Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File:                     ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier:          9DivDfzjPB8DzrJbaetwBlUvjE8LK++eSccGadFEtyc=
Subject key identifier:   B2:82:4F:7F:03:3C:37:0B:50:EC:61:92:87:39:A2:1D:00:C5:CA:D9
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       019357D238355E6D418D3183A8C974B2307C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number:          0CDF
Signing time:             Sat 23 Nov 2024 07:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:14 +0000
Files and hashes:         1: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: 7YJ8X9hGW6+U7CVu3ak2NZChuwiLt6BxsSo7bZ3bIBE=)
                          2: qooFeYPW9NIpsBzDxpayc9VB83U.roa (hash: WG3L5FGGgqZiuy85O6Yu+7FL0841/FK5aJB3KolcH/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:38:35:5e:6d:41:8d:31:83:a8:c9:74:b2:30:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Nov 23 07:00:14 2024 GMT
            Not After : Nov 24 07:00:14 2024 GMT
        Subject: CN=b2824f7f033c370b50ec61928739a21d00c5cad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:16:25:e2:45:0a:6d:1b:14:4b:ea:42:70:53:
                    61:ab:39:49:14:f9:e5:a2:36:c0:17:3e:3a:e5:4c:
                    98:07:7d:56:85:dd:aa:68:cb:76:7f:9e:41:69:aa:
                    50:b8:c9:60:96:2e:b9:d1:77:09:b4:5a:08:f9:9f:
                    2f:e8:06:44:cd:54:76:0b:4c:f6:a0:96:6a:09:b4:
                    d0:34:f4:8f:ee:a3:05:f8:78:4e:12:5e:29:3b:4e:
                    28:4f:d5:c3:f3:59:a4:8f:f2:9d:75:ad:b7:a2:19:
                    d0:44:d3:b4:42:32:ab:19:c8:81:ad:12:e7:a0:bd:
                    9c:eb:4c:26:b4:ee:98:d6:9e:2a:f5:b2:1c:f6:73:
                    b5:af:ec:fd:50:6d:50:76:33:fb:92:10:ec:e1:b3:
                    cf:4a:28:54:e8:bd:d5:e9:cf:55:b8:24:b8:f0:0a:
                    24:67:8e:84:37:56:b1:3a:36:51:b9:c2:0d:6e:43:
                    ce:c7:17:27:e1:41:ef:30:56:aa:76:8c:92:be:eb:
                    0f:ae:30:19:c3:3e:24:f4:c9:41:15:34:33:ea:0c:
                    33:b5:41:60:df:2b:5e:3d:d0:ca:9a:da:74:cd:c4:
                    d8:99:c3:dc:07:31:8e:e3:1b:37:cc:de:c6:44:9b:
                    f4:ef:ec:70:3b:ea:59:ed:ab:a8:f7:05:0f:26:0d:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:4F:7F:03:3C:37:0B:50:EC:61:92:87:39:A2:1D:00:C5:CA:D9
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:d1:93:c7:03:20:20:11:1e:ac:09:e3:e9:08:f2:4d:ec:
         98:83:13:c7:c6:f4:e5:03:68:d9:76:49:fc:2c:70:55:1b:de:
         47:40:42:fe:d4:70:8f:e3:ed:4b:e1:62:51:97:5f:88:2a:4c:
         01:5b:ba:4c:25:b3:29:f2:7f:c3:b1:db:a1:7c:5e:7c:ae:43:
         e4:77:d4:a0:04:1a:a0:03:49:f9:70:5b:81:03:d1:18:c2:59:
         70:e9:bd:da:0d:fa:7c:40:07:c3:7f:f9:b6:85:e0:03:fb:41:
         ff:1c:a4:ac:71:77:36:ab:ca:04:70:9a:63:1f:d3:fa:9e:af:
         2d:3d:f1:35:7e:32:ee:7a:e1:8f:92:ff:c8:4f:95:fd:f6:ce:
         4d:90:f8:97:f4:d0:bf:82:3f:74:94:50:e9:7e:7f:35:95:db:
         a0:f9:ce:46:25:cb:a9:5d:fe:25:c0:07:81:01:c5:28:ec:27:
         7b:6c:e4:07:67:be:11:66:04:07:18:65:c3:39:45:14:43:31:
         00:36:cf:16:32:1a:59:1f:7b:ee:b3:8c:9c:5c:e9:ec:48:04:
         bd:cb:eb:43:7a:ca:14:d3:8e:0f:a8:0c:91:43:a7:f0:db:b1:
         c5:f7:ab:41:fa:ed:8a:f2:e6:4d:47:1e:67:cb:e0:12:34:f6:
         e7:85:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:25 2024 by rpki-client on console-fra.rpki-client.org