Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File:                     2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier:          YxfNAoaHaePL4ssi0qLqJBTzWqvG4Fo1OCCm7uT3mJw=
Subject key identifier:   1E:D7:AD:F5:29:DB:C1:8E:4F:7F:51:29:2F:2F:ED:91:EC:5F:0C:66
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer:       /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial:       01936A7DCDEAEE88987DA755D1EF88FE40FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number:          0E56
Signing time:             Tue 26 Nov 2024 22:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:49 +0000
Files and hashes:         1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: 7b/9PYn9KenbDLPR+kUlGbeWLvDW9qzfveoguvURVh0=)
                          2: wViVnHNGkilHXbqVMRGC76Fz33I.roa (hash: dPVPiV68TAdYHYJ5wLPpd8rshbobQu3ep0Lm4wJ8rPk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:cd:ea:ee:88:98:7d:a7:55:d1:ef:88:fe:40:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
        Validity
            Not Before: Nov 26 22:00:49 2024 GMT
            Not After : Nov 27 22:00:49 2024 GMT
        Subject: CN=1ed7adf529dbc18e4f7f51292f2fed91ec5f0c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:a1:bb:f9:37:7d:2c:88:ae:c3:eb:b7:50:
                    26:26:0b:9d:dc:b9:99:9e:f4:9f:53:d2:e6:02:a1:
                    2b:24:09:ef:7e:d6:b1:39:ae:cb:c5:99:35:94:42:
                    75:2a:8b:09:6b:05:0b:f7:c1:05:6f:ac:c3:81:0d:
                    d5:18:72:47:40:bc:c3:28:8d:5c:e1:cc:75:3e:bc:
                    24:3d:1f:80:de:78:08:aa:2e:72:ef:bd:93:41:8e:
                    f1:7f:da:62:80:de:8a:7d:b1:22:6e:4c:16:a6:58:
                    df:ed:8b:73:56:11:cf:8b:bc:eb:01:c9:49:4b:4a:
                    65:54:0c:b0:07:57:de:1a:b7:8c:fa:b1:80:7b:19:
                    13:ee:6f:15:2a:77:67:24:f0:6d:b2:d5:bd:43:a2:
                    0a:34:e0:b5:66:36:fa:2d:34:f8:5e:4c:f2:e5:14:
                    ad:0b:69:a2:f9:6a:97:38:18:17:cd:a0:b5:38:21:
                    ac:27:d6:fe:10:25:2e:ef:1f:ab:2b:ae:e6:37:93:
                    52:60:13:39:50:a1:ec:8d:65:4a:b8:59:40:d5:61:
                    d2:eb:23:ed:40:93:18:99:f8:b8:fc:c6:d8:2f:37:
                    16:b5:80:e6:62:1c:dd:a9:08:06:1b:16:db:aa:03:
                    64:58:d9:45:b6:ed:69:1b:5b:81:4f:57:ab:74:8c:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D7:AD:F5:29:DB:C1:8E:4F:7F:51:29:2F:2F:ED:91:EC:5F:0C:66
            X509v3 Authority Key Identifier:
                keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:76:fd:89:c7:05:b9:58:2f:3d:6b:e4:b7:61:56:8b:c7:68:
         c5:5d:67:8d:05:c8:70:bb:f9:80:f1:ff:2f:86:a7:60:79:78:
         81:5f:73:b4:66:3a:ba:89:85:61:4e:e9:ba:fb:44:98:ad:f1:
         6b:32:56:47:4f:b2:f0:70:d2:51:37:d1:51:54:86:d4:f5:c1:
         13:9e:29:b8:c4:df:f2:d4:18:ff:4f:9c:f1:8c:eb:bb:87:e1:
         71:58:94:90:57:da:92:5a:9b:62:b5:34:f1:db:c5:f9:04:bb:
         ef:cc:20:43:82:bd:2c:bf:d3:64:8a:9b:9e:4d:25:c2:1e:22:
         f0:19:17:86:82:81:cf:78:20:a7:7f:60:22:08:06:46:36:36:
         d4:f9:da:13:4a:1f:13:f6:13:8e:8b:f9:45:7c:75:ef:79:07:
         7a:d5:39:c5:3b:08:ec:25:42:45:fe:78:5a:0a:77:78:00:2d:
         df:c3:56:d7:98:91:0a:db:84:f3:d1:0b:29:67:d3:4f:04:de:
         94:f1:28:93:8d:f9:2a:ca:59:d4:d0:8b:84:2c:34:38:36:e7:
         c3:36:63:e9:38:f2:64:47:a0:44:9f:d1:e0:3a:43:07:8b:27:
         d8:66:cb:11:55:6c:df:e6:25:5e:69:dc:48:ae:79:6f:16:63:
         77:20:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:33 2024 by rpki-client on console-fra.rpki-client.org