Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File:                     _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier:          qxec6X0OuQ5dC/4Ya3bGv4nj530McckGtL98YWHwdlo=
Subject key identifier:   4A:91:1B:75:21:CA:93:A6:3D:1D:58:B2:21:0F:62:A9:7D:42:74:33
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer:       /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial:       01935952F2C084A89470F2E6068FA10BBE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 14:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:28 +0000
Files and hashes:         1: _FkSPI9ISquGf4jrRkv7G6YL_BA.roa (hash: 1PfdFpSNQbSwyWp7qBRjGF+qqSiJVZqb4SpHgWtneRU=)
                          2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: QXF049bSSpPRjtTwngh7Fw9MxbdlZ4ho3OJKZr+yT8M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:f2:c0:84:a8:94:70:f2:e6:06:8f:a1:0b:be:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccca62cbe743328555483a857e521863f953b41
        Validity
            Not Before: Nov 23 14:00:28 2024 GMT
            Not After : Nov 24 14:00:28 2024 GMT
        Subject: CN=4a911b7521ca93a63d1d58b2210f62a97d427433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:c7:c5:83:3f:3f:94:1b:3c:9e:5d:a9:4c:
                    52:57:5d:44:0f:7f:2a:45:46:c0:5b:0b:42:fc:8e:
                    e0:bb:6d:e7:66:73:55:eb:7d:ea:0e:e2:56:61:9e:
                    94:0d:b7:c3:fc:81:79:56:e7:2c:3a:ef:b2:60:00:
                    0a:38:db:97:67:d5:3b:48:97:b5:e8:36:63:95:b6:
                    ae:0e:f0:c0:d0:54:9c:d2:a8:90:2b:c1:1d:c8:c1:
                    c9:26:fb:68:8f:d6:7d:e4:80:c5:a9:7f:9e:f7:37:
                    f0:0c:32:49:81:7e:7f:7d:53:ba:5f:db:e7:88:42:
                    3e:97:b9:6b:48:4c:a1:6d:b4:1f:af:3c:6c:48:bb:
                    26:f4:04:ff:4f:b5:ad:23:56:bc:10:20:8d:16:57:
                    5f:c2:be:7c:6c:19:45:3b:fd:a1:8c:79:a1:ab:37:
                    c7:33:0d:bf:a8:24:8c:58:4a:3a:7f:2f:01:6c:d6:
                    84:14:e9:95:bc:13:19:e4:81:b0:ac:6d:10:cf:b6:
                    54:e3:de:74:53:cf:9c:c9:62:50:0c:d5:27:b1:1e:
                    58:2f:61:d5:e9:7e:6e:d9:f5:99:40:2d:93:d5:89:
                    c3:d7:e9:f9:04:89:15:6c:82:70:4a:70:2f:f4:a5:
                    ff:81:15:72:d7:9b:73:35:c4:79:08:ac:af:e2:56:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:91:1B:75:21:CA:93:A6:3D:1D:58:B2:21:0F:62:A9:7D:42:74:33
            X509v3 Authority Key Identifier:
                keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:81:66:42:e2:10:b1:71:c6:3b:f9:b2:5e:a8:2f:67:47:8e:
         7b:5c:58:d4:00:6b:8b:f1:6c:df:85:45:4d:c6:e5:92:c3:e8:
         f0:34:74:34:f4:ca:20:71:89:f5:01:cf:8d:08:88:c6:51:80:
         a2:5d:46:73:af:4a:53:95:a7:ea:ef:11:63:ca:c3:2a:f5:62:
         44:83:fd:84:5f:eb:ef:e6:4c:c9:97:b8:db:e5:52:25:31:4f:
         c5:f9:f3:41:ed:c6:14:dd:11:91:67:c2:f9:aa:e7:4a:db:89:
         bd:c6:62:68:ea:5b:f7:a1:10:34:1b:de:c0:0d:4e:99:49:95:
         ed:18:59:fa:23:5e:a4:51:95:37:70:3e:d8:c7:58:e4:50:65:
         a6:df:77:84:3d:e9:ea:16:4e:34:5e:5c:45:18:30:ff:14:0f:
         e6:d4:c0:43:b8:7a:45:09:d4:e0:3f:86:50:97:14:10:9d:89:
         6e:95:c3:1b:bf:b3:26:88:4f:22:78:07:d4:aa:78:f0:9c:27:
         ce:73:c2:a2:b7:a6:bb:aa:a9:75:6c:ee:6c:a8:16:06:a5:1f:
         9b:13:07:4c:7e:27:6b:7b:23:58:64:7d:69:c6:7a:fb:13:4b:
         7e:01:05:b3:93:c0:17:ea:5a:8c:f9:5f:5e:f8:bb:19:f8:a4:
         1d:cc:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:19:26 2024 by rpki-client on console-fra.rpki-client.org