Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File:                     2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier:          PaKin2WyO5vmbMFtUWNNSHoWHTB/3pt8yJZUI85MNT0=
Subject key identifier:   4F:7B:DB:B7:55:5A:CD:C3:6A:A6:06:4D:30:AA:0B:EE:AB:CF:A0:E6
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer:       /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial:       01938D09A657D8E7A0F74E9A830A1243F4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number:          1216
Signing time:             Tue 03 Dec 2024 15:00:40 +0000
Manifest this update:     Tue 03 Dec 2024 15:00:40 +0000
Manifest next update:     Wed 04 Dec 2024 15:00:40 +0000
Files and hashes:         1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: +pcl/RRzGidRCtPJzcm8Xr1KomVMFfYvimg+cvQM554=)
                          2: JMmjQJa7-2XzI3qdigktCAnFHbM.roa (hash: pIXbnKBeNwUIgbSCR6BNRhSjBjtAYWBDQIBvSUuRLiQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8d:09:a6:57:d8:e7:a0:f7:4e:9a:83:0a:12:43:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
        Validity
            Not Before: Dec  3 15:00:40 2024 GMT
            Not After : Dec  4 15:00:40 2024 GMT
        Subject: CN=4f7bdbb7555acdc36aa6064d30aa0beeabcfa0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:ef:b4:f0:40:2a:88:64:8e:97:70:52:35:
                    d3:be:de:3f:77:53:4d:93:c7:a8:17:3d:39:87:57:
                    16:71:14:99:27:fd:53:39:b3:86:18:b1:0e:b4:f6:
                    ec:6a:c8:fc:28:99:4f:00:9d:91:cc:91:fd:10:74:
                    33:93:49:58:3d:28:98:33:a2:6c:27:45:24:a6:68:
                    04:64:17:fa:52:b6:0a:1a:c3:71:dc:a6:b4:00:00:
                    ce:fc:ac:23:96:7e:53:14:ef:95:0b:b8:40:cd:6f:
                    ec:17:f1:19:05:c4:4a:59:e7:27:77:bf:ab:14:95:
                    c4:63:13:99:63:12:23:37:52:c8:3c:fb:97:21:3e:
                    61:0c:13:15:3f:75:bf:8d:5d:f3:ef:c3:69:4a:a7:
                    00:a6:ae:88:43:dc:22:7e:6c:76:62:63:b8:1e:03:
                    cb:02:7d:e5:51:29:d2:8e:c0:45:b5:6b:76:4c:f7:
                    26:a1:41:37:25:c5:e0:04:31:54:47:c2:c2:9c:eb:
                    ce:53:65:e8:5b:64:b9:33:49:c1:f8:6b:e4:7f:d5:
                    41:2a:60:f8:38:ff:8a:92:18:27:6b:15:a7:ef:0a:
                    4a:bd:03:e9:c5:41:62:ac:e4:7c:86:33:70:c2:32:
                    cd:43:f1:e6:c7:48:18:ff:41:59:0b:8e:92:6c:5e:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:DB:B7:55:5A:CD:C3:6A:A6:06:4D:30:AA:0B:EE:AB:CF:A0:E6
            X509v3 Authority Key Identifier:
                keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:be:92:cf:52:54:ac:ce:ce:03:55:91:52:10:c0:90:19:cd:
         cf:7c:22:1d:9e:87:02:ec:14:67:51:cc:ec:30:57:9a:62:b5:
         59:37:12:e9:32:0d:9b:0d:a9:63:ea:32:75:30:0d:84:ff:19:
         f7:e1:b2:e7:e9:4d:0f:3e:22:20:db:e0:8f:e6:2a:45:90:c1:
         2c:b6:97:68:c1:e6:93:e2:97:ec:71:0d:6c:a6:b6:70:ab:3a:
         3c:4c:c2:d6:a4:bc:da:bb:11:d3:19:35:a8:d0:01:48:37:6b:
         ca:dd:52:dd:47:00:49:a9:56:8c:8c:d1:e3:0a:7c:84:ed:f3:
         d3:13:8b:25:ed:e4:25:e4:9f:23:71:eb:1d:12:f2:08:26:f0:
         37:12:bd:62:90:9c:8a:0d:35:f5:7e:c9:43:fe:9c:1b:a8:6d:
         ba:c7:ba:63:9b:26:0f:0e:7b:fe:74:ca:d5:27:cf:56:ce:ce:
         50:80:10:68:ad:b2:2e:5c:7f:0e:77:5c:ad:49:13:3e:94:f8:
         f6:f3:39:a8:76:df:db:e8:54:64:12:56:22:84:86:d1:c5:7f:
         20:14:63:65:97:c7:82:63:cd:5e:9e:05:88:d4:7c:95:cf:70:
         18:89:61:4b:91:62:f8:aa:45:de:a6:b1:ea:a7:6f:23:5f:ba:
         b9:1d:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:12:49 2024 by rpki-client on console-fra.rpki-client.org