Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File:                     4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier:          Hi9kQLsMLZSH+GSK3m9Ud28xBUnX4hajMmIQ+f/i0wg=
Subject key identifier:   6A:67:26:FA:6D:93:66:20:44:20:FB:40:BA:E4:DC:B9:82:37:C6:16
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer:       /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial:       01935764DD6EFB00B3768A44C60CDC42370B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number:          06E6
Signing time:             Sat 23 Nov 2024 05:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:48 +0000
Files and hashes:         1: 1-LQTI-rnfNlpZG1Cxm7OTRsUPnA.roa (hash: zzlyMmpSzjs3KTIFEAomAJoBbSJB1D+DoHudQuvZ610=)
                          2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: mXTxcmnGWN7NvPpkDcND8/UoTcomncb8u53Of0WsgjM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:dd:6e:fb:00:b3:76:8a:44:c6:0c:dc:42:37:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
        Validity
            Not Before: Nov 23 05:00:48 2024 GMT
            Not After : Nov 24 05:00:48 2024 GMT
        Subject: CN=6a6726fa6d9366204420fb40bae4dcb98237c616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:e6:38:5f:41:d2:4e:65:fa:a3:44:38:81:
                    1f:27:bb:0b:cb:3f:ae:7c:86:a8:bf:65:12:9f:2c:
                    63:0f:ab:03:d7:24:ef:e1:15:6c:b1:5f:f4:99:42:
                    f4:66:61:71:96:f3:34:c4:1a:e6:1d:34:97:3f:10:
                    a6:31:84:f9:c1:b4:5d:fb:5f:b9:d6:ad:25:d9:df:
                    31:ac:b0:39:ac:90:56:79:24:b8:fd:bb:47:b3:be:
                    89:38:ad:4d:3b:7e:58:3c:e4:80:cb:07:f3:a6:f0:
                    c3:2f:ed:04:41:74:e3:2a:09:25:a3:68:45:af:b3:
                    21:26:f1:60:21:0a:7b:04:7f:a0:a0:6b:60:90:ca:
                    7e:5f:3d:3f:ac:08:79:67:a6:1a:08:d2:7b:3c:05:
                    05:73:db:d2:0c:0f:12:16:94:e3:0a:2e:d0:09:c7:
                    51:df:3d:0e:f1:ca:02:d5:dc:ab:0e:21:9f:2e:01:
                    30:f1:b6:37:a4:5d:0f:98:0b:7b:eb:d3:56:c2:45:
                    49:f4:b8:06:5a:6f:da:ca:83:5c:00:20:67:0e:50:
                    11:e2:49:49:a2:ea:8a:e5:7d:61:dd:d3:e8:37:70:
                    d5:9f:5c:13:b4:3d:9d:01:3d:05:99:87:f9:5a:04:
                    ae:d7:82:a0:c7:53:96:57:be:3f:1b:d1:bf:eb:e5:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:67:26:FA:6D:93:66:20:44:20:FB:40:BA:E4:DC:B9:82:37:C6:16
            X509v3 Authority Key Identifier:
                keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:f3:cb:ca:af:b2:ac:31:e0:74:ff:ab:4e:fd:9e:97:a3:
         10:35:f9:95:5e:03:4c:b6:59:d4:13:4b:c4:8a:92:d3:5c:f5:
         10:3e:d8:4e:be:85:82:c3:f3:d6:99:0c:e4:6b:d6:2d:e1:4e:
         4b:05:f3:a9:97:cd:cd:05:fc:97:04:03:14:bd:f3:7e:10:38:
         03:e5:3a:0b:94:c6:13:5e:d7:34:8d:0b:b3:3e:63:75:e5:c9:
         93:0a:f7:2c:54:a1:78:9c:00:43:4c:33:3a:c4:90:39:4a:3c:
         70:a4:be:52:d3:cf:f0:96:d2:88:cf:5a:4c:08:11:7f:52:b8:
         09:93:e5:54:9c:8f:58:de:74:5a:9e:ce:bb:0f:c2:72:d0:e6:
         05:3d:2a:5a:dd:d3:bd:6f:66:bc:75:f9:3a:ea:2d:e8:f6:d0:
         e7:4b:be:7e:d8:66:02:a1:41:6b:a9:d0:c9:96:0b:68:2c:91:
         b8:4c:b3:a4:81:03:49:35:4d:ae:c5:3b:59:26:91:f7:e2:36:
         4a:e8:3e:40:c4:3e:10:3d:26:f1:44:5d:a4:6e:5b:84:8e:79:
         e2:10:c4:03:33:50:8f:3a:77:29:a4:b1:d8:da:e9:9c:1d:f8:
         37:e7:4d:d7:bc:8c:13:0b:56:d3:54:1f:c5:37:4d:13:cb:a6:
         48:a2:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:22 2024 by rpki-client on console-ams.rpki-client.org