Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          GxO32yGa6l6HXCpV/gkjXEJAo96gaYhvwofwoGTnS+c=
Subject key identifier:   D4:6A:5F:E7:C3:4A:1B:B4:A3:62:5F:D2:D0:5E:DF:7C:3A:07:0D:F2
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       0193561AED96E200D01F7859F876483B4212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          025B
Signing time:             Fri 22 Nov 2024 23:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:25 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: f/QF01akA2W52DC0OQWs5GzddcCi89cQMV0c4wY7sf4=)
                          2: AXFMAuQFiImdG2wTbjh2NfyFUIs.roa (hash: kda6Uef68murp0/KoNVqOJMqb+aSnitbRVah/zHfpzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:ed:96:e2:00:d0:1f:78:59:f8:76:48:3b:42:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Nov 22 23:00:25 2024 GMT
            Not After : Nov 23 23:00:25 2024 GMT
        Subject: CN=d46a5fe7c34a1bb4a3625fd2d05edf7c3a070df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:fa:aa:ef:ac:b1:a9:df:0a:69:6f:a8:e4:
                    99:d7:0d:5f:af:c7:31:f2:3f:bf:9b:aa:98:1f:e5:
                    f7:1e:2c:e0:fc:28:61:43:69:f1:53:35:1d:37:55:
                    60:c7:d1:0d:26:03:1c:63:b3:32:a1:14:65:8e:14:
                    e1:0c:5d:0a:e1:88:94:ee:c3:6b:b3:19:44:ba:d9:
                    72:83:ad:a6:14:4a:33:f9:b7:cf:1c:34:71:92:0c:
                    38:c6:29:aa:37:fa:cf:d6:25:f8:06:d2:3d:93:ea:
                    cb:00:3f:7b:18:ba:fc:7a:5f:af:e5:c9:29:e7:34:
                    d9:19:60:cb:db:5b:69:3a:ae:5e:a3:f8:65:3d:6a:
                    7b:4a:08:fb:34:0f:6e:81:b2:3f:1d:a9:40:ab:5f:
                    b9:e6:4a:a2:f1:e8:6f:03:c0:b0:66:d9:69:cb:9b:
                    e2:90:77:2d:a2:72:a5:ae:ac:18:a5:1f:b8:64:7f:
                    d6:7b:ff:a1:f4:eb:52:3d:a7:35:7a:a5:2c:31:ec:
                    aa:df:7a:0a:5e:32:16:2f:48:56:02:d6:12:82:46:
                    a2:c6:7c:bf:1a:1b:dc:56:54:df:72:ad:98:5d:be:
                    45:3e:ce:27:44:16:42:ab:a0:96:70:42:34:b8:a1:
                    ce:82:9f:d8:83:72:6f:e7:ea:23:90:7f:33:83:1b:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:5F:E7:C3:4A:1B:B4:A3:62:5F:D2:D0:5E:DF:7C:3A:07:0D:F2
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:5e:5b:bf:b6:8b:11:55:2b:1a:85:6f:22:5f:43:b7:3b:
         f0:f7:3d:24:54:27:1d:93:01:da:51:a5:03:e3:42:ff:59:3f:
         95:b8:b4:2d:28:0f:b3:00:d2:9c:92:c6:00:73:5b:e7:ca:22:
         e0:60:ef:95:19:7c:15:b4:0d:a0:59:73:33:8c:50:4d:ed:f7:
         65:81:82:d2:12:67:fc:a0:13:b8:84:ba:28:2f:8a:a6:f7:a6:
         3e:49:2f:47:b2:f1:8a:15:11:be:68:3f:68:73:32:40:81:d2:
         c5:db:25:83:b9:26:94:5e:aa:09:c2:b5:7a:4c:14:1d:15:8d:
         f9:06:a6:3f:72:e5:c0:6a:fb:b9:bc:7b:8b:28:af:e5:ab:85:
         7d:fb:35:38:f9:a0:9a:b9:d5:b3:4c:c1:e3:9c:59:69:c1:17:
         3d:0b:c3:61:9c:a2:89:b6:3e:1c:b6:ef:0b:a7:26:0b:b0:b4:
         e9:fe:08:a4:a8:a9:ba:11:13:63:24:54:d6:2f:6a:91:72:ad:
         5e:2b:63:5b:35:f8:92:6a:37:3c:36:8d:38:3d:7e:23:5d:73:
         00:56:b0:81:06:53:ce:09:66:11:7b:55:89:46:e8:a2:72:36:
         40:2e:24:01:26:f9:58:e6:1c:c9:0c:55:9d:04:ff:91:ed:93:
         7c:53:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:06:36 2024 by rpki-client on console-ams.rpki-client.org