Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          BhDPhTPWQWgqMWMnJr9sXcVeke/guwWYf3TBEqmes6c=
Subject key identifier:   0C:56:2A:AD:AC:5C:97:01:00:99:75:C4:ED:20:A5:2D:B0:D3:FE:6A
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       019352AD89DC2DB0FD7F35533C91402568B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          11B7
Signing time:             Fri 22 Nov 2024 07:02:04 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:04 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:04 +0000
Files and hashes:         1: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: xnedKzbaKsmn0k0RWogKP7cE230f/NOlD01HU9/jAR0=)
                          2: Zol7mJzaqao5kdoBN78XY7mpZaY.roa (hash: leLar2UZYH7kjDgztQTDqDDdDoNObvxLJNtwMUVHM2Y=)
                          3: eTprPEpA4LOl_HnFAoGz9qI-OWs.roa (hash: rj4qDh0PsDQBwOKGDCi0+FtyCBh4Q9K2XL23OFRKfOo=)
                          4: pcg79x3xjTRecqQjm7Mv99kQi7U.roa (hash: 07vQbUGqtSnVaLVwcqb2j8hOwmTq4gMID1FBvloo4oM=)
                          5: rX80ALJDuF9HIDakUgKgTEqLjvw.roa (hash: W2kX/IENhWbo6XGpAutYPuW8Z7nxi5TjH6JYeU0jKjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:89:dc:2d:b0:fd:7f:35:53:3c:91:40:25:68:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Nov 22 07:02:04 2024 GMT
            Not After : Nov 23 07:02:04 2024 GMT
        Subject: CN=0c562aadac5c9701009975c4ed20a52db0d3fe6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:31:99:f2:fd:7a:b6:a3:5c:15:3a:c1:7d:
                    5e:4d:a7:15:fc:d2:bd:2f:92:81:d3:d8:0a:fa:4a:
                    d2:75:f9:0a:dc:71:50:12:f0:89:88:0c:b2:ab:99:
                    4f:cc:35:66:1a:3e:d4:35:b1:1a:12:25:d1:1f:5b:
                    a2:ba:21:2a:a4:b4:24:94:73:f9:57:3f:8a:78:43:
                    6f:c9:71:9c:fc:fa:fe:e4:7e:c1:04:5c:e0:3f:c0:
                    d6:49:ba:5a:57:f6:b9:e2:f4:7e:39:18:b6:62:31:
                    cf:b7:38:b7:3d:d3:6f:67:55:e8:97:ef:01:ca:26:
                    46:a6:a9:04:a9:3b:e5:b8:4e:d8:82:60:cd:21:3c:
                    fd:85:f0:72:85:25:d3:3b:ca:d4:cc:ad:10:aa:d5:
                    d5:f7:31:a1:23:82:dc:8a:e7:d6:bc:b7:8f:7c:43:
                    0a:f1:a8:83:b3:03:58:1a:8e:af:75:56:f6:48:d4:
                    40:6f:ef:d7:ba:84:04:2f:88:b1:dd:4c:c0:04:19:
                    4a:ba:0b:52:36:2e:d7:fc:a3:db:0f:99:9e:8e:fa:
                    f0:d6:4f:da:21:5c:28:e5:86:0a:3b:29:d5:25:77:
                    29:db:52:50:4e:d2:54:fd:16:c6:d1:be:ab:0a:e5:
                    ca:7a:59:85:c8:c8:1d:84:7c:69:81:3a:c7:6b:6b:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:56:2A:AD:AC:5C:97:01:00:99:75:C4:ED:20:A5:2D:B0:D3:FE:6A
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:48:14:72:e9:7c:b4:db:f3:85:a4:fb:e0:51:f5:d9:1c:bb:
         c7:e2:41:df:17:d0:68:74:47:0d:bb:1c:11:ae:95:b9:9e:75:
         9d:d1:f6:be:18:79:78:b4:84:de:36:ed:fb:ae:2f:47:7a:7c:
         3c:1a:86:6c:f6:08:be:7a:0c:b4:0f:da:c9:be:91:f8:b4:f4:
         f3:88:82:82:c1:70:23:19:cc:4b:36:c1:60:82:e9:c6:86:35:
         cd:02:93:99:fd:a3:de:e4:84:75:18:ab:8c:92:20:e4:ac:49:
         3f:69:4c:0b:29:5b:44:f8:55:b6:4c:03:6c:98:75:99:d9:57:
         05:cf:a9:73:5a:07:fd:b4:e3:00:21:60:7b:d8:0d:3c:83:9c:
         5a:c9:d9:02:37:b0:c4:77:1f:92:c9:57:f0:a7:68:15:01:bc:
         0e:43:23:d4:38:48:2e:d0:e9:75:ef:49:56:f3:a1:99:8e:35:
         20:92:ee:e4:3a:d2:33:cd:07:f5:74:55:6c:7f:8a:43:7e:09:
         a3:3d:33:f4:cd:fa:ad:c2:96:03:1a:c2:dc:60:74:b2:7e:31:
         a3:e9:ca:34:31:67:93:ea:21:0e:b4:34:1e:39:54:ac:2b:0f:
         30:79:db:af:46:c1:d9:92:5f:11:1f:60:98:b4:ea:cd:02:fc:
         ea:08:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:19:36 2024 by rpki-client on console-fra.rpki-client.org