Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File:                     nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier:          p/b6gzcSN9zrbNCtwMXmzvwvIdqJ8Hif59wKGg6vd6s=
Subject key identifier:   F5:5A:F3:A5:F9:DA:E9:ED:BC:71:8A:E1:C2:2E:12:A1:1D:F8:3D:98
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer:       /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial:       0193568A2D984E33CC75DDA8BBA9D679A38A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number:          0785
Signing time:             Sat 23 Nov 2024 01:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:56 +0000
Files and hashes:         1: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: vZ2wgHbe7GVV4k0sYD4cHIlCATKXYn0LLfnN486wk2g=)
                          2: oCGnfz5UaVYCtJBUc4rOxYL2IGU.roa (hash: bwnhX367x1vCBVhv4w4XOJU45xmzKXDUwqVb1RnVn08=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2d:98:4e:33:cc:75:dd:a8:bb:a9:d6:79:a3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
        Validity
            Not Before: Nov 23 01:01:56 2024 GMT
            Not After : Nov 24 01:01:56 2024 GMT
        Subject: CN=f55af3a5f9dae9edbc718ae1c22e12a11df83d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:5c:15:fb:b8:97:af:84:2d:53:a9:c6:e0:
                    c6:18:dc:c0:3a:bd:c7:9f:ca:2d:d1:0f:22:ca:0d:
                    80:27:32:ae:00:17:37:8b:f9:cd:53:fa:c1:64:c3:
                    7a:1a:ef:5e:0f:00:83:06:5f:8c:b4:43:e8:30:c7:
                    a7:1b:75:65:a9:ed:c4:77:6d:51:b8:7a:0a:b0:d0:
                    ec:fc:d5:30:8e:91:ac:b6:1a:6c:73:4b:3c:b9:28:
                    63:31:6b:5f:42:f5:e2:8c:84:b4:2f:b5:28:13:22:
                    74:18:55:f4:6f:7b:c2:9b:b5:e6:b2:a4:76:eb:83:
                    a5:12:e8:31:1f:47:65:52:9f:6f:61:75:cc:e0:28:
                    8d:24:07:73:a2:e3:d2:82:81:1d:f4:71:d5:04:2b:
                    f1:55:23:d5:04:cc:90:42:5c:96:9d:17:58:4c:7e:
                    ff:f8:4e:c0:b8:d2:16:57:15:aa:e7:0d:80:86:4a:
                    bb:3c:29:db:01:a7:a2:67:ec:0b:a1:92:f0:6a:d3:
                    f2:dc:2f:63:30:4b:36:c2:5a:b4:77:51:54:9a:cb:
                    01:d7:3c:d3:71:a6:34:1a:17:8a:ed:0e:93:43:2e:
                    04:98:34:75:05:a1:e8:aa:01:09:98:a7:aa:13:fc:
                    96:19:34:d6:70:6d:05:4f:05:38:91:52:2e:29:6a:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5A:F3:A5:F9:DA:E9:ED:BC:71:8A:E1:C2:2E:12:A1:1D:F8:3D:98
            X509v3 Authority Key Identifier:
                keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:e3:eb:cf:ba:4b:5a:e6:13:76:99:b4:66:1f:08:e4:e6:
         bf:21:57:c1:2a:8b:8f:e9:25:34:52:a5:0c:5d:bc:35:7f:21:
         ce:be:e4:bc:a4:13:03:75:ca:f8:ca:d6:96:02:22:e4:9c:a8:
         e9:e5:f6:92:91:e2:c7:e8:33:eb:22:c1:68:a1:37:7f:8c:72:
         8f:c8:16:97:dc:43:c5:e5:0a:62:1c:23:e8:8f:34:ba:1d:fc:
         cf:13:76:0a:00:45:7d:ee:74:9e:80:45:b9:4c:62:e0:8b:ae:
         e1:40:f4:64:fc:c3:18:6f:e8:0a:44:7d:97:92:fc:75:6e:50:
         c4:d7:8b:8e:5a:e2:52:da:21:14:48:49:46:2c:e1:db:c5:0e:
         5a:d4:1c:20:d8:ce:df:b1:77:f8:96:3a:78:29:de:17:a2:c8:
         4f:cd:67:77:12:70:e2:d5:4f:b1:ee:6d:da:73:e4:2b:92:20:
         e5:e6:c4:ee:7b:2a:e8:96:83:f4:59:bd:b5:05:5e:ea:8b:c1:
         39:37:15:8f:a1:43:f3:08:c8:98:d0:bf:ed:85:5f:70:71:98:
         bc:e2:ea:df:e9:83:86:97:55:c9:63:6d:ab:73:10:a2:b6:ea:
         12:d4:4d:79:78:f5:08:94:a5:3e:be:e2:81:09:52:fb:6d:3d:
         60:57:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:58 2024 by rpki-client on console-ams.rpki-client.org