Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File:                     UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier:          BHx+GfV4ZxAtsbwa3Velt4lD0bAGK+a/OLtLd+vX8as=
Subject key identifier:   CC:6B:BC:E6:16:8A:63:1D:37:FB:1B:5B:94:E4:87:63:08:48:E4:C6
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer:       /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial:       019357D2777532AD13F185A12E7FD8BC0183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number:          072A
Signing time:             Sat 23 Nov 2024 07:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:31 +0000
Files and hashes:         1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: R2b0cFER5lovjy6N2ewDDKuTxe8cscH4AuItPqa2Lj4=)
                          2: dUQjmDQ8iuKZ1v_mxUXrIHPDVoE.roa (hash: Z+xjMoJU+5gvEnTgx2O0ojOwLzabWLcNrfHR2FfgGoc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:77:75:32:ad:13:f1:85:a1:2e:7f:d8:bc:01:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
        Validity
            Not Before: Nov 23 07:00:31 2024 GMT
            Not After : Nov 24 07:00:31 2024 GMT
        Subject: CN=cc6bbce6168a631d37fb1b5b94e487630848e4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:0d:b9:e9:2f:26:7b:16:37:11:43:9a:88:
                    d8:7a:2d:67:54:8b:64:e9:25:08:d8:9e:31:1a:a6:
                    bd:23:d2:90:0e:c2:5b:4f:3a:f6:53:c5:48:c5:59:
                    01:cd:dd:ca:30:05:a8:57:b3:34:25:0f:59:ff:62:
                    a9:96:de:e6:3a:2f:be:af:96:04:70:41:2b:42:04:
                    75:41:f1:81:dd:c1:77:9b:93:97:80:7f:f9:42:89:
                    93:fe:ff:a7:f6:75:cb:e4:77:d2:12:2e:36:9e:e9:
                    56:c7:05:73:6e:ed:a1:7a:1e:3c:fc:bd:eb:36:ae:
                    c2:78:33:8c:43:23:e6:7e:d1:06:ea:be:0f:c6:ae:
                    62:9a:e9:4e:e9:94:9e:49:f3:9b:08:6c:0f:37:41:
                    64:b7:fa:d3:7a:66:bd:95:2a:c9:56:57:36:90:89:
                    8d:79:49:b7:59:3c:df:c7:e3:34:50:58:51:74:68:
                    7a:6a:72:b1:38:24:9d:1e:11:2f:0f:5f:a4:22:c6:
                    82:0a:32:d6:7d:90:5a:bd:46:2e:bd:0c:3b:10:47:
                    8d:a5:b3:b3:79:5c:c4:43:a5:22:92:9c:4f:de:77:
                    79:9a:d7:61:10:aa:ff:09:58:41:f8:cc:c6:17:90:
                    a9:bf:52:32:b7:3e:8a:87:54:af:4e:11:88:1d:1e:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:BC:E6:16:8A:63:1D:37:FB:1B:5B:94:E4:87:63:08:48:E4:C6
            X509v3 Authority Key Identifier:
                keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:08:fb:cf:ba:09:1d:5c:10:e3:22:bd:12:63:a7:f3:eb:
         7c:e1:65:59:7a:09:14:73:43:6e:b5:6b:0b:37:72:1c:71:6f:
         6f:9a:52:ab:7f:b9:cf:31:1c:f4:d9:0d:90:1c:57:90:a6:b9:
         73:18:88:17:b6:6d:14:5f:8d:62:67:05:3c:81:50:93:19:10:
         7a:57:b7:3c:f6:06:c0:be:58:2d:d8:56:ec:1a:72:c9:9a:1c:
         50:18:be:54:47:6b:d1:ec:b3:8d:a6:0e:aa:10:be:4f:35:e3:
         3d:85:2e:16:e2:5b:1b:e6:07:2a:25:84:3c:20:1f:50:bc:55:
         b1:22:6c:7c:09:cf:01:da:88:e2:78:9d:ad:ab:05:7d:a2:1f:
         82:40:57:f0:71:01:fa:81:27:62:e5:1c:62:ad:73:4c:21:82:
         bd:92:1b:a9:78:c7:d7:24:46:49:b7:07:3f:02:60:fb:5e:8b:
         0a:58:b2:75:52:db:f6:2f:2b:88:9d:01:d8:e1:19:ae:40:14:
         58:a8:2c:20:74:42:27:f9:57:69:1b:9b:5d:7e:c9:6f:fd:8e:
         e4:75:aa:6c:4f:33:51:f4:95:c7:ca:db:61:a5:c6:8c:88:ba:
         ee:0a:af:3c:78:e6:33:b0:ec:cc:41:74:41:04:81:c7:78:65:
         c8:79:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:19 2024 by rpki-client on console-ams.rpki-client.org