Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.mft
File:                     fMyVyVJVGw-QVMdPfBOQQ70_YhE.mft (raw, json)
Hash identifier:          t7ZtxQ3ylBO7Ex//IAnFjs0IDtBZyvGtFEi/1C7aWdg=
Subject key identifier:   56:F0:B1:49:34:AD:B8:FF:75:B1:0F:2E:83:05:5B:D0:57:B2:C7:DD
Authority key identifier: 7C:CC:95:C9:52:55:1B:0F:90:54:C7:4F:7C:13:90:43:BD:3F:62:11
Certificate issuer:       /CN=7ccc95c952551b0f9054c74f7c139043bd3f6211
Certificate serial:       019356BFB1711FCFD427667EB3E69021E18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.mft
Manifest number:          12F4
Signing time:             Sat 23 Nov 2024 02:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:23 +0000
Files and hashes:         1: H3GdPw9H1iG0nuUe6LLj0_39XSE.roa (hash: jGB+5hR97aUgIyxCBSUq60BZDzv4fBmwLux/6RF2ONM=)
                          2: fMyVyVJVGw-QVMdPfBOQQ70_YhE.crl (hash: j0I/R8wE8wqDZuLEf2zXdpJpuOqtFnHy02JNlkCasgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:b1:71:1f:cf:d4:27:66:7e:b3:e6:90:21:e1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccc95c952551b0f9054c74f7c139043bd3f6211
        Validity
            Not Before: Nov 23 02:00:23 2024 GMT
            Not After : Nov 24 02:00:23 2024 GMT
        Subject: CN=56f0b14934adb8ff75b10f2e83055bd057b2c7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:65:e6:99:b4:49:1d:66:8d:bf:33:bd:80:
                    c3:ca:fd:cb:cf:12:b0:fc:4a:8e:2e:2f:84:4b:07:
                    cf:d5:f0:cb:ba:6a:b4:31:78:f3:ad:6e:15:64:1a:
                    a4:17:46:f4:27:f6:3c:38:61:f6:24:d3:07:99:45:
                    e9:ec:ca:63:07:97:01:82:67:1f:ed:cc:19:56:5d:
                    d6:ac:ea:81:d3:d3:86:8a:05:be:ad:6d:58:90:ae:
                    18:01:46:2b:d2:e4:82:a1:1e:65:15:a6:e1:72:5d:
                    15:ad:88:93:15:56:ff:d1:3f:c3:44:da:c6:75:5e:
                    fa:c7:71:6a:ed:3f:4a:58:d5:0b:d8:21:c4:80:e9:
                    fd:35:56:8a:ed:76:e5:c5:6c:48:a5:98:d0:0d:e1:
                    29:7a:84:3c:68:84:c4:64:71:fb:01:78:10:7d:fa:
                    4e:e6:0f:27:31:b3:f6:7c:50:32:9c:16:9f:d0:04:
                    ce:24:40:dd:2a:84:c0:c4:7b:84:c4:c0:6d:45:41:
                    69:f2:37:7b:56:39:57:2c:8a:8a:9e:26:cd:3d:de:
                    12:1c:e4:88:97:cf:89:47:27:24:f8:5d:2a:1f:1d:
                    03:11:a6:47:81:40:1f:6d:9e:03:d7:7f:91:93:2a:
                    66:5d:e8:6a:ba:de:4b:fd:f6:b0:10:a1:65:af:e1:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:B1:49:34:AD:B8:FF:75:B1:0F:2E:83:05:5B:D0:57:B2:C7:DD
            X509v3 Authority Key Identifier:
                keyid:7C:CC:95:C9:52:55:1B:0F:90:54:C7:4F:7C:13:90:43:BD:3F:62:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMyVyVJVGw-QVMdPfBOQQ70_YhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8fe938-97e7-4bf1-9b1d-92fcdcfc0e08/1/fMyVyVJVGw-QVMdPfBOQQ70_YhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:97:26:e2:28:5b:f9:56:72:5c:e6:0e:6c:2a:d0:2c:aa:9f:
         a0:b0:0c:09:91:7e:af:c5:bd:33:6d:6c:bf:af:33:8e:72:cc:
         40:a7:92:c8:d7:f0:58:eb:8e:75:e1:14:c6:b4:fd:e2:bc:66:
         62:f5:17:f3:15:f7:69:bd:97:ab:a2:39:79:6f:29:93:16:38:
         13:4d:fb:6e:24:09:93:a8:d2:71:a7:48:5f:93:ad:48:c5:4b:
         f5:d5:2a:d2:46:de:87:1a:23:ff:79:40:90:36:8c:5d:a2:54:
         e3:d7:36:6a:50:ad:c8:40:cf:8c:1d:39:23:1e:57:e8:56:2f:
         4c:84:47:d4:31:8c:01:a9:85:72:71:af:42:74:80:90:f8:f1:
         04:ef:4a:28:27:2c:96:98:93:ec:da:72:df:98:b9:48:fe:00:
         b7:ff:89:73:de:a9:cd:62:eb:7a:a0:15:fb:09:f7:3e:59:e1:
         72:61:2b:c2:e9:94:7b:35:1c:08:ef:fd:5d:63:9d:d5:15:f7:
         3f:d9:06:19:2f:37:1a:4d:a0:ad:80:a0:f5:41:e6:4e:72:89:
         94:5c:52:0e:37:c3:22:6f:d8:37:a4:32:05:a6:8b:c3:52:96:
         aa:f4:aa:02:80:f5:53:ba:44:89:39:09:18:36:df:79:1a:d1:
         70:20:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:34 2024 by rpki-client on console-fra.rpki-client.org