Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File:                     AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier:          Nsw+Kowp9wVXkZ/scbEf0e5T2KA6ego9I6EHwNZnr4M=
Subject key identifier:   F9:1C:5E:D2:FE:52:F6:6A:84:17:35:06:ED:B9:BC:13:AD:23:E7:73
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer:       /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial:       019356F6D67F9F0F351F388B19A30171C333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number:          105A
Signing time:             Sat 23 Nov 2024 03:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:37 +0000
Files and hashes:         1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: so7DJ7k1Ku4mwdRymPwnejL0JNtwhqn9bcqmOOZlQ/Y=)
                          2: jO3myQDaRJcweoQRPM8SkcQgSAg.roa (hash: bcLvLsrPNE5g3esL4TGau/shv1edRuCc9IpRL22EjXs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d6:7f:9f:0f:35:1f:38:8b:19:a3:01:71:c3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
        Validity
            Not Before: Nov 23 03:00:37 2024 GMT
            Not After : Nov 24 03:00:37 2024 GMT
        Subject: CN=f91c5ed2fe52f66a84173506edb9bc13ad23e773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:d2:de:6c:4c:b5:5d:23:1e:9c:be:88:c2:
                    a3:e7:ce:67:85:42:51:22:e0:d3:b4:c7:77:25:f3:
                    ca:65:5d:71:86:be:da:df:38:33:b8:0c:ec:74:57:
                    0c:68:26:c5:c2:dd:f0:38:c6:be:76:f1:57:08:98:
                    cd:71:af:e6:1c:54:e6:1e:bb:17:be:8a:dd:f3:1e:
                    3f:04:ac:6a:20:94:04:66:c9:7f:c6:89:13:d1:3d:
                    eb:bd:a9:cb:db:b0:49:c8:b8:c6:14:70:ed:c9:84:
                    b5:70:f4:9b:e7:43:52:ab:8b:54:33:85:4b:9a:f6:
                    60:86:a4:cd:d2:bb:45:cb:90:41:83:83:5b:f3:23:
                    16:3b:7d:e4:ee:9d:74:6c:18:98:5d:08:e3:53:70:
                    77:c9:c5:2d:eb:ef:2c:68:43:23:68:6c:38:a9:76:
                    d1:2c:7e:1b:75:c8:f7:01:88:04:c0:fc:bf:ef:c4:
                    8d:96:14:cf:5f:54:5d:5a:d8:b2:e9:c5:d2:a1:37:
                    57:13:44:73:6d:13:39:42:06:a1:68:2e:f8:6a:92:
                    5f:81:d4:3d:7b:9e:cf:bc:f0:44:48:8d:3d:9a:d7:
                    a5:a3:c0:89:39:62:27:45:08:4c:32:08:24:b2:5c:
                    94:b6:4b:36:ba:00:45:f5:d2:ca:ab:e5:fd:99:77:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:5E:D2:FE:52:F6:6A:84:17:35:06:ED:B9:BC:13:AD:23:E7:73
            X509v3 Authority Key Identifier:
                keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4e:64:b3:88:6d:68:b2:e5:4d:ef:97:7d:a9:e1:37:24:70:
         2d:cc:96:e5:5a:2e:ac:98:c0:05:b7:94:fd:8f:50:8d:1d:6f:
         66:25:6a:54:07:58:58:9f:d6:fb:7a:16:ee:34:e5:d3:ef:c0:
         b8:a2:1a:10:95:ec:a1:92:ce:91:9b:e3:b2:56:21:3f:70:eb:
         38:03:b6:f7:57:da:24:fd:00:b2:70:71:bd:c4:04:bb:29:95:
         89:71:5a:cb:20:ca:6b:4e:cd:83:6e:f2:e9:03:4e:37:1e:8e:
         9d:3a:fe:db:36:68:e7:32:16:66:ae:69:71:99:7d:75:ac:b8:
         ed:38:70:dd:8b:80:2f:52:44:9c:5c:3d:3a:1d:82:fa:cd:6b:
         d5:f6:bc:10:e1:e2:09:a1:dd:89:c0:fe:9b:bc:ab:52:1a:79:
         fd:bd:42:b7:27:91:7e:c8:fe:f0:0b:41:bc:55:1d:ef:5f:d8:
         eb:2c:f3:07:a6:0b:cf:a2:66:bb:7d:cf:df:56:fc:25:f6:3e:
         7b:6f:cf:6f:c7:dd:80:bf:b1:55:31:e6:51:6f:a8:ad:c6:64:
         57:b6:03:51:05:8c:bc:74:02:a3:12:1a:9c:59:ab:95:73:fa:
         cd:45:c3:30:89:36:2b:f7:e5:99:52:70:80:f5:18:e7:de:96:
         ca:1d:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:23 2024 by rpki-client on console-ams.rpki-client.org