Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File:                     wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier:          ZevWngBd+R7sSJkGhxttOV5asdE3ASpBphxjkxCirLQ=
Subject key identifier:   79:E1:FC:2F:B5:76:0D:B5:2D:36:37:9B:F0:2D:4D:45:C2:AD:79:D9
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer:       /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial:       01935651A9199058522AC54A12DAFCA1D8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number:          76
Signing time:             Sat 23 Nov 2024 00:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:12 +0000
Files and hashes:         1: 0AvsaKhi_X4x4Co6PAxKjjIChd8.roa (hash: I8iKCNfM4WbePU3RiqtuEj1Ax6nZT3W/H/DhSFY1dSE=)
                          2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: KCvHzIJ2JZQoTbX8mK1invEcbheCWUDt892jaQS585I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:a9:19:90:58:52:2a:c5:4a:12:da:fc:a1:d8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
        Validity
            Not Before: Nov 23 00:00:12 2024 GMT
            Not After : Nov 24 00:00:12 2024 GMT
        Subject: CN=79e1fc2fb5760db52d36379bf02d4d45c2ad79d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:5c:07:fa:89:cb:0c:53:ec:46:31:13:73:
                    4f:ea:61:5d:92:d4:79:c0:5c:8f:3b:71:c1:0b:c8:
                    32:41:26:d2:85:61:a3:c4:ed:89:fc:b2:1f:0e:a4:
                    d7:0c:bd:ab:88:fb:3d:00:55:f0:dd:cb:88:8f:9e:
                    a4:e9:ab:1a:3a:02:ea:cc:2a:f4:a6:95:33:00:62:
                    d5:68:e5:e5:90:53:38:54:6a:a3:26:e5:4b:00:b2:
                    eb:c6:10:fb:2f:d2:fb:b1:49:0b:23:55:2a:41:51:
                    eb:ea:8d:83:3c:36:75:9a:b4:43:fd:cd:54:b8:94:
                    e7:4a:ef:0a:7a:4a:25:ce:4a:72:ba:50:d5:8a:44:
                    0c:6e:40:fd:0f:f8:a5:af:b0:ed:eb:c7:33:ab:8d:
                    b0:a5:4e:f1:e5:38:6e:87:2c:b8:20:d6:8a:ea:9a:
                    53:fc:01:71:ee:38:a6:14:c6:23:e4:e2:29:69:98:
                    7a:ba:c7:06:9b:9c:38:f9:84:99:07:e4:35:e8:e6:
                    19:54:f5:16:9b:4f:2d:3a:08:bb:95:6c:f8:83:9e:
                    77:26:14:83:19:fe:d9:d6:17:88:76:e1:a5:b8:10:
                    4c:52:98:62:d1:b1:76:ce:31:b7:40:e8:61:41:50:
                    0e:90:8c:ca:7b:35:83:15:2e:08:bd:97:27:47:d7:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E1:FC:2F:B5:76:0D:B5:2D:36:37:9B:F0:2D:4D:45:C2:AD:79:D9
            X509v3 Authority Key Identifier:
                keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:4b:bb:65:14:2e:2b:02:ff:2d:dd:11:0f:b9:fa:c2:cd:
         ce:95:20:79:af:6e:9c:40:7d:fe:bc:38:96:44:c5:3b:7e:e2:
         b6:ce:35:1b:6d:bb:be:1e:74:b3:79:e3:09:2c:7f:fb:d2:13:
         73:2c:c0:ff:aa:a8:39:e9:e5:d8:40:85:b9:30:b4:cf:e6:58:
         9e:2d:8d:a0:af:50:7a:c3:52:5b:dd:1e:7f:bd:f4:68:2e:5d:
         99:ef:d7:d5:55:7b:cc:a8:1f:53:48:e8:f3:7d:6d:1e:42:06:
         f7:30:f2:64:c7:ad:80:2f:ec:4b:b9:83:4f:73:cb:75:00:a6:
         a1:9f:20:e0:80:77:db:74:3b:69:50:d4:81:4f:e7:6b:db:ed:
         bb:b3:77:b7:09:da:44:3c:93:1f:48:6e:53:c0:08:1a:16:15:
         46:b1:54:f2:07:36:ad:02:d8:14:93:b6:96:ed:a4:e6:40:0f:
         63:dc:50:81:cd:ea:00:42:b9:70:4a:b6:4d:81:c7:07:05:33:
         69:f8:3d:29:c6:1b:49:62:c6:ad:53:c4:7c:9f:3c:e7:ea:3c:
         e8:aa:1d:3c:94:6a:d6:da:34:07:47:aa:f6:8e:06:9a:07:a3:
         0d:71:49:d7:54:c1:6a:ed:1c:2a:07:25:89:e2:d4:99:7d:1e:
         80:7d:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:52 2024 by rpki-client on console-fra.rpki-client.org