Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File:                     B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier:          K7Cg3rHShePh3M/c+ITBgqSX2UuLj3jG9wiZ/iTGrHY=
Subject key identifier:   19:56:8A:37:EC:FA:8C:4D:CE:4B:78:E1:34:72:11:51:18:77:D0:BE
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer:       /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial:       0193576463C7B066C428A84864DA0A88C07F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number:          09F0
Signing time:             Sat 23 Nov 2024 05:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:17 +0000
Files and hashes:         1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: WaqBhc1CO9hcXPltGCf+MdJVU/QZmak7r3eJ3/EIRg0=)
                          2: xMGRNL7kCoPm2UFO1V6CKEbir6U.roa (hash: gd+6KH5TVIQ6z6ZOxLFZXb9rRduApaylRUTOj9TDjC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:63:c7:b0:66:c4:28:a8:48:64:da:0a:88:c0:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
        Validity
            Not Before: Nov 23 05:00:17 2024 GMT
            Not After : Nov 24 05:00:17 2024 GMT
        Subject: CN=19568a37ecfa8c4dce4b78e1347211511877d0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:81:3f:26:1d:a2:c9:d6:b6:3a:27:58:60:
                    e8:3a:23:90:7c:d9:58:51:3a:84:ef:fd:a5:d1:bc:
                    d8:3e:dd:62:9f:cc:fc:10:61:ff:2f:00:01:ca:d1:
                    b3:b8:bc:96:92:62:cb:e4:7f:96:f2:f6:23:8b:ce:
                    41:79:f7:c6:17:14:e4:aa:5f:99:6e:6e:5f:54:2e:
                    f3:03:dc:d2:0b:a8:a0:68:17:9b:a8:03:59:db:c6:
                    42:88:65:b2:b1:89:6b:6f:b0:0f:35:91:35:db:0c:
                    ee:34:b3:b1:70:38:71:10:4d:03:1e:07:ed:b0:39:
                    33:86:aa:00:52:ac:f5:1a:0b:5d:a8:91:d6:cf:6a:
                    29:90:5e:0c:02:1f:b9:38:33:0b:6c:20:d7:09:38:
                    a5:02:1e:95:5d:74:a3:d2:e0:39:87:6d:b8:79:0d:
                    69:0d:93:b1:57:87:8c:ba:ac:28:fb:c9:7f:80:59:
                    ac:f4:02:b2:03:b4:55:33:fe:03:58:a1:ad:ac:34:
                    a0:06:88:1d:15:6f:ef:bc:a3:61:8e:00:4d:8e:2d:
                    4a:f7:3d:ee:7c:b0:5e:a9:3f:7e:d5:2a:b6:35:e1:
                    40:00:06:ea:1d:83:5b:d2:e6:62:89:52:78:da:73:
                    63:66:bc:45:1b:3c:58:ae:75:5e:e5:a9:2a:e1:6e:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:8A:37:EC:FA:8C:4D:CE:4B:78:E1:34:72:11:51:18:77:D0:BE
            X509v3 Authority Key Identifier:
                keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:bd:ac:f2:c4:34:e1:fb:d8:92:22:a4:76:50:1c:e8:2a:cf:
         16:c5:5a:06:95:ed:26:26:7d:f8:5d:3d:05:94:ab:2a:81:7c:
         e8:67:4d:73:23:73:75:04:1f:2a:28:fa:b5:5e:96:39:47:d9:
         3c:dc:38:a2:18:0e:62:5b:2c:4c:99:58:74:71:7d:2b:ac:c3:
         b5:ef:28:29:76:22:53:31:47:dd:4b:87:56:2f:ad:65:33:06:
         93:c5:9f:ff:4a:35:cd:af:0b:e9:78:75:9f:a4:01:c2:9e:ad:
         8c:da:f0:55:01:55:6f:19:0d:78:3f:ab:dd:1c:a0:4c:4f:9d:
         ee:69:00:19:51:dc:16:0c:8a:08:e3:47:7b:f7:93:f2:47:b5:
         de:22:2a:6a:a9:dd:0a:d8:67:1d:e4:ee:6a:4e:c7:0d:20:0d:
         5b:16:b9:48:47:fa:cc:ac:e4:f2:31:84:ed:5e:cb:ee:b0:4f:
         07:d2:c7:c6:fa:e0:85:6a:2d:cd:e0:f6:ef:ad:1d:a9:a8:88:
         f4:8b:d7:31:f5:96:f1:1a:db:5f:36:25:4b:97:1e:f3:90:47:
         b7:4e:95:13:c4:0d:cf:96:71:db:8d:91:c1:61:3e:1a:43:3f:
         c2:6a:19:42:bd:bc:3d:76:80:be:af:78:1f:2d:e8:76:0f:02:
         07:05:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:41 2024 by rpki-client on console-fra.rpki-client.org