Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
File:                     dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json)
Hash identifier:          FV3kJKs+X4TsViPDypMoHmtvjE1icr87Bfb29+6wBtY=
Subject key identifier:   2E:66:A1:6E:83:F8:CC:1D:82:5A:22:20:2A:76:3C:F8:B9:04:89:70
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Certificate issuer:       /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial:       019356F6DA2F7E79828AFA2DA0CEAB6DFBD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
Manifest number:          0CD3
Signing time:             Sat 23 Nov 2024 03:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:38 +0000
Files and hashes:         1: QurFSvltLheI9wL9x6fybp6ZnV0.roa (hash: ToFATAMTTnJUAUSrFpFLWGPBg40p/4wGP6XWPY9GL/0=)
                          2: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: 9nnm1fm2dWHDvFBkzsbCv7FaVAdmtgLXlhPoSYpWhJE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:da:2f:7e:79:82:8a:fa:2d:a0:ce:ab:6d:fb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
        Validity
            Not Before: Nov 23 03:00:38 2024 GMT
            Not After : Nov 24 03:00:38 2024 GMT
        Subject: CN=2e66a16e83f8cc1d825a22202a763cf8b9048970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:a5:d1:8c:58:e3:7d:65:16:20:b8:6c:fa:
                    5a:ff:f4:51:2b:a8:6c:77:15:36:e2:11:40:6a:b4:
                    36:a6:43:06:58:ce:3e:5a:20:91:1f:1e:c0:a7:fc:
                    48:9e:79:d7:2f:a2:6f:f2:0a:b3:04:c6:8f:8b:2c:
                    ab:5a:da:c6:8b:55:fe:7c:a4:de:f7:5b:0a:a3:be:
                    f6:7a:d1:39:11:21:b8:77:e1:73:f0:ab:4f:9a:68:
                    bc:f6:95:af:0e:a8:19:3a:ea:92:75:72:ca:18:ab:
                    db:5a:54:4d:2f:f7:12:0a:a3:d2:b9:3b:4e:8e:ed:
                    5e:54:90:b4:69:4f:e2:90:6c:85:e4:35:cf:1f:4a:
                    29:cc:9c:a3:2d:34:c2:a8:c0:b7:1f:aa:14:cf:02:
                    ad:9b:f6:c7:c9:35:5a:7d:fe:08:e5:bb:0d:2d:c1:
                    1d:5e:84:9a:7c:f7:b0:95:ca:4e:53:cc:c1:db:22:
                    2a:27:f1:db:42:76:e4:7a:63:0a:b4:1e:fa:1e:13:
                    a4:42:56:e6:c0:d1:fc:7f:a0:94:f4:8e:19:35:18:
                    ef:2c:10:ea:95:67:26:b1:00:68:c7:eb:6c:da:67:
                    e1:a5:f8:24:75:63:4e:84:c7:3a:21:16:11:7e:88:
                    9a:b8:c8:12:15:a1:c0:a4:46:92:a1:0a:2f:5a:84:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:66:A1:6E:83:F8:CC:1D:82:5A:22:20:2A:76:3C:F8:B9:04:89:70
            X509v3 Authority Key Identifier:
                keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:5c:78:c5:85:b2:ab:d4:28:4b:85:a0:d1:36:e0:6b:30:
         80:a9:dd:4d:dd:39:60:43:40:38:12:3a:04:d5:19:b7:d5:e1:
         f7:e1:88:53:2c:32:1a:f7:3d:29:60:25:3a:9b:8e:f1:e1:ba:
         9a:d6:f9:4d:bf:eb:73:7f:04:d8:fa:ef:05:c9:14:be:fb:d1:
         fc:da:dc:b4:49:43:19:7e:e3:94:21:ec:c9:22:ad:86:8c:14:
         b5:72:7b:59:a6:be:9a:9a:0b:dd:00:aa:94:ba:83:3c:14:64:
         d0:ce:9e:d3:2c:cf:b4:61:94:9a:ea:ed:d0:a5:0a:a7:ec:8f:
         1e:96:91:c9:0c:bc:35:b2:1c:35:7b:57:32:da:7e:a8:32:98:
         35:81:6f:2f:c5:62:a7:a4:6b:68:81:89:cd:45:34:35:c4:e1:
         53:e1:76:16:e3:ce:3d:4e:f5:f8:b9:f8:4c:ea:10:2a:5e:28:
         b4:8f:77:bc:b1:de:a1:e9:55:87:7e:3a:14:dc:30:28:b1:50:
         34:fd:df:55:96:00:8a:05:75:0a:8c:5b:2d:91:e9:a4:14:93:
         ec:43:b8:cf:56:63:ab:6b:53:b2:1f:82:4b:1e:40:5d:ef:4f:
         a0:a2:94:7b:90:eb:39:47:ed:c5:3f:6d:cb:a8:ab:f8:e4:11:
         4e:1e:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:22 2024 by rpki-client on console-ams.rpki-client.org