Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
File:                     Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft (raw, json)
Hash identifier:          10V8ufCp8pvyKCQGopS3Fzjtjc13riW+bBRMextcae4=
Subject key identifier:   B9:AB:0A:05:46:EC:4D:D6:50:3D:3A:33:7B:BE:C8:98:E1:DE:2F:1C
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Certificate issuer:       /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial:       01936A469841F5A5DC9407676ECA8B8497C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
Manifest number:          064C
Signing time:             Tue 26 Nov 2024 21:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:31 +0000
Files and hashes:         1: 1-2cc4_ZSuvfRuoeAjQUcsfV1i7Q.roa (hash: fawD4FqkFWnHF6sY0RBlTT3XrUrJ+60m4V3Xt+DUcsY=)
                          2: Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl (hash: A7ht/tgcXf6FQAZi/FHllX52yXwGs4g9QdXmEL3G7lI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:98:41:f5:a5:dc:94:07:67:6e:ca:8b:84:97:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
        Validity
            Not Before: Nov 26 21:00:31 2024 GMT
            Not After : Nov 27 21:00:31 2024 GMT
        Subject: CN=b9ab0a0546ec4dd6503d3a337bbec898e1de2f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:dc:d3:49:fd:bb:1e:a0:1b:76:72:6b:40:
                    a8:af:41:c0:cb:09:f8:2d:4a:ee:f0:7a:ce:29:e7:
                    90:f5:ea:fb:fe:08:7c:b6:ba:f7:92:d8:31:95:73:
                    e9:e8:63:14:ba:73:f0:8e:6c:21:92:2e:5e:00:af:
                    31:0f:bb:a7:e6:16:09:eb:f1:71:b9:5f:92:0d:90:
                    d7:a0:49:e0:1a:20:3a:d3:9a:8e:9a:b2:e6:4f:8a:
                    9b:02:23:ec:f3:43:f3:1d:c1:92:a7:2b:33:3b:7d:
                    42:a3:48:1d:ad:42:7c:7d:85:c3:01:77:3a:01:6a:
                    00:17:00:09:2b:8c:c3:cd:26:61:d4:d6:fa:fb:28:
                    3a:f6:17:cf:74:b2:78:cb:d3:90:48:d0:83:9b:4c:
                    9f:be:5f:69:1d:b5:78:b3:8c:69:19:7d:73:39:0b:
                    cf:39:70:bc:bb:21:a6:53:b9:48:80:13:f1:1a:7a:
                    b2:15:4a:7b:7f:77:c5:21:9f:97:11:67:62:f2:56:
                    b8:8e:b5:f3:03:a4:4c:b4:b1:00:b4:b5:0d:9b:ea:
                    bf:bb:00:2b:53:66:f5:61:f3:6b:9a:73:25:6e:71:
                    b8:6c:26:e0:a5:33:cb:dc:b6:97:51:9e:2e:0c:55:
                    34:9b:17:bd:9c:63:00:9e:c2:3e:cf:8c:b4:54:ba:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:0A:05:46:EC:4D:D6:50:3D:3A:33:7B:BE:C8:98:E1:DE:2F:1C
            X509v3 Authority Key Identifier:
                keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:82:cc:93:0d:2b:30:d8:dd:83:e5:08:9e:7a:25:da:9a:
         83:5d:cc:16:9f:57:02:90:b8:14:fa:38:50:2a:f4:24:5a:f8:
         0e:2b:d7:b3:a6:e7:02:b9:6e:45:90:a1:ea:7e:21:f7:fc:be:
         5b:ed:96:9c:e9:44:e0:d8:1f:84:eb:8f:79:2a:aa:da:c2:0c:
         bb:48:15:5d:4b:0a:21:41:c9:3b:45:69:8f:05:74:01:5b:42:
         28:31:61:85:42:ce:04:15:07:0f:40:48:81:f9:92:d0:72:18:
         50:8b:b2:ef:a2:31:de:77:7c:e1:31:8a:fc:6c:16:f2:96:51:
         ba:6f:b1:d8:4a:8c:d2:e0:8e:03:0f:c3:2f:3e:1c:d4:bf:ec:
         e4:ab:d6:4c:1f:ea:74:fe:9b:9a:8b:e4:d4:a4:82:94:e7:62:
         9e:10:fc:14:19:9b:0c:01:c0:fa:90:5f:49:cd:a5:7c:5b:d7:
         26:b2:e4:08:f2:79:1b:e3:52:5e:d7:57:ca:57:e9:c3:5c:9c:
         a8:c2:fa:6d:9c:03:c8:35:75:b0:3d:51:25:7f:45:b0:da:4d:
         fd:1e:df:da:53:21:3c:03:1d:67:14:00:ba:5a:1e:cc:f8:b4:
         d5:75:f8:cd:6d:44:50:be:37:90:36:b1:3d:07:71:ad:5a:10:
         fc:65:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:17 2024 by rpki-client on console-ams.rpki-client.org