Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File:                     apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier:          MClKxmfWr4QHkp06UhuC1r4b3PsME2r2tEZSRAes/OU=
Subject key identifier:   FF:FA:D2:93:7C:A3:61:E4:1A:6A:25:67:B5:6A:A9:13:8C:1F:09:8E
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer:       /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial:       01936AB452359B6DCAF791623C87E36D7885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number:          CD
Signing time:             Tue 26 Nov 2024 23:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:22 +0000
Files and hashes:         1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: 9CkATupnt/u/T3hfdvWXVEQPe2wnxA/2JoL/ZyqngI0=)
                          2: lT8YwlGj_0yRJ_BudrR6rnETYuI.roa (hash: NLZerRCDH/DheslJwSjeuKlfSyjydX7HjYTqYZ7bD28=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:52:35:9b:6d:ca:f7:91:62:3c:87:e3:6d:78:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
        Validity
            Not Before: Nov 26 23:00:22 2024 GMT
            Not After : Nov 27 23:00:22 2024 GMT
        Subject: CN=fffad2937ca361e41a6a2567b56aa9138c1f098e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:79:85:43:ff:50:24:32:bb:7e:52:88:01:
                    6c:f4:81:80:c7:1d:40:cf:44:c9:72:0d:d2:70:8b:
                    65:bd:f5:f4:c9:1a:a8:20:7d:74:ed:41:34:b3:ef:
                    29:9c:a3:b5:ad:2b:d5:ab:bd:8d:36:d9:67:df:5c:
                    8a:cd:08:85:bc:85:7c:91:c0:71:8d:ce:ab:e5:10:
                    75:e1:1e:ae:25:17:07:08:37:6f:f7:8e:fa:93:e4:
                    ba:d9:d4:69:fb:a3:89:73:d0:ca:30:f2:84:ae:6c:
                    43:bf:95:04:25:ac:e8:72:07:9c:23:dd:ad:a5:63:
                    cc:df:f2:14:30:25:5a:09:17:3f:72:07:58:aa:f5:
                    b5:77:80:69:ab:f5:dc:82:0f:e1:b0:c9:d0:97:c5:
                    b0:84:04:05:07:d5:92:d7:71:38:e3:13:08:e5:52:
                    56:da:38:3d:e2:59:cf:32:04:f4:92:30:fa:e0:41:
                    10:03:e4:2e:b4:6c:07:2d:51:38:8c:1a:dd:06:33:
                    4b:ff:35:76:58:7e:34:a7:32:2e:2d:6b:23:40:12:
                    11:2a:fe:b8:11:9a:b2:23:31:88:73:c2:b8:a2:b7:
                    5e:b0:ab:96:51:4f:15:79:64:02:31:4a:88:28:19:
                    0f:e4:76:21:b8:66:9d:fa:6c:50:ee:48:b7:70:a7:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FA:D2:93:7C:A3:61:E4:1A:6A:25:67:B5:6A:A9:13:8C:1F:09:8E
            X509v3 Authority Key Identifier:
                keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:cf:2d:ab:b9:e4:58:dc:9c:84:af:cc:db:46:f5:b3:a1:
         04:92:f5:50:5d:75:31:f3:3c:f2:c7:d2:41:73:19:7a:2c:d6:
         58:d4:89:65:bb:1e:1e:c6:54:15:21:4e:53:7f:ee:5a:d9:8c:
         e7:ea:36:b9:8f:38:3b:78:bc:92:c0:88:26:2a:28:47:ba:2b:
         fc:63:c4:28:72:4b:5a:2e:f1:de:f0:c5:42:c9:4c:9d:2f:62:
         f4:2b:a4:d2:49:af:00:0e:08:4f:87:89:26:f4:47:63:a8:1f:
         0d:b5:bb:3a:d9:1d:8e:cf:d4:c3:05:79:03:34:b8:09:75:e9:
         0c:aa:e8:b5:dd:f4:ff:c6:6d:69:1b:16:45:f4:39:81:41:e5:
         e9:33:db:91:81:93:09:e7:37:1e:fc:82:be:74:19:20:fc:15:
         56:c8:c4:67:9c:8a:95:16:0a:e2:f1:85:f1:0f:06:ba:e4:60:
         2c:de:9f:04:5a:c5:38:9e:21:68:01:63:2c:ed:cc:96:4d:78:
         8f:68:6f:b1:9d:19:ad:24:db:87:54:f0:ad:37:ae:3f:a4:0e:
         9d:c2:af:38:17:20:37:94:6b:2c:bc:70:48:be:c7:c1:6b:21:
         15:28:23:0b:e9:fc:03:c1:3e:b3:ef:13:74:39:9c:16:2a:77:
         93:ae:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:20:21 2024 by rpki-client on console-ams.rpki-client.org