Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File:                     4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier:          zK7KntzMJP6itGiQgw8KU+bOstkgCnvaktrH3/3IAxU=
Subject key identifier:   38:11:17:49:2F:40:76:C9:4E:46:5E:7B:FC:B3:4D:FD:BA:72:01:DF
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer:       /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial:       019407222043F9B771A99355592E30FAF112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number:          0A88
Signing time:             Fri 27 Dec 2024 08:01:04 +0000
Manifest this update:     Fri 27 Dec 2024 08:01:04 +0000
Manifest next update:     Sat 28 Dec 2024 08:01:04 +0000
Files and hashes:         1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: dch8JgUhichTJl++jBpH8FvdCB76f6NVS1BjGD5bWkw=)
                          2: yFImzWUwAlyQoPANDPwOEUD5fqY.roa (hash: RiM6Eosu4SMzWZEPWPJoKNuo0xWj55tsB18/m0MqX+A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:20:43:f9:b7:71:a9:93:55:59:2e:30:fa:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
        Validity
            Not Before: Dec 27 08:01:04 2024 GMT
            Not After : Dec 28 08:01:04 2024 GMT
        Subject: CN=381117492f4076c94e465e7bfcb34dfdba7201df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:63:c4:7b:be:57:c1:ca:de:9d:59:7b:23:
                    b4:13:7a:db:6d:f9:8e:1f:e0:d6:e2:92:87:d2:8f:
                    60:dd:22:65:88:1e:e8:95:f9:c2:e8:21:f5:c5:58:
                    82:0c:d4:8f:57:d5:34:ba:f9:d1:a5:40:5d:32:a1:
                    43:03:61:f7:32:cf:25:1d:23:01:bf:a3:70:10:7e:
                    c8:04:00:c0:e4:93:e1:46:f9:57:a4:8a:2f:95:ec:
                    3b:3b:d1:5d:fc:bf:7a:f4:6b:de:79:cf:df:75:76:
                    b0:fe:e1:03:9b:3c:97:5b:d9:76:51:67:ca:b0:d0:
                    16:c2:71:8a:c2:e7:cf:20:32:c9:f9:ff:ff:d7:fc:
                    98:f8:6f:92:52:79:59:6f:37:39:ba:46:3f:c8:27:
                    5c:fd:26:7b:79:bf:f0:f0:e7:2a:b6:33:79:c5:9c:
                    19:a9:dc:bc:00:d3:35:c0:22:61:7f:c6:15:8f:ca:
                    f9:99:87:25:00:30:e6:80:8d:4f:f7:54:5f:97:6d:
                    3c:34:e9:0a:ec:e7:54:30:44:72:58:3d:2b:b4:4f:
                    fb:a4:2e:69:ad:d8:e9:eb:bd:e2:55:25:75:2f:98:
                    a9:59:26:90:b3:50:f5:79:c0:80:3e:46:d1:ab:75:
                    0a:70:67:e9:76:53:de:12:25:99:81:e4:11:fa:9d:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:11:17:49:2F:40:76:C9:4E:46:5E:7B:FC:B3:4D:FD:BA:72:01:DF
            X509v3 Authority Key Identifier:
                keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:fa:c4:38:a1:f2:4f:fa:96:06:a4:54:1a:4a:93:51:44:
         28:89:59:61:23:0e:bc:bc:93:53:34:6d:53:bc:68:ec:73:7c:
         2e:e0:8d:f0:cd:b8:68:d5:a6:67:ba:8e:e0:2e:0b:be:28:2b:
         73:c6:96:98:8f:cc:c7:70:73:ed:40:14:bb:ec:63:bf:93:13:
         1c:a8:9c:68:00:55:5c:29:d9:4b:f5:27:c4:cc:f6:22:a6:01:
         ce:94:69:d1:fc:fe:3d:19:0f:9c:b7:38:52:9f:0f:a7:d2:58:
         bb:d3:9a:f1:76:f0:15:8e:19:90:08:54:09:58:ff:7f:46:6d:
         57:a1:cc:e5:cb:fa:c5:a5:9a:87:4a:0b:3e:a9:eb:37:1a:c0:
         e6:95:d2:c9:d2:67:6f:79:0c:ea:25:09:d3:26:54:3b:c3:f5:
         1d:2d:9f:4a:c6:ae:3c:6c:fe:82:de:ab:d2:f1:32:5e:a7:af:
         39:e6:ac:cb:49:45:60:5e:e1:e0:1f:d6:2f:11:61:d9:11:ba:
         bb:ee:c4:f6:ed:96:3d:46:7b:b9:ba:b9:e2:73:3d:34:a4:42:
         6c:37:af:4c:8d:5d:20:b6:ad:6b:ec:67:d9:09:cc:f1:7c:f6:
         ca:bf:84:b1:19:b4:ba:0f:51:0e:1b:5d:1e:84:40:94:8b:81:
         26:5f:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:56 2024 by rpki-client on console-ams.rpki-client.org