Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File:                     0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier:          f392dU1iq223iOge2kD+Q7W9/Va5+AFupFqeuplXoPw=
Subject key identifier:   9A:41:B3:EA:5B:F6:16:D5:B2:94:6C:88:9C:E4:01:F7:7E:14:FA:99
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer:       /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial:       019351D0B89B75DCE9D0B2667E631DBFE8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number:          097A
Signing time:             Fri 22 Nov 2024 03:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:53 +0000
Files and hashes:         1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: 6SuYk/kMfnZIcCF9V4CQeQAaLMGtcw+575F3+u7VapM=)
                          2: PPGaCqZQ_QQkLSvRRFbRHsQw30A.roa (hash: ceGf1oE6s24qvqlD8ZtyRWnXzCn1240WNvc6YnJS8YY=)
                          3: _i5G6N8rn3TTCFbvLl3j5u8PbaE.roa (hash: z/TMijo2O3ngc3QzuqgIG/C26GaTBVavJmQpfTEfYDo=)
                          4: iiHavQKXUy6JmviBClir8d1T0QU.roa (hash: lbWkG2Wmme7UktR8dD01ehE8hfeUSbexySVHZ3Oym3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:b8:9b:75:dc:e9:d0:b2:66:7e:63:1d:bf:e8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
        Validity
            Not Before: Nov 22 03:00:53 2024 GMT
            Not After : Nov 23 03:00:53 2024 GMT
        Subject: CN=9a41b3ea5bf616d5b2946c889ce401f77e14fa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:05:04:f8:d9:66:ff:90:2a:df:07:16:77:
                    e5:46:14:6f:32:0c:00:2c:d4:80:54:71:0f:91:bd:
                    55:b6:5e:90:f8:51:55:dc:5f:76:4e:13:0f:86:67:
                    d3:2a:e8:98:f3:80:07:35:f2:0a:83:8a:92:6b:b7:
                    c7:da:e9:bb:79:6b:b1:07:45:fa:f4:1d:eb:c8:4e:
                    25:8c:b3:c2:27:cd:61:2b:ff:d4:63:28:ee:6e:71:
                    b6:eb:68:0c:6c:be:a2:39:95:cc:17:97:a8:87:c2:
                    7b:79:60:cc:1a:d2:a9:d8:02:8f:86:b5:f1:bd:06:
                    6e:74:7a:2e:21:eb:56:d8:37:6b:3a:bb:93:7b:ee:
                    50:7a:58:dc:9a:11:c8:fa:26:96:6c:f0:1c:5f:4d:
                    e5:e0:aa:e5:e9:c5:63:d7:6c:46:d0:72:d4:31:1d:
                    8e:15:18:b0:f1:ed:c4:e3:c9:26:bc:91:c8:6e:5b:
                    b0:5a:dd:cc:f1:6c:00:eb:f9:9c:9b:0a:f8:a9:b8:
                    14:b7:e1:f0:77:20:0e:5e:67:ca:38:aa:51:37:02:
                    96:50:d3:72:18:4f:66:3c:4b:3e:81:98:bc:11:19:
                    6c:96:85:0c:c2:68:ab:cb:96:fa:7c:da:f7:c4:4f:
                    67:8a:ae:32:64:da:e3:23:58:47:43:f5:8f:a1:03:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:41:B3:EA:5B:F6:16:D5:B2:94:6C:88:9C:E4:01:F7:7E:14:FA:99
            X509v3 Authority Key Identifier:
                keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:6d:0b:d4:7c:d1:ec:8a:fa:8a:ef:22:d5:b1:05:3c:b3:
         a8:ac:a2:6a:e4:f5:11:b5:ff:6a:79:fd:9f:b2:3d:0b:e6:91:
         c7:07:84:6a:a6:1c:de:c5:92:4d:b6:b1:73:ee:14:9b:86:cb:
         9d:c1:58:69:d0:9a:18:c2:62:14:9c:c4:8d:35:a7:43:74:f7:
         d9:90:0c:8c:02:34:59:90:9f:81:a0:00:b1:70:27:de:59:5a:
         e7:01:97:93:41:ad:68:4a:95:ac:df:2f:d3:43:c5:eb:72:10:
         86:3c:fd:8d:a1:10:28:52:05:06:09:6d:29:a6:97:ce:0a:09:
         35:d1:8a:91:07:85:d9:22:4c:31:51:86:99:d4:a9:04:4b:cc:
         e6:9b:24:de:1b:c0:cf:50:81:2a:c6:ab:86:e1:3c:71:88:ee:
         6c:45:ee:e5:dc:09:ad:a8:39:12:b0:f9:1a:aa:04:bf:2b:85:
         ee:8f:16:fa:48:93:24:4d:95:6a:3e:56:a6:15:0e:3d:ab:e7:
         a7:15:6a:38:9f:6b:c6:e0:33:4f:ce:cc:59:ad:84:79:86:d4:
         e6:bd:a6:d3:4b:9b:64:7c:44:1d:cd:2f:72:4a:96:f5:29:e7:
         d7:ab:13:66:74:10:17:d5:08:51:51:6e:b6:d4:84:60:1d:d3:
         61:55:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:14 2024 by rpki-client on console-fra.rpki-client.org