    bb:05:7f:02:52:23:8a:a4:87:5f:30:07:f3:d3:b1:
                    87:36:e9:3d:3d:b4:58:ea:f1:4c:44:61:cf:29:1b:
                    40:82:65:e7:66:79:c2:2a:8b:b6:9e:01:a0:c2:7a:
                    23:b4:9c:a2:b2:8d:60:d4:70:58:94:35:a4:0c:4d:
                    25:22:eb:e7:57:96:ac:5c:79:97:f0:df:bc:cb:ea:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:25:C2:8C:B8:FB:BA:87:09:15:CF:E7:28:14:98:68:EC:0B:19:4E
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:dd:83:4d:38:3f:d4:be:f0:51:e7:64:3f:9d:11:2f:2d:f0:
         09:e8:82:e1:e6:1a:66:4c:b5:0f:6b:5c:3a:8d:94:da:1c:cd:
         31:e8:2f:90:f5:bb:b4:8f:23:5e:32:f6:b4:1f:f9:da:4c:85:
         ce:d9:36:48:90:fe:c8:25:2e:50:32:88:d7:2c:e1:f0:4f:c6:
         1d:c5:3d:f5:02:d6:c8:bf:fd:eb:a1:4b:ce:ca:95:ff:8a:91:
         30:74:d2:f3:21:f1:6c:ac:ad:99:9e:31:dd:17:c1:77:b0:b4:
         16:95:8a:72:68:3f:4c:4d:0d:72:c8:01:84:63:09:48:ba:09:
         99:0a:bf:e7:8a:79:1d:c7:20:3e:6a:e0:f5:7f:fe:f7:ae:39:
         ef:0a:c3:4e:37:df:b7:e5:cd:bd:05:59:8c:7b:5d:c9:a9:c4:
         57:45:fd:2d:83:a7:53:ee:35:71:8c:b8:c4:e3:5b:9b:70:ef:
         80:97:00:d7:04:df:65:bc:c2:e7:38:8c:56:b3:50:e1:c6:cb:
         62:3e:20:93:0b:61:28:21:54:a1:04:fc:1f:57:9f:41:4b:51:
         33:cf:4e:f1:32:db:ed:a3:e0:e0:4e:2b:68:7d:45:75:89:4b:
         a7:3f:94:6f:81:64:ce:22:6d:df:97:5d:b6:6c:da:9c:f6:73:
         fd:ba:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:51 2024 by rpki-client on console-fra.rpki-client.org