Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File:                     8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier:          ynD0sFxoWHm0t/m5xmn1uQk800YtAYfETJm9KRSK8M4=
Subject key identifier:   1C:38:BA:7D:37:40:E0:47:FD:76:F7:D8:62:FB:8B:4F:8A:3C:30:ED
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer:       /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial:       0193549C52D3BB0E34223783546CC328C8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number:          0974
Signing time:             Fri 22 Nov 2024 16:02:31 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:31 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:31 +0000
Files and hashes:         1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: B71HjQUTeoknCUeFkon6609EL+Oy7d2RSmSEYe+uuJs=)
                          2: dT2Pilj0cDxW8JNdaMPdYMP5_Lg.roa (hash: nrTd0T6YOSJ9/FYjp6b/vFkHXSf6ITW+uPne+/v5smI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:52:d3:bb:0e:34:22:37:83:54:6c:c3:28:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324d0f47297680535eb2799189db888b4066782
        Validity
            Not Before: Nov 22 16:02:31 2024 GMT
            Not After : Nov 23 16:02:31 2024 GMT
        Subject: CN=1c38ba7d3740e047fd76f7d862fb8b4f8a3c30ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:ba:b2:51:94:c0:e6:e8:8f:74:82:82:ff:
                    c3:fa:69:dc:01:21:ac:3b:8a:d8:5e:11:25:f9:02:
                    71:52:33:b2:f3:88:b2:fa:62:f4:09:6a:61:3c:9d:
                    a5:0a:b3:76:b9:bf:69:7e:6a:fb:63:52:ba:c0:67:
                    70:7c:94:a8:ad:2c:1c:ac:ea:3b:05:2d:9e:b0:4e:
                    cf:c2:01:0e:95:c9:98:3b:67:5f:53:0d:af:02:ff:
                    6f:5e:84:d7:3a:a6:f2:c6:00:19:1d:a8:4b:70:10:
                    b5:40:74:a8:10:4e:d0:b7:15:4a:64:e7:6d:2a:0c:
                    01:5f:b1:58:b7:fd:fe:29:19:82:87:1d:ac:40:21:
                    a9:fd:2f:af:e6:82:c1:eb:49:97:4a:bc:4f:43:f6:
                    71:eb:04:bf:70:12:0a:7e:43:11:db:c0:f5:db:b0:
                    b8:56:eb:08:4e:f8:d3:d8:85:9b:16:ab:77:4f:b8:
                    d1:c8:70:11:3d:e5:87:6b:35:7b:4a:cf:2c:93:eb:
                    13:c5:dd:a4:42:51:b5:be:4e:cf:17:6f:e8:ad:7b:
                    91:f9:ec:6f:e9:bf:c5:3d:8b:0f:7f:67:a7:cc:08:
                    e4:e6:4e:f8:50:d3:a6:7b:31:33:60:cd:ed:d9:36:
                    4b:f8:7e:c3:ff:37:ef:61:3b:d6:7d:9f:b2:06:78:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:BA:7D:37:40:E0:47:FD:76:F7:D8:62:FB:8B:4F:8A:3C:30:ED
            X509v3 Authority Key Identifier:
                keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4c:9e:cf:46:4e:ca:bb:a8:94:4c:c3:31:f0:7e:78:2a:1a:
         9d:cd:7f:e5:43:d0:51:09:ab:fa:28:6d:6a:b5:f1:55:37:ba:
         3a:54:9f:02:70:a0:30:c0:05:02:89:fc:97:8e:70:52:9d:cb:
         84:86:c9:44:2f:ef:9f:dc:d8:d7:55:fd:8a:2e:c8:d0:98:45:
         42:3e:ab:7a:a2:13:b4:4f:aa:56:b1:fa:2f:f3:a2:9e:96:7e:
         a1:82:cd:e2:a5:d9:f5:b7:e0:bb:51:b0:b4:3c:94:40:25:35:
         94:d7:61:3a:3e:c0:fb:98:ec:72:4c:ca:84:19:3c:8f:60:3a:
         d9:5a:b7:3d:60:d8:a2:6c:3b:4a:ed:e7:9a:89:1b:5f:f2:d4:
         ce:3f:0d:05:a1:d9:e5:ce:60:84:cb:b1:93:0d:1a:c4:5c:c6:
         79:6c:3b:1d:4d:82:ce:1b:42:56:47:4a:85:db:57:d6:69:b0:
         b0:e6:78:86:a6:18:45:28:9d:e7:4f:89:9e:40:67:4d:25:99:
         53:42:30:18:0a:38:0e:7b:45:e1:76:c9:6c:f0:b0:b5:47:a2:
         21:20:37:26:ce:f5:b6:0b:66:7e:7a:a5:e1:23:23:af:eb:c4:
         6f:65:51:84:eb:29:47:27:e4:79:02:7a:29:43:ea:57:dd:55:
         5e:15:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:54 2024 by rpki-client on console-ams.rpki-client.org