Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File:                     mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier:          6VYL0fXZPDrAol138ZxhmlxpOeb3KjbQUL3zPtHmPtk=
Subject key identifier:   8B:DC:BF:2A:99:6A:2A:5B:4B:43:54:F4:6B:61:B6:E2:38:ED:82:08
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer:       /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial:       0193568918F95023C431CE755BC047BF961D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number:          02CC
Signing time:             Sat 23 Nov 2024 01:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:45 +0000
Files and hashes:         1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: zCBgJDlFc0/d+x8P9z6ZId12URodt0obC02hsbmpNqs=)
                          2: xRFuoUOKokXyq1-x5HAd_UoPSPQ.roa (hash: Lf6eVEBLY+mm2kggOw6hPFoiiRo+PGY7ItilsMbZVmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:18:f9:50:23:c4:31:ce:75:5b:c0:47:bf:96:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
        Validity
            Not Before: Nov 23 01:00:45 2024 GMT
            Not After : Nov 24 01:00:45 2024 GMT
        Subject: CN=8bdcbf2a996a2a5b4b4354f46b61b6e238ed8208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:5c:36:e1:d9:4f:9b:3b:5c:4b:20:89:0d:
                    27:03:92:a5:f7:4f:40:5c:34:39:ac:c6:dd:2d:8f:
                    bc:2e:12:a1:30:1e:10:3d:18:c3:f7:45:13:f1:77:
                    2a:89:91:bb:56:99:24:ca:a3:91:8f:f5:cf:02:cf:
                    71:0c:d2:82:9d:37:fa:38:ba:ac:f9:ed:1d:68:ce:
                    1d:95:2d:ae:dc:c9:f5:d6:d7:99:36:cf:29:56:c1:
                    b8:3f:4e:1f:00:01:d0:50:12:40:13:1d:44:96:fc:
                    2a:f2:7f:38:b8:18:5d:ef:13:c2:a3:b1:ac:a4:49:
                    92:d9:0c:99:49:1f:34:69:fc:81:cf:65:10:1a:e5:
                    ee:50:48:16:af:58:27:37:52:5d:a4:53:b9:3c:80:
                    c6:4a:b1:56:de:32:b2:e6:1c:9b:94:16:ea:c7:cc:
                    57:3b:0b:7a:ea:77:d5:31:74:4a:19:97:cf:7e:0d:
                    ad:2c:c9:ec:6d:a5:7e:d6:ac:be:bc:72:79:26:22:
                    12:35:11:d5:00:b0:ff:44:3b:3c:14:68:f6:44:5f:
                    20:93:9d:a8:b2:12:df:79:70:c6:d1:00:1b:ac:2f:
                    94:14:c9:62:94:60:57:16:78:59:14:54:7d:67:7b:
                    55:7b:5f:54:9e:8a:7d:71:80:03:90:ed:34:e0:e5:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DC:BF:2A:99:6A:2A:5B:4B:43:54:F4:6B:61:B6:E2:38:ED:82:08
            X509v3 Authority Key Identifier:
                keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:2d:72:b4:fd:67:74:4d:0e:e9:8f:b5:bf:27:9b:61:b3:
         ad:72:e0:11:6a:f8:b4:91:a2:f9:25:61:34:23:13:5a:6c:a0:
         0b:a4:80:78:38:01:65:2d:4c:b5:96:14:ce:19:82:1c:b2:dc:
         c8:b9:27:69:9b:1a:02:c7:c9:0f:af:c7:1e:cc:8d:64:18:e7:
         14:a3:03:3c:7f:9c:06:e0:a2:d7:dc:e6:c1:c1:e9:7c:8e:13:
         9b:b1:ad:45:e8:79:e9:96:19:6b:8d:76:f3:5d:8e:e0:47:8c:
         02:2d:7d:6f:d8:2c:65:0d:0e:24:69:e4:43:31:9b:4b:47:81:
         24:a9:39:ca:65:93:a6:f2:d8:e2:6d:00:71:ea:6e:d4:84:74:
         50:19:65:19:64:2d:0e:c9:72:7c:6b:cd:9a:49:fe:a1:e5:bc:
         b0:1d:ed:9f:5f:38:a7:87:89:7b:19:4d:91:43:79:ac:01:44:
         6b:4e:21:02:31:ef:8a:44:08:e4:39:ba:3a:74:1a:9d:58:9c:
         98:f7:51:fb:fb:0a:b6:61:ad:74:cb:3e:45:52:35:de:b3:0f:
         f2:98:1d:5f:b5:58:85:c4:7a:c6:a2:77:5b:c9:cd:9a:0c:89:
         ac:c1:c1:8b:aa:78:6b:12:87:e0:78:36:85:8b:b7:6f:64:fd:
         e5:cc:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:14 2024 by rpki-client on console-ams.rpki-client.org