Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File:                     L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier:          J1V9dcXVXGM14bUg6+fJMnIXsdSY1QgFBcRu2lS2Ckc=
Subject key identifier:   E1:A7:76:49:4D:93:EE:19:FF:3F:BD:D2:B7:34:2C:74:BD:4A:5A:F3
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer:       /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial:       01936AB44008BF40395DC5D7CACCF46FA431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 23:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:17 +0000
Files and hashes:         1: BM2hlOjMOYuZQvlGCrZi24bmtLc.roa (hash: 6o52l/F5v1Rl8Hxn1VhTzLQ43klZsbSPORZsXhcpPtg=)
                          2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: uf7V2/lDp+8cZt/DxnLd8RRgsvUS9a2UFW1UTmuJft0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:40:08:bf:40:39:5d:c5:d7:ca:cc:f4:6f:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
        Validity
            Not Before: Nov 26 23:00:17 2024 GMT
            Not After : Nov 27 23:00:17 2024 GMT
        Subject: CN=e1a776494d93ee19ff3fbdd2b7342c74bd4a5af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:ae:89:01:9d:53:f3:83:05:38:c2:fd:76:
                    73:ce:63:09:e0:fa:82:f1:c2:8d:79:59:fb:0a:61:
                    8c:56:38:49:68:2b:64:25:93:92:16:a0:4d:4f:72:
                    65:a0:dd:7d:77:d6:39:63:6d:8c:ea:59:a0:d1:25:
                    ca:9e:e1:bd:69:35:e5:34:21:d9:50:bc:82:8e:d5:
                    4f:84:b3:b5:66:2a:f5:d1:38:0b:f6:cb:f3:91:02:
                    7b:93:14:19:b8:73:90:ab:28:ee:b9:a7:09:0d:05:
                    a0:c7:e5:7f:c8:eb:01:6b:d1:08:7b:f4:35:00:42:
                    a6:33:98:fa:d4:dc:c1:13:e2:b6:30:8d:66:39:da:
                    f9:d7:96:e0:ed:e9:59:da:3a:7f:29:c0:69:b0:e3:
                    c3:9d:c7:7c:13:03:c0:01:87:53:cb:24:b4:ed:24:
                    5e:6c:b1:6d:67:0b:08:bd:46:92:6a:52:1a:ea:8d:
                    18:66:37:33:4a:b0:31:f7:db:e8:33:04:81:c6:29:
                    6e:b3:95:56:4d:2a:e6:0a:45:87:9a:f4:aa:54:06:
                    a2:e8:30:77:04:47:b3:3c:aa:9c:2f:7d:43:d7:94:
                    ee:ab:a7:e4:6b:36:09:09:3d:b8:b1:74:66:1c:93:
                    55:9f:f9:68:73:ac:3a:67:af:cd:dc:6f:08:2b:fe:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:76:49:4D:93:EE:19:FF:3F:BD:D2:B7:34:2C:74:BD:4A:5A:F3
            X509v3 Authority Key Identifier:
                keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:a5:21:af:8c:55:ce:b5:20:13:19:2d:57:90:18:ae:7c:
         26:7d:77:5d:e0:7f:7d:a3:61:bb:d8:49:4d:7a:1b:12:37:41:
         5d:e4:d7:20:5e:eb:e5:94:4c:16:10:fd:ab:22:ab:49:61:fd:
         fb:56:84:d1:30:1c:45:03:98:e1:8a:3c:41:9b:0b:53:68:26:
         68:52:7c:ce:6f:70:d9:9d:a5:5c:ee:fc:14:c6:41:4f:14:e5:
         96:7a:ef:98:9b:e0:41:52:70:48:79:91:72:1a:59:7f:eb:78:
         c8:03:ca:54:79:70:f1:55:85:a6:d5:c3:47:db:d1:b8:b3:17:
         bc:3d:b0:f3:57:52:95:1f:73:ee:2f:96:4b:10:29:a2:fd:04:
         b2:aa:d6:1a:1f:7c:ee:10:a3:b0:89:12:41:b0:ca:d8:9b:49:
         e2:dd:60:fd:bd:c2:6d:59:7d:61:40:20:39:36:e4:e3:0e:10:
         b8:6e:3e:c7:09:99:bb:a9:bf:4f:8b:30:b3:9a:43:e2:6b:75:
         58:ca:77:91:f3:4a:7d:f7:ff:7c:40:c6:c3:80:29:38:4c:a4:
         3f:86:d2:3e:9f:4d:f4:d8:9e:9d:34:b0:28:36:e1:80:41:b0:
         cf:87:b3:a5:6a:1a:8d:13:4b:b1:87:51:9f:69:21:c8:01:40:
         ac:71:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:24:00 2024 by rpki-client on console-ams.rpki-client.org