Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File:                     bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier:          DVMLM2LYw/KNc7sO77ysSqdBUuq7mB3HBKVAgEIt4oM=
Subject key identifier:   0F:35:A3:4C:AE:9C:E8:DC:0F:88:1B:99:C5:1F:0A:6D:50:7C:30:56
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer:       /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial:       019369DAE383019C689E671DA456560EF5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:02:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:52 +0000
Files and hashes:         1: Z-3j6QCdK3Z70fc-DIFWdnagoaI.roa (hash: /T0E/GF06B3Yd3x73UCi9AEiatZ+2FL6hrG6WxS9Gdo=)
                          2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: 9LnKvF1xI4V5ZsU3r5vGWBSFc1ckNngT+YGzNamTk4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:e3:83:01:9c:68:9e:67:1d:a4:56:56:0e:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
        Validity
            Not Before: Nov 26 19:02:52 2024 GMT
            Not After : Nov 27 19:02:52 2024 GMT
        Subject: CN=0f35a34cae9ce8dc0f881b99c51f0a6d507c3056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:ac:f0:f5:eb:b3:e8:7e:c5:ec:f2:16:b7:
                    db:d1:fc:24:87:c8:f5:98:fd:95:a3:67:f9:52:e0:
                    b1:20:94:30:ab:fd:73:78:99:05:c9:b4:4a:f0:83:
                    21:c8:95:69:c9:26:e8:a4:49:75:30:4c:e6:ca:35:
                    47:56:3f:dd:79:5b:35:75:36:64:87:d0:2b:8d:bb:
                    72:3e:4f:7d:b4:37:97:29:45:8e:ed:97:fe:ec:51:
                    83:c9:d0:18:27:2e:3e:57:6a:a9:e7:a1:0e:1c:62:
                    e5:b6:c6:0a:10:3a:66:c9:5c:b1:80:43:55:fa:40:
                    3b:f9:4a:78:40:14:2d:0a:f7:29:1f:e2:7d:bb:7e:
                    e7:90:ce:c5:45:6a:49:5d:bd:6e:85:71:bb:a8:8c:
                    83:e1:de:bc:ac:73:79:68:b2:2d:23:70:e3:c1:f7:
                    a9:95:94:0a:c6:37:7d:89:df:f0:4c:a0:38:cd:1a:
                    6b:5d:61:3a:92:ea:9d:0b:58:61:2f:d9:8b:b4:63:
                    4b:db:aa:af:5c:09:19:8a:fb:81:88:8d:7f:d2:7b:
                    15:6d:20:fe:4a:ed:12:af:27:29:d9:0b:37:64:fd:
                    19:90:df:1d:c4:05:08:1a:47:37:2a:4b:22:ef:9d:
                    40:11:b9:19:92:20:60:2e:6d:1b:66:09:00:a7:e7:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:A3:4C:AE:9C:E8:DC:0F:88:1B:99:C5:1F:0A:6D:50:7C:30:56
            X509v3 Authority Key Identifier:
                keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:91:ea:d4:9c:0d:e5:80:04:84:ac:8d:0a:e6:8b:fa:5f:a9:
         44:59:e6:25:3a:22:a7:7d:42:dd:0f:0b:96:ba:b8:56:b0:13:
         17:4e:d0:12:ac:c1:30:c0:c3:60:29:7b:ce:99:2a:5e:db:e5:
         28:86:d1:a6:b3:60:60:a4:cf:a2:e2:93:4d:ab:e1:3c:62:61:
         c5:a5:d0:a9:4b:3a:0a:de:5a:f7:4b:3a:3c:06:08:0d:34:04:
         99:68:8f:44:e8:99:88:5f:1f:75:b3:60:ac:e3:b7:b8:bb:03:
         b1:78:71:e4:2e:73:6d:5f:58:8e:60:4e:4a:04:31:10:37:fd:
         44:a8:62:01:b0:39:2d:3a:ed:ec:e0:e7:2f:48:0b:56:c9:be:
         09:2b:f3:21:95:30:8e:1a:b8:a0:17:fd:32:7f:d0:9b:27:08:
         b6:ec:62:be:7f:f0:ec:f4:18:56:3c:3b:71:f0:02:49:64:08:
         3b:1b:fd:15:32:dc:bf:e8:94:5e:ae:df:7b:54:a8:6a:ec:ac:
         08:11:22:19:bc:7e:68:ba:ab:3b:db:08:aa:cd:62:9b:fe:eb:
         72:8f:a9:37:e8:8e:4c:d2:39:46:db:c6:af:23:b2:74:36:c7:
         8d:20:ce:41:e8:d5:1b:98:21:2f:69:2f:60:5a:40:ab:19:dd:
         b1:9f:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:19 2024 by rpki-client on console-fra.rpki-client.org