Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          Ey5TL2r6eY2DMfV5JKHrBKswgdWEAFdu8GCzZxmxufo=
Subject key identifier:   B2:AE:92:A0:68:7B:87:50:05:D6:5C:E1:53:7A:90:34:AB:72:49:30
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       019355764CE1A08E75F4CED102D3D7989B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          07FB
Signing time:             Fri 22 Nov 2024 20:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:36 +0000
Files and hashes:         1: 2K_wrNe_LBSsfRPlEXdTkkkjSyo.roa (hash: NfQvgUGWon6A27Ago4TIn5Z0/5usqDaWcLSlLugWoGg=)
                          2: AS9jTYjVEDIXCOdMlyorwVUaWG0.roa (hash: wWVR8r7Kf2HN8esf0HbXAMxlvLcV3TVtqYl+DumlHG0=)
                          3: AcHw6NFnva8gKOleZy4QvPQ-4R8.roa (hash: 9+7IiNZOOlJyg4jvJL55SkPZwK0IX2xFM88J8B+f3ZI=)
                          4: Ref85zXKMY5FH0MRc8IkuFzw5NI.roa (hash: +C530PKJduX/+x+ElI3K71w3iZOLlus6Y2Zm5R00EdM=)
                          5: doBXpltMaoRTppeWzm4KuRvg7es.roa (hash: MEjJCkK0GOc1u3cf63jkYQ9N7sG5d2ctX6OctWAO2oA=)
                          6: lsQvE0pdPWFMXdcHkrKH23OKf1Q.roa (hash: FrKJo+1HFGcnkznBbt1ATAz0nRFQb2fh5wdHOzxwYHo=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: 2OIxRm2vpvzgt/UFDodiSQRC6trYaFOMB5F+McRqXTU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:4c:e1:a0:8e:75:f4:ce:d1:02:d3:d7:98:9b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Nov 22 20:00:36 2024 GMT
            Not After : Nov 23 20:00:36 2024 GMT
        Subject: CN=b2ae92a0687b875005d65ce1537a9034ab724930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0a:ac:b7:59:95:27:d7:2c:7f:98:e3:33:7e:
                    dc:ae:b5:bf:1b:96:f3:36:9e:9f:02:fa:3b:03:8d:
                    dd:39:a9:ae:a2:ef:d7:d7:f4:99:fe:98:b3:f1:ec:
                    17:c7:ea:12:9c:7d:d9:e5:2d:ed:a6:3d:59:9e:c2:
                    e4:41:2d:70:6b:b4:2b:c8:95:41:b7:a7:b2:66:c0:
                    03:27:50:ab:0b:27:59:7b:7f:9d:43:ee:9a:da:93:
                    8a:72:5e:2b:de:8b:31:d1:2b:d8:cf:25:d3:b0:4d:
                    8a:67:b2:eb:7d:4a:84:49:5c:91:7f:b3:73:9f:85:
                    22:7b:18:c3:09:63:5b:c7:77:b5:ad:90:05:4e:9a:
                    50:07:2c:e8:97:10:f8:c3:21:d4:86:ab:88:61:cf:
                    96:d2:47:98:54:06:75:66:0d:17:96:7a:ed:5c:69:
                    9b:07:b5:2b:f6:28:6c:06:a3:c3:37:cb:99:3c:ca:
                    e7:9f:11:0e:7d:75:2c:72:1d:91:65:d5:a3:cb:62:
                    41:01:b8:95:be:a9:79:4f:9d:f6:22:2e:bc:52:e6:
                    7b:a8:c2:59:71:ee:3d:18:67:3f:df:dc:5b:48:49:
                    3d:cc:0d:7c:af:39:3c:54:9d:a2:dc:e7:52:ce:ac:
                    f6:6f:93:21:da:4a:c1:d3:b0:50:33:c3:b5:01:d7:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AE:92:A0:68:7B:87:50:05:D6:5C:E1:53:7A:90:34:AB:72:49:30
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4a:a0:43:3d:59:bc:ea:c1:96:fe:e9:d5:29:bb:c8:19:45:
         2a:9c:a9:e7:ca:be:7f:37:96:fb:1d:be:85:c3:45:f4:f3:ac:
         67:ff:80:76:49:74:92:5d:a5:92:c1:8a:8b:ae:f2:6b:14:f3:
         68:97:af:9f:c3:e0:49:70:04:86:85:ad:34:d2:b1:9f:15:61:
         b3:74:af:0b:50:52:93:cf:ef:d7:c2:f0:9f:43:70:35:5a:07:
         9f:f6:c3:41:cb:31:cd:b2:80:23:8b:9a:af:64:ba:64:a2:7a:
         a4:e0:5a:40:41:c8:2b:74:77:98:0e:28:76:35:f0:da:ce:5c:
         c2:38:45:24:12:74:b0:45:bb:93:c2:32:03:48:0f:c9:9e:fa:
         95:38:c8:40:c9:9a:c0:bf:93:e1:2e:14:1d:e1:9b:15:b5:24:
         5b:7b:6c:04:31:86:d0:93:ae:3c:06:56:ee:9d:d3:05:3a:19:
         88:94:26:16:5b:22:50:83:6e:dd:52:69:cb:ae:d4:c9:82:f2:
         ed:7e:e7:6f:30:ab:38:4b:a8:e5:be:88:3c:85:3c:84:d2:00:
         c5:dd:8e:94:d5:c6:dc:72:de:fe:b5:42:bd:94:a0:4b:e2:9b:
         75:b9:ed:3b:52:52:29:20:db:f4:c6:9c:4c:08:5e:60:c6:0e:
         6e:2a:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:39 2024 by rpki-client on console-fra.rpki-client.org