Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
File:                     9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json)
Hash identifier:          +yNYLJ1Qn3J4Q8EIDbXgSXMjr+m0ksQYzwTWKY5yUBQ=
Subject key identifier:   A7:90:4B:90:65:60:2D:22:EE:51:9D:77:58:02:C9:73:E3:78:38:C8
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Certificate issuer:       /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial:       019406EB12FA3FD31C487BEC16D5F2C3162E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
Manifest number:          32
Signing time:             Fri 27 Dec 2024 07:00:56 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:56 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:56 +0000
Files and hashes:         1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: o1q00tt3tV8UONLKdVRpRAucUEIcCK++3NCex3r+a50=)
                          2: cc2NKQPPmZP5wdN4RbIlNs6yLIk.roa (hash: zL+vNvLbF5OC5Elr8H0OXij3F1uNFpasL9WvfSBb+fo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:eb:12:fa:3f:d3:1c:48:7b:ec:16:d5:f2:c3:16:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
        Validity
            Not Before: Dec 27 07:00:56 2024 GMT
            Not After : Dec 28 07:00:56 2024 GMT
        Subject: CN=a7904b9065602d22ee519d775802c973e37838c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:ef:af:ba:19:f7:3d:ae:d9:bf:1c:c6:d3:
                    a2:4d:65:aa:63:ed:69:5a:69:3b:b0:24:a7:53:e2:
                    e1:ee:22:3e:4a:b1:d7:cd:39:35:8b:38:28:4f:c8:
                    1e:0d:af:92:15:8d:66:e8:40:21:79:bc:59:56:51:
                    1f:e3:d6:06:aa:eb:ca:7b:c4:d5:78:ad:f5:68:a2:
                    e8:d4:ef:48:43:7a:5f:dd:99:64:af:6f:b1:ff:02:
                    d3:23:5f:81:b0:8f:c4:f8:68:e2:4c:2b:ed:f1:92:
                    30:92:0a:63:8d:50:03:a2:13:00:1f:00:47:3d:1d:
                    53:14:50:91:87:53:e7:72:02:9a:07:7d:3d:9c:0e:
                    2d:93:ff:92:0c:e6:cc:e4:a5:0b:14:de:aa:72:7c:
                    71:73:a3:ea:f1:89:dc:2b:81:b0:bb:4a:0c:90:f1:
                    50:0c:53:5b:48:2b:3d:84:91:ea:19:a4:67:a1:af:
                    10:d0:45:55:8e:5a:1f:71:cb:48:49:6d:f6:15:c4:
                    dd:92:3d:10:ca:be:75:1c:1c:6c:4b:f4:54:02:f8:
                    13:94:e4:6f:21:7b:02:19:21:ce:f9:60:8a:1c:0d:
                    12:7d:c5:f4:1d:e2:1b:28:17:8e:10:5c:4c:3c:97:
                    7d:56:fc:5b:fd:e2:68:df:8d:1b:d5:ba:80:09:83:
                    4f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:4B:90:65:60:2D:22:EE:51:9D:77:58:02:C9:73:E3:78:38:C8
            X509v3 Authority Key Identifier:
                keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:69:21:83:88:9b:d5:c7:5f:ee:27:de:43:8c:5f:2a:03:de:
         70:ae:d9:f6:ae:89:10:1d:b0:24:22:40:35:0d:d1:f3:84:c5:
         f3:35:e6:d7:a8:9a:61:7f:0b:d1:b6:e2:10:b5:84:00:b8:cf:
         28:a7:4b:f8:c8:58:2e:87:c8:94:a5:ab:36:41:b4:fc:34:6f:
         23:74:f1:00:83:4e:ef:22:8b:a7:8d:9f:63:e3:05:0b:50:d6:
         da:98:3c:f7:a8:63:4d:34:9a:f7:db:4d:b0:ab:4d:eb:9f:81:
         06:f1:cb:67:8f:52:07:d0:3d:16:4c:ce:4f:b6:be:0b:2f:3a:
         69:d2:fc:11:4b:62:f2:a9:75:ee:fd:83:c2:5c:9a:6f:9b:b5:
         a9:0f:18:67:22:b3:d3:6d:65:6f:4a:97:78:12:43:97:91:52:
         5a:01:34:ec:73:78:07:40:ba:fe:2b:b9:43:7e:17:dd:31:07:
         e3:41:51:d5:b1:70:84:80:b4:c2:f6:29:4f:3d:b9:c8:44:4e:
         d2:53:db:57:c7:a1:4d:d2:22:68:fb:e8:c4:a6:7b:4b:e4:18:
         7a:40:bc:94:9b:fb:a3:c1:1c:41:61:d1:91:fa:75:f1:49:06:
         80:5d:a9:13:c3:e9:9a:f1:76:97:2a:6f:b3:9f:a4:3c:93:2d:
         f8:59:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:44:12 2024 by rpki-client on console-ams.rpki-client.org