Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File:                     27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier:          gSDOxFQB0UDwqskzhcVs/titU5lwNew71t4T0kFFaVo=
Subject key identifier:   A8:3A:F4:C9:D7:11:51:70:98:9A:BA:9D:03:54:30:39:33:0D:42:F7
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer:       /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial:       0193572DD2FFE832F54C536817C061C973B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number:          0DF5
Signing time:             Sat 23 Nov 2024 04:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:41 +0000
Files and hashes:         1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: ev57iOM81kcw6IwYPZGrpLIKN76vtO4SgsupUlltVco=)
                          2: 3dhquPMXsdOSn93UO--YTGdklqA.roa (hash: ThN6qYtPQETFiGXA2u1iZhg/wtlgeE8xaolIiIzwiys=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:d2:ff:e8:32:f5:4c:53:68:17:c0:61:c9:73:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
        Validity
            Not Before: Nov 23 04:00:41 2024 GMT
            Not After : Nov 24 04:00:41 2024 GMT
        Subject: CN=a83af4c9d7115170989aba9d03543039330d42f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:c6:6c:d2:73:bf:15:ec:93:28:30:80:5c:
                    81:83:54:9d:80:c9:15:8e:7f:9a:ed:04:0d:ea:a4:
                    4c:50:2c:52:95:2e:cb:33:e1:85:d4:75:da:87:4a:
                    5c:67:23:75:3b:f4:1f:e7:1a:ec:76:8d:8f:47:9f:
                    84:2e:eb:7a:af:ca:55:85:81:62:17:f0:ce:40:20:
                    e5:4f:4d:d4:d1:97:d3:da:18:72:9a:67:2b:cb:8e:
                    f1:43:86:f1:91:61:50:83:b9:1e:e4:60:8e:d0:a1:
                    6d:51:b0:23:bf:21:6e:ab:ba:ee:4f:dc:cc:02:ff:
                    1b:99:72:98:21:f0:52:fd:39:07:45:e8:76:13:a1:
                    27:cf:64:dd:2d:57:16:8d:2c:1b:aa:ce:f6:bc:dd:
                    36:c9:35:0d:33:0a:b8:bc:fd:9b:2f:64:fb:5f:77:
                    a3:86:b8:13:99:1b:9c:8f:29:54:a5:ed:6c:1a:0c:
                    b5:8f:2a:ac:f7:c2:17:44:e2:85:50:7b:57:01:01:
                    9a:6e:ac:2a:49:e5:90:93:43:d6:8c:b8:f7:40:88:
                    bd:aa:42:a1:23:ab:4b:67:b1:88:27:7f:ed:ff:1a:
                    b1:8f:5d:8e:61:b4:b6:24:86:b8:28:54:71:0e:f9:
                    84:6c:58:bc:6e:81:1d:41:69:05:be:22:62:79:bd:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3A:F4:C9:D7:11:51:70:98:9A:BA:9D:03:54:30:39:33:0D:42:F7
            X509v3 Authority Key Identifier:
                keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:df:9b:d7:94:8c:1e:84:99:26:c4:96:90:5d:f6:82:f6:
         c3:4c:df:7e:ba:3a:d8:5b:a5:5c:58:5d:b0:38:b9:a6:99:f8:
         f0:8b:21:11:6d:8c:81:26:0e:e8:0b:5a:df:bb:d1:5f:3d:da:
         28:47:ef:fd:18:9b:a5:67:0f:a7:c5:b3:50:d8:f1:57:63:cc:
         ff:c1:0d:53:91:49:5c:f5:73:3b:38:39:ba:c4:4b:c7:af:3d:
         65:66:e4:15:cd:00:a1:55:69:08:a4:ed:ad:00:c6:5a:d0:21:
         9f:dc:6e:3c:4a:6f:f4:27:0d:f6:57:d9:66:fd:f2:12:f7:cc:
         9f:0a:8e:3e:09:da:1f:30:f5:11:49:40:fd:4e:56:c3:76:42:
         1f:69:e3:77:1c:99:fb:fb:9b:a4:61:2d:56:00:2a:e0:cc:20:
         e9:b3:03:c1:f8:c4:6b:94:35:b6:85:10:86:b6:ea:bb:5f:45:
         22:fd:73:a3:cd:ba:64:59:0c:b0:7e:ed:00:65:9d:2c:3c:bd:
         09:e6:6b:15:5e:ea:6c:90:9f:f2:c0:12:34:4b:07:8c:74:04:
         26:3a:92:9c:fd:2c:81:9c:21:c4:f0:a5:2c:76:9b:9c:4f:6f:
         c9:de:7e:30:4f:67:d7:1a:0f:8f:c2:88:4a:e6:b3:01:99:c6:
         db:ca:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:39 2024 by rpki-client on console-ams.rpki-client.org