Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File:                     4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier:          YcrueR6DJ/6iI8M7Grz3l2gySJ+4A3+Gq+pV2Icr6kY=
Subject key identifier:   59:58:49:F9:93:C5:F6:09:DF:2B:C5:3B:03:5F:0E:28:F8:9E:F7:BA
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer:       /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial:       019406B3B71852ADB232E8858495AA807B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 06:00:28 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:28 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:28 +0000
Files and hashes:         1: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: 9djBRUnGZpf3vVF64dC63MSaVq/v0UiBZ+w0qonSXAU=)
                          2: CBvPXd8nLoqyEbU7A9FiANC3U50.roa (hash: HpbvrgjDd2DlSkE1aifhPxK0Je9fTyvzFGYxz98z94k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:b7:18:52:ad:b2:32:e8:85:84:95:aa:80:7b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
        Validity
            Not Before: Dec 27 06:00:28 2024 GMT
            Not After : Dec 28 06:00:28 2024 GMT
        Subject: CN=595849f993c5f609df2bc53b035f0e28f89ef7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:b4:a9:8a:ef:02:e6:0d:8d:2d:42:64:f2:
                    0a:72:5a:7e:28:53:94:cf:6c:f0:70:dc:c3:3f:2e:
                    f4:47:c8:37:e6:41:d4:03:cb:37:6f:7f:f0:8a:b8:
                    c7:62:eb:08:76:4b:73:db:48:64:73:46:81:e5:68:
                    8b:21:92:4b:9a:56:05:c4:90:8c:09:4d:fd:4d:1b:
                    3a:0f:8a:9a:27:e5:b4:47:c3:58:2c:ae:4c:74:1a:
                    62:2f:de:4a:0c:a2:8f:1a:0b:49:3a:db:8c:29:11:
                    00:65:a2:a7:2e:81:94:1f:7e:38:dd:4f:f4:1a:84:
                    29:5c:b9:78:33:fb:d3:23:63:96:b8:b1:51:ad:91:
                    ac:ba:00:4d:3c:ef:ce:5d:46:51:69:d5:82:77:fd:
                    47:7e:2b:4a:5b:94:76:a2:9c:83:62:2f:81:4f:25:
                    0c:72:03:9d:33:43:d0:8e:f9:06:67:47:8e:59:df:
                    39:b8:a2:14:c5:f6:20:a5:2c:e5:4f:c5:9c:46:8c:
                    d9:c7:67:26:81:20:9c:85:88:41:7b:ba:d7:99:79:
                    d2:b0:14:46:6a:30:ba:b3:80:fc:3a:53:c8:6f:74:
                    89:2b:c0:2a:b7:36:a2:87:ec:26:79:f7:05:8b:a2:
                    dd:6a:07:8f:d7:c7:60:c4:23:db:77:9b:43:fb:f4:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:49:F9:93:C5:F6:09:DF:2B:C5:3B:03:5F:0E:28:F8:9E:F7:BA
            X509v3 Authority Key Identifier:
                keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:2e:54:d5:29:30:3f:6b:04:2e:92:6d:36:30:84:a2:58:
         ee:89:55:97:53:71:23:c6:4a:8c:ff:4e:cf:c3:27:07:ce:c9:
         f6:c0:0e:6f:d3:ab:84:b0:40:2d:84:d5:53:09:7a:bd:b9:0e:
         f3:3d:52:3f:87:b0:62:2d:c3:6c:49:8a:9b:1a:5a:6f:7a:6f:
         1f:f4:ea:3c:7b:22:01:92:5b:8f:c1:b8:65:ae:77:a0:23:95:
         f2:2e:b3:58:29:23:a8:2c:e8:ba:9a:c3:1a:04:e8:fd:94:74:
         62:e8:00:d9:63:60:ae:73:48:9e:13:b6:b4:eb:50:9e:5f:ee:
         c5:4b:7b:3c:4b:d0:e6:1c:06:27:6b:f7:08:70:41:de:28:7f:
         10:39:6f:90:46:7d:e2:56:0c:c5:25:9f:ee:23:be:52:7c:0a:
         66:59:89:36:5b:e9:a2:66:82:78:ed:5c:52:f4:f2:eb:5b:07:
         9a:28:e9:56:ef:76:67:e7:a2:1e:87:da:8e:58:76:4b:2b:62:
         ce:ae:6c:af:57:a3:a7:60:c5:29:af:a5:56:d1:27:b9:75:7f:
         d0:37:dc:75:12:0b:7d:0c:3c:13:54:9a:22:61:6c:6a:ee:70:
         b4:e9:6f:41:82:c3:8f:5e:0a:f3:f1:1e:e4:2c:49:bb:31:5d:
         98:86:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:57:50 2024 by rpki-client on console-fra.rpki-client.org