Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier:          C7cabVBoGRCOwCzxhf98eCOwu/LLSJNZycV+VhYipEc=
Subject key identifier:   A2:B7:D1:98:CE:DC:0F:4F:5F:19:1F:26:E4:DC:74:DD:62:42:87:9F
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer:       /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial:       019356F7109CF2F2E5890AFAE3C63D5294F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number:          0E4E
Signing time:             Sat 23 Nov 2024 03:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:52 +0000
Files and hashes:         1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: qsUyZwn1E9T8R1UD6p/r0j62iJ5WLIgBV/qQthP+bcs=)
                          2: FNE1igwCDXQ7G8VCywESo1e1Poo.roa (hash: de1QGtAFTg/jy/XW/cPh+ryARLUhJksQRfYzpc+seR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:10:9c:f2:f2:e5:89:0a:fa:e3:c6:3d:52:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Validity
            Not Before: Nov 23 03:00:52 2024 GMT
            Not After : Nov 24 03:00:52 2024 GMT
        Subject: CN=a2b7d198cedc0f4f5f191f26e4dc74dd6242879f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:5d:1b:92:11:3b:1b:59:05:8e:75:81:e7:
                    26:fb:5f:ff:17:5c:b2:89:d8:14:07:09:95:91:4f:
                    60:61:b1:fd:dd:68:9e:a8:6f:8f:66:14:63:da:9c:
                    dc:e9:66:84:5d:71:92:8c:27:95:96:54:76:92:b5:
                    a6:fa:21:3a:30:d6:26:bf:ca:f4:b4:25:42:c6:40:
                    39:e8:c4:a8:77:5d:84:8b:0f:61:c6:45:c9:62:8e:
                    01:b4:0b:5d:90:ce:4e:d4:57:b3:6d:93:0d:7e:06:
                    88:2c:e4:f6:fb:29:88:9a:7b:e7:2c:a0:0d:06:74:
                    68:45:b6:60:ce:7c:6f:71:a0:5b:ee:8b:43:49:9d:
                    e9:7a:a6:3e:51:94:bb:b8:66:18:9e:d2:7b:e0:34:
                    ec:53:19:67:06:a4:0c:03:ce:ef:1d:4d:0c:11:46:
                    03:45:5a:d7:99:f1:49:7a:1f:06:cd:85:05:74:3c:
                    12:36:f8:0d:27:2b:ea:eb:35:1b:ad:69:30:e6:e6:
                    9b:28:81:56:a8:b4:5d:53:e2:b7:55:4d:ea:0b:66:
                    42:58:14:97:a7:7c:b6:ed:de:e4:ba:63:4e:1f:45:
                    46:b9:bf:82:71:40:e7:19:0e:1e:82:60:57:74:7c:
                    45:18:5b:92:9a:71:3d:4b:1f:98:ea:24:90:e1:f2:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B7:D1:98:CE:DC:0F:4F:5F:19:1F:26:E4:DC:74:DD:62:42:87:9F
            X509v3 Authority Key Identifier:
                keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:52:d2:c5:7c:5f:8a:e3:ee:bf:1a:f1:bf:21:02:ca:61:9e:
         0b:4e:c5:57:33:41:34:fc:28:94:6c:13:00:b1:42:37:54:0a:
         09:bc:ef:b4:05:f7:62:f1:37:ae:9e:ee:23:4c:01:76:f4:dd:
         91:92:86:af:54:60:3c:ff:95:a9:e4:fc:72:58:09:10:41:8e:
         94:1a:1e:d0:06:d6:82:a7:b3:df:7b:82:5c:c0:9a:b0:f4:fe:
         18:7d:d7:82:f7:89:7f:cf:0b:2c:1c:59:92:08:bf:9c:4f:1c:
         c7:77:72:21:0d:f2:b6:62:b5:21:fe:e1:57:64:09:d4:19:93:
         72:14:83:d0:1a:16:cd:d2:9b:7c:07:2e:bb:2a:6a:ab:24:ed:
         81:d5:25:58:55:52:32:08:44:08:65:c2:a5:dc:e3:bb:4e:01:
         99:74:24:eb:29:91:7a:14:b0:ba:ba:99:50:c0:95:eb:20:b2:
         c6:5a:2e:15:9b:fb:47:a1:5d:04:f4:94:2a:dc:7a:f3:8f:30:
         3c:c2:ea:15:aa:ee:c5:ca:e4:c0:b5:76:89:1e:0a:3d:a7:ec:
         6f:59:ba:46:b3:db:94:f8:43:d0:59:03:5e:43:c9:39:c4:0f:
         86:20:bb:a6:9a:2a:b0:62:aa:de:b0:13:28:a3:e6:20:9c:0d:
         be:0a:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:31 2024 by rpki-client on console-fra.rpki-client.org