Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
File:                     2LogEg7G3ID9NRpTPSyFyg2YMpk.mft (raw, json)
Hash identifier:          tQ4h0S3PPwoEVnxqxHKfWn7qlbxDq5cyAMTA1DZW8L8=
Subject key identifier:   C0:7F:CE:6C:36:5D:25:06:ED:B2:F9:7F:49:26:71:60:AA:C4:D0:D1
Authority key identifier: D8:BA:20:12:0E:C6:DC:80:FD:35:1A:53:3D:2C:85:CA:0D:98:32:99
Certificate issuer:       /CN=d8ba20120ec6dc80fd351a533d2c85ca0d983299
Certificate serial:       019358789FA7B35504CAD0EAF835E9415F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
Manifest number:          0E58
Signing time:             Sat 23 Nov 2024 10:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:00 +0000
Files and hashes:         1: 2LogEg7G3ID9NRpTPSyFyg2YMpk.crl (hash: pN0JdYIYoU+b8CTuWxnNYyCdm6Lf75IAZ3VHhWiS9iM=)
                          2: 9V2BKnKBMK0VJ7PFnAdXsUMYNqo.roa (hash: 0FjCfTTIm1iCsgiAhyU8h37USdk2WAUxdtXx4UpG5E0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:9f:a7:b3:55:04:ca:d0:ea:f8:35:e9:41:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ba20120ec6dc80fd351a533d2c85ca0d983299
        Validity
            Not Before: Nov 23 10:02:00 2024 GMT
            Not After : Nov 24 10:02:00 2024 GMT
        Subject: CN=c07fce6c365d2506edb2f97f49267160aac4d0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:97:49:34:a4:c7:89:88:3c:51:38:0b:66:
                    fb:56:a7:df:19:af:9b:5d:2c:9f:d1:f2:35:01:35:
                    c5:8e:48:ac:2b:1a:3c:8f:a2:c9:8a:18:f1:0e:31:
                    9e:12:58:0f:4a:46:f5:43:86:f4:7a:c6:12:b4:10:
                    6b:e2:c3:ed:4b:6c:5a:d7:4e:f1:4b:19:4a:c1:2e:
                    df:38:29:f2:57:e9:59:d4:f9:58:a4:7e:21:2a:0b:
                    1f:fe:60:0e:05:39:ff:a1:a3:95:53:30:b1:30:09:
                    9b:e4:70:ee:04:6a:cc:70:e0:9b:eb:e3:5a:6f:41:
                    de:2e:b1:3e:ac:87:67:b9:84:e5:49:bd:48:93:8b:
                    eb:7b:11:de:22:b6:f4:1c:34:cc:39:13:46:58:9a:
                    0c:52:ed:f3:90:40:35:04:90:48:c8:77:e4:9e:11:
                    c8:b2:2f:de:c1:18:86:68:9e:b0:c9:b0:09:02:f8:
                    df:01:80:41:5b:9f:c4:fa:6b:e3:2e:18:8b:cc:26:
                    8b:ae:2a:22:05:ed:6a:52:c2:ca:45:35:31:38:49:
                    3b:d9:cf:8f:bb:14:87:73:1e:a3:33:8b:3a:db:1a:
                    75:a0:a0:e2:a1:32:31:b3:d8:ca:1d:06:02:2c:d9:
                    b8:9f:e7:c9:4c:4e:f2:9f:02:76:e7:fc:02:a9:32:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7F:CE:6C:36:5D:25:06:ED:B2:F9:7F:49:26:71:60:AA:C4:D0:D1
            X509v3 Authority Key Identifier:
                keyid:D8:BA:20:12:0E:C6:DC:80:FD:35:1A:53:3D:2C:85:CA:0D:98:32:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LogEg7G3ID9NRpTPSyFyg2YMpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7fac44-610f-485c-ae11-18ea1d5fef2d/1/2LogEg7G3ID9NRpTPSyFyg2YMpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fd:8c:ac:07:aa:d0:44:91:31:58:23:71:b3:d9:a7:7d:c4:
         f1:8a:21:59:dd:60:98:a6:69:9b:c6:35:34:d7:11:00:b4:42:
         3e:88:e0:f6:da:e6:80:8f:e8:ab:26:f6:5f:47:68:e4:29:23:
         74:21:1b:7f:51:14:ae:0c:db:5b:e9:32:18:54:c5:7b:92:f7:
         5d:b3:1d:3b:b0:1c:33:39:26:f9:21:d1:b7:66:dc:77:62:31:
         26:62:2c:cd:2a:06:7c:39:f4:e8:c4:5a:63:e1:48:e3:d6:36:
         37:c9:1f:7c:a0:3c:10:75:1e:d2:d0:4f:c1:4b:c0:a1:7c:57:
         75:e3:1e:e0:b3:8f:d9:93:e8:e0:4d:de:25:89:72:24:d6:ca:
         69:07:6d:eb:ee:88:23:22:e6:2a:d8:8e:3c:53:3e:0a:01:cd:
         5b:2d:f3:80:0b:5a:0d:09:b7:bc:14:22:87:8d:c6:e6:10:57:
         c6:6e:f4:ce:81:6f:2c:83:43:f4:ba:20:5b:6f:a3:b6:df:a6:
         53:d9:bb:de:7a:d4:50:97:dd:34:52:7e:93:ff:23:c7:ab:a9:
         a8:fb:25:b6:ad:91:1f:fa:c7:97:69:30:f4:a5:f4:d1:65:1c:
         8f:8b:ad:1c:de:7c:8d:f8:4b:62:c3:75:72:8c:9f:f4:7b:b2:
         a0:89:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:58 2024 by rpki-client on console-fra.rpki-client.org