Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File:                     G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier:          ITDJe7f9DShom2u/UEI6bcfo0iZxofVcuF+JhaVHBpY=
Subject key identifier:   20:70:5C:3B:E7:F4:A8:02:51:93:3A:CE:52:8C:4F:92:06:19:3B:B1
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer:       /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial:       0191FA47C85635CE6FB570D9699E3768551B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number:          9F
Signing time:             Mon 16 Sep 2024 10:01:33 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:33 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:33 +0000
Files and hashes:         1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: e3pq0WccpZ6VKDy2KLlAuUtk6Jry7FfQVY2tnUycWzI=)
                          2: Rq0weHdSz0ZE5A2IDGXPoTsJAOw.roa (hash: BNeEiYP4GcUhWQPWNx7tEqL1O1iUsp+lHqKsZ/E/ZSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:c8:56:35:ce:6f:b5:70:d9:69:9e:37:68:55:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
        Validity
            Not Before: Sep 16 10:01:33 2024 GMT
            Not After : Sep 17 10:01:33 2024 GMT
        Subject: CN=20705c3be7f4a80251933ace528c4f9206193bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:0c:f2:60:6b:26:a7:b5:c3:52:a6:40:06:
                    74:5c:8d:20:2a:dd:49:35:d7:b8:89:19:b4:a3:31:
                    81:01:e4:89:e1:d0:74:bb:2b:18:ef:1c:08:8d:91:
                    12:f2:4b:0d:fe:d6:ef:ae:9e:87:ef:21:c1:2a:d2:
                    4c:cf:cd:5e:40:2e:bc:9e:d1:31:64:41:8b:e4:d9:
                    2e:c2:2b:45:89:a2:92:09:1e:1c:05:45:ba:e8:a3:
                    ed:22:6f:e9:33:37:08:bd:e3:59:68:8e:d0:b3:47:
                    f5:e2:52:64:ad:e1:2f:81:29:22:79:1b:1b:4e:8b:
                    13:88:8b:8f:06:c6:7b:60:51:29:de:27:b1:dc:e9:
                    83:87:3e:cd:4d:d1:a2:44:18:f8:82:67:77:a4:e0:
                    5e:d4:45:54:b6:63:7d:82:d4:38:01:d9:2f:8c:ab:
                    93:a3:42:c2:72:4f:d8:29:1c:1f:ae:2b:ad:dd:c6:
                    54:33:e6:cd:dc:55:96:2b:e4:00:5f:94:80:81:40:
                    df:2b:6f:f8:1d:3d:03:e9:a8:c9:75:ca:2a:04:09:
                    85:b0:46:f1:34:5e:a4:2d:9e:1b:1e:21:57:85:97:
                    1d:21:d3:37:c4:3f:98:73:15:ce:17:f7:ce:9b:55:
                    d2:0a:13:34:31:02:e9:93:7e:08:f2:9a:ef:fd:71:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:5C:3B:E7:F4:A8:02:51:93:3A:CE:52:8C:4F:92:06:19:3B:B1
            X509v3 Authority Key Identifier:
                keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:80:1b:e4:48:f4:f4:73:7a:fb:e9:cb:aa:3d:c9:98:92:fc:
         e0:02:02:9b:91:62:61:be:fd:6d:01:d5:b2:c5:b5:1e:82:cb:
         85:05:ef:1e:a5:9b:07:db:a9:25:9c:34:24:d4:26:21:61:55:
         2a:52:7b:59:e8:f2:a2:1d:db:61:47:1d:bf:6d:76:cc:08:08:
         2a:c1:f3:bb:4e:75:1a:f6:d1:8b:5f:18:8b:51:1c:f5:df:15:
         c6:0a:40:e1:4e:25:bc:ee:d9:ca:ee:8d:f1:3b:1b:5c:80:ae:
         70:d3:89:0b:a2:d4:eb:f6:3e:71:5c:ad:d6:7b:0f:ad:5d:bb:
         94:25:65:b1:95:a0:7b:0e:58:cc:2c:15:09:f9:d0:4d:9f:fc:
         97:23:58:25:67:e6:be:cb:42:3e:e5:2b:08:ee:d5:0d:60:2b:
         f6:f3:ab:a6:77:62:c3:2e:6a:dd:b2:83:9a:25:0b:20:2a:11:
         8c:6a:ad:d4:06:ed:de:8a:b1:48:a5:11:61:29:3b:c8:b6:1e:
         f3:da:a0:85:1e:7c:1b:31:e3:35:f7:42:c2:ff:3c:75:d7:1c:
         06:67:cb:c4:f9:9d:d0:8f:bb:7d:d5:36:1a:81:69:93:28:ca:
         97:2f:be:69:8e:a3:7b:85:cd:a1:52:5b:bb:eb:47:86:73:f6:
         f8:03:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:15:40 2024 by rpki-client on console-fra.rpki-client.org