Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File:                     6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier:          aiPhdI1RFxvJOEcVdeVidWCFxWdWGoavhm5AAUBjqFk=
Subject key identifier:   D1:D3:21:8F:4D:DD:DA:53:A4:FE:7C:1C:47:E3:56:D3:FB:2B:7D:02
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer:       /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial:       019356894423AC1AC01B5133B355AFB09405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 01:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:56 +0000
Files and hashes:         1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: GFZgtvxwUJXYPZ28mh5YSHWhvoaYwThxTHXt79k3VY4=)
                          2: bSRQ2xuL_gzs_t9DJKDSjWerK9M.roa (hash: E7LltKVbItSfpmIiDwQ923PieJGLKHbDBHaO0N5K89w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:44:23:ac:1a:c0:1b:51:33:b3:55:af:b0:94:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
        Validity
            Not Before: Nov 23 01:00:56 2024 GMT
            Not After : Nov 24 01:00:56 2024 GMT
        Subject: CN=d1d3218f4dddda53a4fe7c1c47e356d3fb2b7d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:49:95:9b:a8:66:91:5d:4d:a2:04:65:8a:
                    51:94:49:ef:52:eb:8f:39:9f:4c:4f:62:b2:2b:35:
                    0a:3b:b5:66:f6:88:83:9b:7d:f0:46:86:c2:94:0d:
                    70:96:ad:cd:d9:aa:38:fc:01:0f:2d:ea:1b:ed:04:
                    26:43:35:a6:7b:bd:2b:ad:0a:7b:47:81:06:6c:e9:
                    1d:67:ff:db:40:7e:4b:9a:cb:7e:39:29:55:2d:e0:
                    0f:91:74:42:07:34:41:ba:b7:e7:0a:a4:e5:e7:8b:
                    d5:1a:bd:c8:26:11:02:0f:be:65:9c:b5:59:ce:a9:
                    98:ce:bb:d3:d9:fb:17:ab:51:56:a8:7a:d6:70:01:
                    3d:8f:10:37:c1:b0:00:d3:c5:4c:69:5b:85:87:69:
                    7d:ae:a5:16:9f:76:e7:b9:41:09:af:cf:1b:34:59:
                    2c:f3:b4:53:bc:43:ce:7b:05:e4:bd:c2:cc:4e:5e:
                    38:0d:80:65:e8:96:65:a1:0f:17:c2:b4:32:b3:b6:
                    f8:19:7a:91:ab:60:90:d1:8a:2a:4a:c8:a6:3b:c3:
                    b4:aa:3c:55:11:23:23:31:4e:25:bf:10:30:2a:35:
                    f7:75:5b:ad:18:fd:90:3b:55:45:ff:33:95:61:90:
                    f9:8f:d6:3b:bc:9b:a2:6b:75:30:7c:cb:3c:ac:ac:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D3:21:8F:4D:DD:DA:53:A4:FE:7C:1C:47:E3:56:D3:FB:2B:7D:02
            X509v3 Authority Key Identifier:
                keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:2f:fc:88:7b:68:08:73:f3:44:6f:dd:59:96:66:06:63:
         32:ea:aa:1b:38:27:fa:2c:26:c4:1d:74:bf:7b:d5:cb:5f:8c:
         52:a7:69:ad:46:71:2a:bf:80:b3:72:33:a7:8f:c4:9b:57:51:
         f0:39:6b:98:3a:90:c7:c7:d2:6a:8b:89:bb:ad:49:6e:f7:b3:
         5e:04:18:ab:dc:9d:02:5c:39:39:f0:da:a6:0c:e6:33:8f:ee:
         69:83:75:5b:0f:ea:a0:67:38:d5:8a:f2:96:c7:cc:5f:e3:b1:
         66:da:7c:5b:d4:63:ac:31:04:a7:9e:a7:ec:08:22:d3:2d:5f:
         44:64:d0:5d:f7:bc:0b:25:cd:94:89:cc:d2:2b:de:1c:9e:37:
         e8:b0:0e:12:50:f2:79:33:a8:6d:54:00:05:16:d5:f2:90:1f:
         25:43:e0:8a:f6:57:01:84:67:52:7e:f1:f7:7b:c3:cb:c3:38:
         d1:02:8b:59:14:4b:b3:37:be:3b:52:45:49:d5:0a:c1:fa:e5:
         34:63:f8:3d:37:83:af:4b:6e:7e:d6:85:7c:f6:34:a9:bf:e1:
         9a:2a:2a:5a:ef:00:f2:0e:f0:6c:d1:e4:c9:ea:64:95:32:51:
         36:3b:23:20:c7:e2:d0:b0:2b:f4:5b:1a:43:fe:e5:ce:9b:52:
         df:70:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:50 2024 by rpki-client on console-fra.rpki-client.org