Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          IDgTdpOVkI6kUilHpS1T3bjkoYNS4YlJlZCYbi+Xp7Q=
Subject key identifier:   A6:8B:31:B3:39:19:A6:67:AD:14:ED:BE:F6:FD:C0:8D:39:88:C8:98
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       01935319AFCE03BE67C4A95C59C33EF6FC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 09:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 09:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:12 +0000
Files and hashes:         1: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: yVrzhHrrxf/Ra7B1zPoaly8G74SDS316za2llnAt7KE=)
                          2: ze9RQ4O_kXZQFQ6PyQ_agiynTLg.roa (hash: zVmVyK3qt2PyrLyXnTZdZG67ziURIOPc/S8QBCH8zx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:19:af:ce:03:be:67:c4:a9:5c:59:c3:3e:f6:fc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Nov 22 09:00:12 2024 GMT
            Not After : Nov 23 09:00:12 2024 GMT
        Subject: CN=a68b31b33919a667ad14edbef6fdc08d3988c898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:66:4e:7f:ce:4d:00:98:6a:84:9f:90:44:e1:
                    99:02:bd:72:d1:af:43:4d:61:79:90:7f:01:24:d5:
                    75:a5:52:12:75:8b:1d:b2:2d:b3:cf:c9:56:16:ed:
                    0b:c4:28:e1:ab:bd:ff:32:da:5f:e0:4e:44:ec:2c:
                    81:b2:48:be:02:0e:ea:22:a4:3b:c3:50:96:5b:38:
                    4c:71:4f:72:e9:32:ff:27:78:3d:4e:ce:70:0f:55:
                    a8:db:40:86:20:9f:39:d1:12:1c:04:ed:dd:ac:60:
                    c3:e6:cf:ef:50:e7:78:16:e0:12:77:e6:21:b1:a7:
                    16:75:69:2b:42:89:dd:8e:f6:d6:84:19:07:a1:f7:
                    89:b6:34:fe:e3:66:ed:1e:6d:97:23:b5:11:a0:48:
                    9c:2a:e1:56:fc:e2:b9:01:25:e7:69:58:be:89:5e:
                    e7:9a:02:7a:fa:e2:d9:bd:02:0f:08:a0:7f:4e:de:
                    5d:8b:dd:e6:74:38:bf:c8:12:a1:44:d5:be:66:4c:
                    5b:e7:3e:5d:67:ee:02:7c:e5:e0:d3:e2:99:13:8f:
                    50:52:fe:45:62:91:d9:41:bb:55:67:20:b6:a2:76:
                    a4:5e:ce:78:b0:e1:64:2a:ba:63:a4:db:a3:cb:f0:
                    45:01:10:1f:3b:b2:08:0c:b7:1e:a6:c3:e0:23:5d:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8B:31:B3:39:19:A6:67:AD:14:ED:BE:F6:FD:C0:8D:39:88:C8:98
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:6e:0d:22:32:af:54:77:20:7c:f0:11:36:3b:9e:6a:5c:
         e5:a4:cb:f7:85:ca:65:08:9a:7b:8d:36:92:50:06:aa:64:48:
         52:cc:6a:8c:1a:ca:45:87:9f:78:bb:51:ff:da:dd:26:6b:0a:
         95:52:38:36:e0:a0:ac:a3:ac:6e:bc:03:5c:6a:a3:08:af:1e:
         40:e0:e2:d5:92:f0:dd:c6:91:6c:a0:a9:ab:06:ee:e8:9a:3e:
         d6:b7:af:82:56:f6:7d:88:c6:a4:2b:aa:93:a8:1a:f2:e0:b9:
         72:89:dd:a6:80:83:b9:a2:47:18:77:57:31:f8:01:d1:dc:18:
         2c:ce:b9:0f:3b:5a:ef:9a:a5:0d:fc:c8:51:58:86:5b:42:c2:
         47:f7:da:1e:da:77:8f:2b:56:9d:35:ec:25:7a:82:4f:0c:4c:
         1b:24:81:a5:1b:64:a1:fe:f6:a4:d4:77:fb:46:c1:2d:75:3e:
         b9:3c:e1:ef:fb:2c:1d:81:69:1a:f1:b4:f1:9f:ee:6e:db:5e:
         fe:24:ce:15:7f:04:6d:48:43:8b:19:f1:35:6b:75:03:5a:6f:
         44:58:bc:80:3e:18:81:84:02:1e:b1:67:77:08:3f:9e:b6:94:
         d0:00:9e:7f:cc:88:7b:43:7c:ee:11:47:a8:d3:1a:4e:48:f6:
         95:47:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:35 2024 by rpki-client on console-ams.rpki-client.org