Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          nrNmNdKXq568p7KtMJH/0IkdJYUo0IVQV8/C0cb20uk=
Subject key identifier:   DD:BB:2C:33:3B:F2:38:14:9B:84:AE:ED:61:5A:45:46:07:88:36:36
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       0193568B1B4CFEB17EE7F971398091309DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          1376
Signing time:             Sat 23 Nov 2024 01:02:57 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:57 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:57 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: odgszGuwY7E6HoEs4Sqq64c1PczQXb+RXPT6G46pdrU=)
                          2: AmulEq34E5ioacYzNAAHO5Bx4j8.roa (hash: q9ufjJtKCOFUedU4D/NiE/TMwb/5BdulUQqNFRauYkY=)
                          3: Jxa9S4YiEUO2lP2akFFsy67vlYk.roa (hash: xFerZuh8bHl9rVLcfXG2nYbxooRjAQGO2Rt92DELTls=)
                          4: aExIHfZFEI4g8RNFo8RNvYYLF4E.roa (hash: WJNi1Z8fUFXzUnvSCVSfyDm+JVuUGuTSlH4JVIClHXA=)
                          5: eESvGgxD2gdyKlZq5QiJCi1mP6w.roa (hash: F9X6GXskhhq1C4QI6GWWPnXNMGuFZLyDCnxRY6kUX70=)
                          6: xCv6Um_kr0ojcJdnegz0VKWhEVc.roa (hash: zJ+TIXiRmN3YbrDApcVvqZwlqoo95+W7uUj7tukkIPQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:1b:4c:fe:b1:7e:e7:f9:71:39:80:91:30:9d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Nov 23 01:02:57 2024 GMT
            Not After : Nov 24 01:02:57 2024 GMT
        Subject: CN=ddbb2c333bf238149b84aeed615a454607883636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:ab:42:59:45:2f:34:fb:cb:5f:de:7f:35:
                    6e:65:18:ab:a1:bd:93:49:3a:cd:06:9e:6d:dc:b9:
                    62:38:3b:b1:62:45:20:e5:37:82:4f:7f:1d:05:09:
                    ed:ea:0b:a4:04:50:d6:70:8e:56:0e:4c:56:a8:49:
                    ce:f6:ad:b1:c2:33:ba:40:49:db:5b:3c:06:d9:75:
                    5a:fe:d4:15:b5:74:17:a7:0f:57:74:c1:3a:85:1c:
                    9b:42:bf:a4:ce:f2:c6:94:ce:b3:21:cc:54:ba:3e:
                    a2:4b:3b:e1:7c:ac:60:73:fc:51:37:37:de:60:a6:
                    7d:91:13:01:7a:70:6d:79:9d:dc:93:64:58:3f:1c:
                    57:3c:5e:70:81:7d:1c:0a:d2:0e:24:32:b0:f5:21:
                    f1:04:f2:9d:26:3c:69:dd:ac:85:4a:9d:16:ea:4e:
                    b4:56:3a:65:8a:b5:f8:fc:54:d4:4e:83:b7:49:f7:
                    bd:56:c8:fe:95:22:3d:2c:2b:86:32:99:35:21:6d:
                    e7:0a:97:d8:9d:fd:5a:8b:0d:4c:26:12:c5:5e:27:
                    89:53:b8:f1:78:ed:2c:84:de:6a:55:13:c2:a8:26:
                    22:9e:3a:73:39:67:87:50:8c:17:67:26:23:d1:fd:
                    ec:8a:3d:8b:92:76:eb:24:5e:68:0f:56:d0:cc:fe:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BB:2C:33:3B:F2:38:14:9B:84:AE:ED:61:5A:45:46:07:88:36:36
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:77:c5:6d:e4:8f:34:0e:29:f8:54:4b:b7:4b:59:06:84:89:
         81:50:1b:45:2c:13:1d:92:71:f3:62:e6:6f:0d:20:18:52:73:
         1f:f9:32:33:32:68:3b:e5:fd:96:16:59:31:24:95:66:d5:ac:
         b5:ee:6e:b9:85:84:08:b4:28:36:04:52:42:51:75:d9:31:06:
         76:c6:c9:af:cd:be:e4:1a:cf:f0:48:99:c0:94:3e:1c:7b:41:
         3f:7b:36:20:3f:10:c2:32:8c:29:9f:a4:17:fe:bf:84:e5:56:
         6f:dc:26:45:1c:66:af:9c:18:8c:5c:04:19:8b:29:be:5b:f0:
         ac:12:ed:bc:17:9d:4e:38:e0:ae:28:12:a6:2c:53:9b:74:55:
         6e:30:4a:3a:d2:33:09:f0:02:7a:19:ee:fe:ba:87:64:79:42:
         41:20:1f:22:bd:df:97:47:05:d6:b4:ce:9c:e3:42:e1:48:9b:
         b1:86:ea:ba:1e:a2:ae:3d:b7:6d:b4:7d:13:c4:ff:a5:a8:89:
         33:34:17:3d:6e:e7:22:b0:53:16:cf:98:eb:75:79:99:1d:68:
         97:3b:30:35:8c:8f:e2:45:da:7f:cf:ae:2d:dd:77:42:37:1c:
         d8:bd:73:5c:1c:9f:a1:13:dc:0d:36:33:fd:bb:63:1f:f1:67:
         cf:8b:7f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:37 2024 by rpki-client on console-fra.rpki-client.org