Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File:                     2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier:          Dz3BSf8uTnLNNnj5QsK6XBR7uIK6Beza+r85sI5ume8=
Subject key identifier:   9C:8E:31:FF:E1:20:EF:0D:F6:85:90:F1:86:2B:2D:AF:A6:B2:84:EC
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer:       /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial:       019405D8152E11E9F2C940722E9243B790AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number:          018D
Signing time:             Fri 27 Dec 2024 02:00:34 +0000
Manifest this update:     Fri 27 Dec 2024 02:00:34 +0000
Manifest next update:     Sat 28 Dec 2024 02:00:34 +0000
Files and hashes:         1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: 3B63OPK41Sm32pMN3Z5RHMnXZOStgwwI1ataVNIDCRM=)
                          2: VH-E7tuBYicdGasqDwA3PX85jFE.roa (hash: IR5r8F8C9HTkvm1jdTo1lnYPLwPi0D17HcmAa9wh48w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:d8:15:2e:11:e9:f2:c9:40:72:2e:92:43:b7:90:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
        Validity
            Not Before: Dec 27 02:00:34 2024 GMT
            Not After : Dec 28 02:00:34 2024 GMT
        Subject: CN=9c8e31ffe120ef0df68590f1862b2dafa6b284ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:e4:cb:6c:75:e6:56:c5:e0:de:48:e2:3d:
                    34:80:0a:2d:68:8f:a4:35:cd:40:0c:80:11:b3:e1:
                    fa:72:cc:74:ba:a2:ce:06:10:8a:dc:92:9b:fc:b2:
                    8f:61:db:d2:61:36:16:ca:36:01:4b:76:73:1f:a6:
                    cc:80:ab:c2:7c:c4:1f:a5:db:c1:dd:12:d8:b1:a3:
                    6f:f1:83:c4:e2:e3:66:3c:55:4c:f8:70:a4:9b:ca:
                    c0:34:69:a9:5f:f5:4d:86:1e:84:30:d4:6e:3d:97:
                    2d:6f:ed:cf:4d:4c:fb:7d:22:c5:81:c5:fd:79:c8:
                    44:66:0a:fd:48:27:bf:86:75:20:cc:5d:5d:ba:94:
                    c3:a9:ee:2b:e2:aa:e5:c8:ac:7b:53:f5:32:36:cd:
                    33:bf:20:ef:86:4c:81:fd:29:ae:1a:17:30:59:9a:
                    ff:f6:3f:dd:36:82:a3:80:23:73:39:b6:0c:d0:ef:
                    b2:52:90:02:86:15:8b:04:4b:82:e6:5c:3a:cf:2a:
                    3a:76:74:5b:80:07:10:a2:92:45:04:7b:c4:8c:de:
                    84:a4:f6:5a:47:a1:08:48:e4:23:03:8d:8f:6d:6b:
                    2b:03:ef:1d:8e:c6:cc:25:3c:07:89:7a:8f:9f:30:
                    fc:a1:38:0b:8d:13:7d:9f:7c:b9:e2:ae:2d:2e:28:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8E:31:FF:E1:20:EF:0D:F6:85:90:F1:86:2B:2D:AF:A6:B2:84:EC
            X509v3 Authority Key Identifier:
                keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:d2:a3:fc:a5:1d:d6:9c:d9:f6:6d:ac:15:a7:17:ad:7c:
         8b:4a:23:c6:41:28:5f:a4:e1:5a:f7:58:4b:1a:0b:28:d0:21:
         00:23:0c:51:63:fd:81:40:e7:a1:3e:3a:87:ac:37:44:ed:0d:
         db:a6:7e:88:ac:55:a8:c0:12:e0:20:ed:95:66:a8:97:ca:14:
         d1:d0:39:11:88:67:3e:1d:77:4c:97:e3:77:7e:e2:d1:06:6c:
         00:c5:27:8f:2b:60:5d:6b:01:e1:6f:a6:2d:e4:e4:af:3b:29:
         06:a6:49:26:8d:2a:b0:4f:59:fa:13:51:88:0a:cb:cb:96:51:
         02:48:7a:50:27:bf:cc:38:26:5d:85:75:be:ae:24:23:61:13:
         e9:32:8f:45:a9:17:81:54:46:9c:ea:f0:a1:d6:a6:e9:79:31:
         88:9a:34:d7:9a:40:d9:ba:76:aa:b3:8c:e6:6f:f9:08:76:1d:
         22:cf:13:8d:d8:df:97:1f:b1:5a:6c:24:83:1d:aa:22:90:da:
         9f:c1:cd:16:18:9d:05:de:e4:75:9d:de:1d:e3:29:2e:5c:b2:
         8b:f6:71:39:07:a2:10:36:15:e2:53:dd:98:d2:5b:86:5f:54:
         a7:b8:f3:85:2a:b6:6c:f9:22:be:fe:6a:0f:b3:c9:d0:76:91:
         0b:58:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:57:06 2024 by rpki-client on console-fra.rpki-client.org