Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File:                     DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier:          rnWRmgtucz6KSsad182iBnRqeVzFHlmfDKfMt3ogBPc=
Subject key identifier:   08:DF:D9:F1:F7:AE:10:B5:81:47:7D:33:C2:3E:24:7A:4F:F8:61:F9
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer:       /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial:       019356896BBC690F693D3BDB243011EC33C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number:          10A3
Signing time:             Sat 23 Nov 2024 01:01:06 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:06 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:06 +0000
Files and hashes:         1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: y9dlbDLE6pAh6snSQeYORw9L8z5uH3WgV47gIeZHF4o=)
                          2: deukdpsy6f1mD7louyK31h1Dhac.roa (hash: WuTZFDCAW/CYoMEkkOcClnsXM86AwsqJTOAPVthnOUQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:6b:bc:69:0f:69:3d:3b:db:24:30:11:ec:33:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
        Validity
            Not Before: Nov 23 01:01:06 2024 GMT
            Not After : Nov 24 01:01:06 2024 GMT
        Subject: CN=08dfd9f1f7ae10b581477d33c23e247a4ff861f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:77:28:5d:19:ef:61:ad:cc:e8:d7:23:bd:
                    22:49:17:df:63:02:68:09:56:28:18:18:fc:b7:bf:
                    a8:6b:8c:54:6c:b3:cb:2b:a8:54:14:ef:f2:10:3d:
                    93:6e:1f:25:63:66:9f:e2:d8:57:99:05:1d:47:b3:
                    96:93:84:4d:30:f0:cd:44:11:c0:f9:c6:23:35:09:
                    ba:e9:48:b8:12:80:b1:97:53:59:0b:c1:83:13:f0:
                    89:cc:d2:59:10:40:59:2a:58:1f:08:84:da:fb:b2:
                    30:c0:83:39:92:7b:6d:21:1f:3b:36:e4:31:8f:ff:
                    21:57:86:4e:af:7f:b0:35:bc:d8:bc:ad:14:ac:cf:
                    a5:c7:01:c5:88:24:be:af:03:c4:11:2a:9b:02:8a:
                    89:6b:89:4b:b9:1f:36:25:f9:b2:d8:92:af:62:53:
                    b8:ff:8b:02:d4:c1:5c:8a:5c:64:44:69:dc:d3:47:
                    b8:1d:e7:ec:3f:d4:d3:ca:33:d1:5d:a7:f7:60:bc:
                    62:85:28:13:df:b7:40:8e:29:2e:4a:73:92:e3:6e:
                    94:2c:1f:e8:87:8a:86:23:78:33:e3:8f:0e:fe:81:
                    b1:16:e0:4b:00:1d:5c:08:7f:56:82:70:41:b3:6e:
                    e2:f4:f4:7f:33:b0:bd:db:7c:c3:34:74:4e:e4:01:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:D9:F1:F7:AE:10:B5:81:47:7D:33:C2:3E:24:7A:4F:F8:61:F9
            X509v3 Authority Key Identifier:
                keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:f7:d5:8b:ec:d4:07:5a:a3:e2:2e:24:ef:6e:28:16:16:
         2a:ee:11:67:b9:ce:b1:76:fd:d5:14:ae:1c:fc:99:f4:5e:63:
         c0:bb:41:2d:d9:6a:43:9a:93:45:0e:b7:4f:08:e2:93:cf:df:
         63:54:23:e9:b4:ca:26:73:4f:f7:4a:39:e5:bc:04:bf:ea:cc:
         b0:d4:94:14:5a:ff:29:b1:3f:20:e2:51:65:af:8f:b5:4b:16:
         19:6e:ae:fb:5e:00:91:c9:9a:d1:cb:ff:b7:81:2a:66:db:e0:
         21:4d:36:d0:e0:13:99:39:0c:b4:23:7f:d9:bb:0c:13:a2:ec:
         17:46:d0:61:b5:5d:09:49:03:0c:12:d2:98:df:e3:c0:e1:43:
         df:07:6f:9a:d6:8a:4f:f2:1f:b4:19:1a:35:c8:c8:28:12:c0:
         86:16:af:54:e1:6d:3f:fc:74:c2:33:11:8e:c3:18:f6:93:6a:
         66:02:02:ac:58:70:e9:8f:3b:e3:2b:81:cf:de:d5:3e:46:25:
         32:32:74:21:8f:65:14:5d:f8:17:90:e5:85:bf:b2:76:df:61:
         c4:f7:bc:10:93:ca:ef:8b:e1:9d:9e:8d:ae:c4:ad:7e:2a:96:
         0f:5d:53:ca:a5:84:59:bb:46:91:ea:9b:65:67:a1:01:c6:4b:
         60:95:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:03 2024 by rpki-client on console-fra.rpki-client.org