Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          5MjdKVX1qjiuySBRvG9VjB61qnj3mtKJrPBqYDHyzUw=
Subject key identifier:   6A:86:8D:FD:A2:59:ED:E6:C0:63:3C:CD:BC:C0:F6:01:BE:2E:C6:DC
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       01936AB4A6F69684E6CD74980BA8F868D92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 23:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:44 +0000
Files and hashes:         1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: Z+eF5skL0SoUGAAguG+3zqnKigN+yR0H9wfj3YwOOv0=)
                          2: KB-H6kNjn9ODBgLfDCq7p8C7u9w.roa (hash: fFKqfP7P9bDj4mcCmWSojqeMf9qhvDl5AGn/glMorOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:a6:f6:96:84:e6:cd:74:98:0b:a8:f8:68:d9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Nov 26 23:00:44 2024 GMT
            Not After : Nov 27 23:00:44 2024 GMT
        Subject: CN=6a868dfda259ede6c0633ccdbcc0f601be2ec6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:47:5b:81:6f:9e:e9:a6:03:64:c4:62:91:
                    ef:30:e9:45:69:ea:89:f6:78:98:13:60:99:6a:6e:
                    66:09:a7:f6:36:6b:1d:2a:99:ce:ba:6c:ac:9f:9a:
                    46:67:c1:72:d6:02:e7:a8:f9:aa:a7:3e:18:ee:74:
                    77:86:f3:a4:05:36:b6:76:e1:bb:d1:6d:e4:b0:c1:
                    ff:4e:9a:ea:59:37:65:6d:ad:b4:62:34:3f:b6:20:
                    6e:ef:32:ce:7f:20:04:2c:83:da:76:f1:20:21:e9:
                    1b:af:32:5b:3d:a7:5c:6f:c6:9c:17:44:60:fd:dd:
                    d7:5e:c6:98:f2:e7:30:ec:1b:e3:3c:ba:6c:5d:3e:
                    77:e2:2b:5d:9e:45:d1:76:17:d5:fe:ef:1a:1f:81:
                    27:3f:a2:00:3d:e0:9b:b1:cf:cd:d3:5f:39:1c:16:
                    87:e5:0c:43:25:8a:b9:aa:ab:08:f5:48:ac:ac:a2:
                    d8:08:dd:26:69:05:82:09:13:64:b5:30:e7:7f:f0:
                    54:ed:0e:5a:e4:3e:2a:cc:4f:39:7f:29:74:70:45:
                    98:76:a6:b8:cd:44:23:22:83:07:45:40:fb:88:71:
                    a9:6c:39:e4:2c:56:a8:78:47:ff:f5:66:f7:21:22:
                    f4:8c:7b:0c:a1:22:de:9e:cc:17:88:67:28:3f:1c:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:86:8D:FD:A2:59:ED:E6:C0:63:3C:CD:BC:C0:F6:01:BE:2E:C6:DC
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:92:c2:dc:91:3c:6e:8a:14:b9:ad:a5:58:71:7e:a4:f1:
         01:0d:56:4a:af:8a:97:24:46:7d:38:77:39:0e:c1:30:3a:e6:
         d1:1c:c0:ee:16:d3:a3:aa:45:8f:68:06:7f:4c:97:7c:8c:8d:
         2e:ae:cd:5d:18:d7:27:5b:95:c1:3e:28:e0:3f:70:1a:83:61:
         41:34:a7:dc:a3:5f:64:c2:68:c2:32:5c:d0:b1:bd:73:65:6f:
         5e:40:e9:d4:67:23:18:1f:c6:8e:85:64:34:c2:83:a1:21:e2:
         fd:f1:ed:0d:ea:8e:ee:dc:d1:72:47:99:e6:68:47:fa:0d:47:
         1b:af:fb:9d:b8:4a:15:06:a3:b1:92:66:5b:88:84:4b:2b:10:
         96:96:b7:35:46:32:1b:67:aa:03:de:b7:b0:8c:08:a6:d2:46:
         06:e7:c5:15:47:0f:79:8c:b0:d9:fa:1b:41:07:16:26:77:5b:
         0a:83:9a:7e:ab:1e:54:43:25:74:1c:c4:fe:bf:6a:26:70:3d:
         47:16:2f:4d:60:98:e4:fb:8b:33:13:b3:da:1c:d5:93:0d:d4:
         86:86:5e:e2:98:56:a5:6c:db:8f:f1:be:da:4c:d6:3f:90:2c:
         30:1c:22:fa:e3:63:f9:c1:d9:10:83:7a:e5:26:1a:ba:c9:42:
         c0:0e:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:22 2024 by rpki-client on console-fra.rpki-client.org