Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File:                     2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier:          fGztxk+FaiE8fup7DfrwkNxw0CSDWDZDbwzhRuvvDFI=
Subject key identifier:   06:C0:78:29:3A:12:D1:86:84:62:B0:CE:98:36:31:A6:DF:3A:9A:6E
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer:       /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial:       01936BC85AD6AC5940C87C49B5BEBA0CCBF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 04:01:52 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:52 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:52 +0000
Files and hashes:         1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: coNVD+thRhxXBfjs31AEMad/0uNHFb+iLyecTeb5gJE=)
                          2: JaIluHb9Ol2H67Ys_nrWjj3A9ig.roa (hash: LP+bDdFCcwv92ikvTs/m9H7GE/XhiIk1lICpND9OEV4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:5a:d6:ac:59:40:c8:7c:49:b5:be:ba:0c:cb:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
        Validity
            Not Before: Nov 27 04:01:52 2024 GMT
            Not After : Nov 28 04:01:52 2024 GMT
        Subject: CN=06c078293a12d1868462b0ce983631a6df3a9a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:13:56:64:3c:d7:93:c1:a7:a9:d3:75:2c:
                    bc:23:fc:4f:f4:23:66:4c:cf:8b:aa:12:c1:c8:f6:
                    f6:b6:9f:9e:7d:eb:92:81:53:0f:7b:0f:8c:b4:4c:
                    16:5a:b6:36:29:1f:9d:62:ef:e2:73:ad:22:33:8f:
                    0d:06:65:61:b7:ac:f9:38:90:87:1a:cf:53:c5:8c:
                    5c:e0:e1:3d:4e:b4:56:d7:89:fa:a7:7b:00:ae:72:
                    16:8e:25:65:d2:18:90:8c:df:bb:22:d8:c7:2a:d7:
                    61:f8:af:93:63:91:ea:79:d3:eb:2f:ba:64:a6:55:
                    1a:65:e3:d3:0a:26:cc:e8:67:f4:86:e6:7c:ff:b1:
                    b5:f7:9b:b5:71:f1:52:ae:16:39:5f:66:4a:90:93:
                    5b:d6:93:5f:0a:8c:20:d6:9d:ac:9b:f4:3b:8a:ef:
                    4e:7c:6e:29:96:93:70:a2:a9:69:6c:ef:05:39:4b:
                    84:ea:73:6d:e3:8d:13:16:61:86:60:4d:b4:d4:ca:
                    80:21:6d:b4:d5:bb:64:02:1d:0f:55:36:b8:d1:b6:
                    0f:18:6c:af:84:3d:85:b8:62:9c:52:b1:08:46:a9:
                    82:7d:3f:33:3d:78:4c:c1:6e:75:ee:d9:99:8b:2c:
                    d7:27:8a:32:ba:25:60:18:ab:82:63:8b:ff:97:86:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:78:29:3A:12:D1:86:84:62:B0:CE:98:36:31:A6:DF:3A:9A:6E
            X509v3 Authority Key Identifier:
                keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:52:12:3c:43:73:a1:65:61:cf:0a:d7:ad:b0:f7:84:c1:
         b9:9f:d6:5c:5f:e8:77:8d:80:30:a8:d2:88:b5:bf:2e:7c:f1:
         24:64:ea:9f:fd:47:23:e8:25:9a:d5:e7:d3:00:48:d4:79:16:
         de:55:e0:6c:cf:03:c6:76:1f:e4:76:df:e3:d0:22:f8:7c:2b:
         3f:b2:5a:20:d7:75:75:2b:da:9a:6e:7b:d8:9d:60:41:ca:47:
         1e:8d:88:40:9e:4b:c6:4c:7e:20:f1:71:c9:64:0f:40:5c:a8:
         2c:84:1b:c8:c4:32:b2:57:45:d8:dd:66:a4:89:52:e1:ec:e2:
         ee:26:42:13:90:da:3a:57:5e:46:5d:45:13:8b:9b:ab:3d:9b:
         32:ab:7b:51:dd:90:d8:75:38:2e:bc:9a:2e:49:71:5f:2b:d5:
         ba:59:c6:5e:04:3f:74:87:f9:fc:21:bb:6c:eb:34:8c:64:1b:
         db:2f:7f:6a:5a:d3:41:b2:ca:97:49:bf:7e:2a:1a:0f:e5:d6:
         2d:ac:36:99:52:85:44:5a:70:83:64:28:38:f1:7a:b2:64:8f:
         9b:b3:80:aa:f5:0a:eb:f9:25:d6:bc:85:8a:2a:43:8d:2d:b6:
         1d:f1:54:8b:57:78:66:23:aa:ad:66:95:c6:02:89:9f:58:68:
         47:83:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:46:57 2024 by rpki-client on console-ams.rpki-client.org