Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          fyTbgAit9wXzf7VByI95X65vsyi0lOjICnUi7v5m/1I=
Subject key identifier:   4B:A6:43:B5:76:CB:84:53:E7:9C:DB:D6:63:69:D9:D1:66:71:7A:1A
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       01936AEB2CB05F2D55715918F2232D16FD9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          1380
Signing time:             Wed 27 Nov 2024 00:00:17 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:17 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:17 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: l087qq4/V1l74lUIyaOOoAGt54mDFyC46veuEIFvEqA=)
                          2: Fyd1iSkWIKSYrc8LbgZvIEh7FTA.roa (hash: rW4v6N0TuiiRYB30peeVZlHzMNo2UxTxA8bz+HoImJs=)
                          3: hnsEPSgfNb_dsPgblQIItMN1wv8.roa (hash: MTnq+UDECUCzniKYyVbZtGRfeQTbtaYbpUS06qKiY6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:2c:b0:5f:2d:55:71:59:18:f2:23:2d:16:fd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Nov 27 00:00:17 2024 GMT
            Not After : Nov 28 00:00:17 2024 GMT
        Subject: CN=4ba643b576cb8453e79cdbd66369d9d166717a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:ba:0c:6c:99:67:e3:7a:5f:9d:c1:18:d0:
                    bc:f5:64:ed:f3:27:6c:a1:8a:ea:02:5b:88:91:5f:
                    f5:3b:57:96:c6:b6:3e:6c:1f:ef:56:eb:04:4b:23:
                    58:88:4a:26:41:ee:44:6b:0c:3c:99:94:29:6e:5f:
                    34:f5:43:4e:65:25:96:a4:4a:d9:c7:65:92:43:0f:
                    f1:56:ec:36:92:5d:46:0f:f4:60:46:d3:13:8e:a1:
                    b2:27:6a:8c:72:5b:c9:44:0a:ce:1f:d3:73:e7:e3:
                    16:4e:f3:73:d3:69:29:d9:3b:1e:2e:f8:b7:6f:87:
                    54:a2:73:ef:26:50:e9:84:e2:d2:bb:2a:4e:f4:1b:
                    13:56:28:5d:c0:f3:89:21:05:2c:4a:bc:a2:26:c0:
                    d0:f7:25:5b:b1:8b:46:e9:e4:9a:01:b1:74:1c:17:
                    eb:e4:6f:a7:34:84:08:9f:de:7e:96:75:b3:dd:44:
                    5f:34:ea:49:3f:d1:da:24:90:9b:fc:c1:48:72:d8:
                    1d:54:eb:2d:ea:7d:94:d6:e9:31:27:51:7e:75:85:
                    7e:f2:43:74:74:d6:6e:38:ff:9c:ba:2d:6c:3e:ed:
                    5e:ee:b8:70:78:ce:06:ce:7a:33:11:90:b3:0d:42:
                    db:36:2b:ec:5a:a4:93:c8:51:38:c2:5e:16:5a:84:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A6:43:B5:76:CB:84:53:E7:9C:DB:D6:63:69:D9:D1:66:71:7A:1A
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0b:57:02:37:9d:58:77:9f:67:62:9c:51:a0:63:06:37:55:
         35:5f:67:38:00:f9:ad:77:f6:a1:ed:0e:48:ce:97:b4:83:c0:
         32:d3:15:08:7d:ee:42:1e:63:9f:dd:7a:9c:06:7f:a9:3b:aa:
         df:79:de:f1:86:28:76:40:5e:d2:86:23:a2:2d:e1:66:cd:d5:
         97:ed:2e:4c:fc:7a:40:06:2c:84:b6:ac:6e:62:e1:82:79:8e:
         ce:3a:40:48:74:25:e5:21:cc:bd:1b:06:e1:3a:e3:bf:79:e6:
         6f:8d:95:c2:45:62:34:b7:b4:31:d5:3d:ef:03:96:1d:b0:c8:
         d2:bc:10:9c:1f:d6:d8:f4:65:a9:c6:21:28:c3:1e:d9:45:ae:
         95:c5:53:3f:fa:a8:a1:87:53:62:23:d3:b7:6d:11:b8:ff:a5:
         fe:48:27:89:c2:b6:9b:6c:ef:1d:50:a4:11:97:74:ab:ff:5c:
         7f:12:cf:2f:29:51:4b:c1:24:5d:41:07:cd:16:04:bc:24:c3:
         b2:79:38:54:6f:51:95:de:90:ee:2a:5a:e2:72:aa:56:99:b3:
         1b:67:19:3f:6e:88:00:55:08:0f:c0:93:be:dc:51:cf:0d:bd:
         ca:f2:06:39:1c:6e:6c:2a:1f:2e:0f:33:ad:63:bf:4d:dd:f3:
         aa:43:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:45 2024 by rpki-client on console-fra.rpki-client.org