Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
File:                     94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft (raw, json)
Hash identifier:          0cpLYwcANWIStWqYyR2Z9TYBV0Ai5cjaTemPwblU7YE=
Subject key identifier:   FC:C1:34:5A:B4:4C:A4:CB:57:2B:91:B6:14:B3:0C:FB:BB:B4:4C:55
Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Certificate issuer:       /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Certificate serial:       01936B222BBA665D3B12D420DE0AF0A31731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
Manifest number:          0949
Signing time:             Wed 27 Nov 2024 01:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:21 +0000
Files and hashes:         1: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl (hash: yxBi03AgQfMZXWMCiIr/JdGgyqSVB6HbTOCJbatLQDU=)
                          2: lLjLjV5kV32T4pOaqwk_r9NtB8E.roa (hash: bXdSrOeActBVw4kuCb3gQvjcjwRq5asGSgRJEcyop90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:2b:ba:66:5d:3b:12:d4:20:de:0a:f0:a3:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
        Validity
            Not Before: Nov 27 01:00:21 2024 GMT
            Not After : Nov 28 01:00:21 2024 GMT
        Subject: CN=fcc1345ab44ca4cb572b91b614b30cfbbbb44c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:59:ad:34:05:dd:81:61:3b:08:58:8e:c2:
                    96:3c:2e:61:2f:b0:63:e2:c2:a1:45:d9:9d:ce:c4:
                    52:3a:6e:19:3f:62:5c:70:10:61:78:b0:dc:e0:4d:
                    f8:03:8d:55:b8:b1:f1:49:c7:57:dd:44:d6:76:59:
                    d4:60:26:19:3e:44:5b:f5:9a:d0:49:3a:bd:f3:c4:
                    31:29:20:dc:2a:f0:5a:ab:4d:62:8c:b3:50:9e:d4:
                    3c:c8:73:07:88:99:81:3b:30:3c:a9:55:92:9b:a6:
                    6b:7a:b4:0f:00:e2:9f:ea:2b:56:71:8a:98:c6:e5:
                    83:06:d8:9f:87:60:b4:b7:37:44:f6:86:8f:b3:51:
                    5a:b4:13:15:3e:ed:55:8f:b5:27:21:f5:e7:ec:01:
                    12:01:af:4b:af:76:d4:76:b0:87:a5:41:b7:bf:f5:
                    64:83:8b:e8:f6:da:84:e4:fd:a2:09:80:6e:37:ec:
                    25:e0:42:62:1d:77:9f:56:af:ea:3e:17:8b:26:16:
                    1d:b8:f1:b4:97:bf:56:f0:ed:56:f3:97:bc:83:0d:
                    d8:ef:1e:21:2b:74:2e:aa:14:af:fe:3b:87:23:d2:
                    40:c1:5d:94:d0:82:f0:a7:2f:44:02:5b:60:42:03:
                    08:ab:d6:4e:39:4a:1e:5d:77:49:e6:3d:66:4b:d3:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C1:34:5A:B4:4C:A4:CB:57:2B:91:B6:14:B3:0C:FB:BB:B4:4C:55
            X509v3 Authority Key Identifier:
                keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:24:17:f7:93:5f:68:84:c0:cc:9a:14:2e:22:c5:57:37:
         86:72:e1:bc:30:52:2b:35:2a:db:0b:f4:09:e0:24:54:cf:aa:
         97:0c:fe:63:ed:41:a7:9a:7d:14:9d:da:95:96:91:94:9c:66:
         38:05:1e:11:e9:42:80:3e:17:cc:3c:eb:bd:13:a9:f2:c1:f9:
         7f:b2:3f:2a:0a:48:d5:e3:24:14:91:14:ff:7a:0c:1e:91:f9:
         15:b4:67:4b:dc:c4:e2:1a:fb:c8:4d:db:21:5e:f6:49:56:26:
         d5:cb:bd:dc:a5:aa:ed:92:5d:3c:ac:45:2d:0b:63:21:7e:3b:
         f5:9a:89:3d:e4:75:8a:2d:a6:c0:c9:7b:c5:32:0a:c4:af:d8:
         12:ba:bf:61:6f:7a:77:10:79:32:40:f8:cd:34:cf:68:aa:38:
         18:11:c3:d8:a3:70:e4:cc:58:87:f4:8d:61:54:d3:e0:ce:f3:
         3f:b6:43:92:29:c5:a5:ce:6a:f0:88:03:8e:5b:3a:4a:ec:da:
         b5:cf:aa:37:01:d4:f3:18:70:e0:ac:6a:2d:4a:a2:d4:d1:ce:
         e2:47:1a:5d:e9:06:e9:aa:79:35:e0:d8:d6:b9:61:ae:85:e7:
         8c:18:f4:a9:47:1b:d0:e2:46:b8:58:8c:ba:6f:98:8b:59:b3:
         5e:ab:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:52 2024 by rpki-client on console-ams.rpki-client.org