Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File:                     B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier:          cH10Gv0lpv1dsemAqYpoYP6GaCOtIN1i+AKWxQTWVHM=
Subject key identifier:   EE:9C:27:43:D2:AA:8D:50:08:8A:CB:99:55:65:C5:4B:11:60:DB:FF
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer:       /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial:       0193640E3740EB0C76F0B3EEC12BD90904D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number:          06B2
Signing time:             Mon 25 Nov 2024 16:01:13 +0000
Manifest this update:     Mon 25 Nov 2024 16:01:13 +0000
Manifest next update:     Tue 26 Nov 2024 16:01:13 +0000
Files and hashes:         1: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: 6pA+uqEmtCef5bJdXvPkbZa8aRRj4SdjFntLnCJV77U=)
                          2: J0X2ia_8WSA97Of1Px5wVP2kWyw.roa (hash: TWm5JWEIZB+mP1wZQ2C04ePrElzGPe8kcfa+vR6Pgu0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0e:37:40:eb:0c:76:f0:b3:ee:c1:2b:d9:09:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
        Validity
            Not Before: Nov 25 16:01:13 2024 GMT
            Not After : Nov 26 16:01:13 2024 GMT
        Subject: CN=ee9c2743d2aa8d50088acb995565c54b1160dbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:a0:c5:91:29:84:5a:d0:4f:6f:8f:aa:3a:
                    eb:6f:9a:1c:0a:d6:bf:b7:7e:7d:7e:90:44:ec:c2:
                    d3:4b:29:30:87:eb:d4:f9:b5:69:1c:0b:d5:a7:f0:
                    df:c5:a7:65:6d:4c:19:3d:19:6b:26:1e:65:22:3f:
                    86:cd:e8:ff:7c:ea:53:bb:54:e2:3e:2e:d9:db:a6:
                    e1:cc:a4:9a:6a:1d:c2:66:ed:c8:97:bc:12:bb:28:
                    a3:63:a0:6c:5f:20:6b:0a:fc:59:4d:42:b8:38:fb:
                    b9:0a:8c:d5:06:fb:5a:32:85:f0:61:dc:7c:a9:3a:
                    4b:a8:6f:b3:42:49:83:02:80:d4:95:0d:d8:dc:10:
                    96:17:e4:a5:72:eb:81:74:8e:42:b0:5e:3c:02:35:
                    d6:19:a8:5e:9f:03:e9:6a:30:f2:ce:6f:0b:02:9f:
                    48:46:4b:d6:57:51:48:05:64:87:ba:ae:83:67:9d:
                    59:73:de:03:ff:aa:b2:cd:3f:82:9b:79:75:96:bf:
                    d3:bf:fd:3b:73:e9:0d:c9:64:89:8e:63:fa:43:ec:
                    04:1e:3c:19:83:4d:fa:a9:20:fb:55:6f:57:89:3b:
                    e6:9e:33:11:98:18:fc:6d:24:d4:fb:f3:0a:34:27:
                    3a:93:a2:d3:7d:e0:ae:72:02:23:ed:d4:75:08:ea:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9C:27:43:D2:AA:8D:50:08:8A:CB:99:55:65:C5:4B:11:60:DB:FF
            X509v3 Authority Key Identifier:
                keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:dc:5b:43:74:02:21:0c:d1:77:f9:80:d5:1f:96:41:5b:
         34:b0:3a:c4:76:82:95:8e:fa:3f:45:fd:b4:6e:19:6f:84:52:
         79:b0:f6:37:cf:c4:76:6d:3d:a3:68:24:f2:f4:58:4b:db:be:
         ef:9e:cf:f1:80:51:20:6e:02:6c:95:2f:92:a9:f4:49:ff:f8:
         a3:02:86:23:29:ff:37:96:76:0f:bf:88:11:8a:61:1a:28:20:
         b5:01:05:4b:63:db:82:ee:b5:01:0f:05:35:44:b5:8d:e3:30:
         07:ad:db:d5:7b:57:dc:ba:9d:9d:18:30:bd:f8:b6:bb:44:d6:
         60:d7:d3:44:7b:f9:4a:4a:87:bf:97:3e:35:5a:f5:db:97:c2:
         5a:9a:ee:06:66:91:f1:c9:cd:8f:c5:fe:4f:40:98:ae:1a:3f:
         66:9f:8c:7a:fb:b1:58:99:c3:ab:c9:71:8e:b8:e4:ed:6b:39:
         fb:61:b5:ac:ea:2d:a6:12:ca:e9:16:1c:65:e4:39:4e:db:46:
         74:67:04:93:5e:e5:6b:45:65:ed:39:0c:a8:9a:4e:07:10:1d:
         ec:40:e3:81:1e:7b:3c:07:e4:1e:aa:e7:8a:d8:9e:19:78:4a:
         8b:10:59:79:5a:cb:42:4a:de:4e:27:3b:ea:14:ee:29:3a:d8:
         6c:1e:14:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:40:46 2024 by rpki-client on console-ams.rpki-client.org