Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
File:                     Zp7b-uhlCtvWryB7bqIlZUObSZw.mft (raw, json)
Hash identifier:          snMMeqLnredozwhFx9UraJRcnX8xuz5HX2k1/SH8jjQ=
Subject key identifier:   1A:A2:6B:E5:FC:0D:25:53:72:65:A8:7F:9D:8C:36:3A:E9:A5:1A:09
Authority key identifier: 66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
Certificate issuer:       /CN=669edbfae8650adbd6af207b6ea22565439b499c
Certificate serial:       019331D8BD214A90651330A2D0E9D7326B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
Manifest number:          06A2
Signing time:             Fri 15 Nov 2024 22:01:47 +0000
Manifest this update:     Fri 15 Nov 2024 22:01:47 +0000
Manifest next update:     Sat 16 Nov 2024 22:01:47 +0000
Files and hashes:         1: Zp7b-uhlCtvWryB7bqIlZUObSZw.crl (hash: HMhwfVLTvaRBiXVls3VZ0yPeNbow/NPE5k/hFWYZ1ZE=)
                          2: uDfZW8SWL9xGAZgXpCh1WlUeMvc.roa (hash: 1V+biRiPqcEENrS2rQH7c1WqlPZmELiNQsVNj+C5dbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:31:d8:bd:21:4a:90:65:13:30:a2:d0:e9:d7:32:6b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669edbfae8650adbd6af207b6ea22565439b499c
        Validity
            Not Before: Nov 15 22:01:47 2024 GMT
            Not After : Nov 16 22:01:47 2024 GMT
        Subject: CN=1aa26be5fc0d25537265a87f9d8c363ae9a51a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:79:4d:1b:83:18:31:fb:f9:e0:49:70:d8:
                    04:39:4c:71:d4:46:7c:f9:c1:40:20:28:05:58:c8:
                    75:24:6e:d8:ed:bd:ce:73:7a:eb:c7:81:09:04:8b:
                    79:91:34:ed:74:09:79:1c:28:ad:42:63:ed:98:22:
                    fe:83:e9:d3:45:c5:4b:52:e1:15:88:3d:06:53:e6:
                    35:92:fe:40:aa:6f:e1:ce:d3:c7:a5:f1:35:31:85:
                    f2:22:1f:04:eb:be:93:f6:0a:9e:c7:b8:87:03:08:
                    d3:c2:b7:b6:fe:20:08:ca:d3:14:6a:68:91:b7:9e:
                    c0:66:49:ff:a5:c6:c5:35:0b:0f:57:cb:27:0c:78:
                    d9:f6:cc:f6:32:af:4c:a2:f7:b8:60:1c:27:63:aa:
                    5b:f0:3e:a4:a8:96:22:81:69:51:4b:d8:b9:ce:a4:
                    65:7f:91:0f:3b:5c:45:e0:ef:1f:1f:6f:8a:f8:e7:
                    59:2e:67:99:31:dc:62:62:53:1c:4f:9f:da:d1:29:
                    7f:5b:e2:10:16:d3:86:f4:56:ee:3f:8c:3b:cc:1c:
                    55:6d:6b:e2:0c:21:b9:3b:8a:dc:6d:df:65:7b:b1:
                    5f:e2:ff:9b:cd:a4:58:b7:18:ae:c9:25:85:f3:5e:
                    de:cb:66:a9:3b:c7:51:52:3d:32:34:ee:48:84:53:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A2:6B:E5:FC:0D:25:53:72:65:A8:7F:9D:8C:36:3A:E9:A5:1A:09
            X509v3 Authority Key Identifier:
                keyid:66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:b3:9a:17:a1:cd:b9:fb:73:19:6b:33:c0:e7:69:ab:f3:
         df:67:2d:b0:01:a6:68:c4:19:cf:54:c3:7a:5c:01:06:eb:d5:
         45:79:81:8a:67:50:58:ec:dc:22:d6:e4:74:ad:50:6d:d1:57:
         06:03:95:e2:03:55:c8:a7:a7:3c:00:e7:ad:32:82:50:70:69:
         ab:ac:e0:8c:0d:7d:2d:04:d7:a5:7b:16:d2:94:ac:bc:a0:a3:
         1c:09:95:2a:a6:38:dd:3a:85:8b:4b:5a:83:bc:00:43:20:84:
         a9:57:4b:bd:cb:ba:67:6c:ad:23:99:99:e8:6f:b5:3e:00:42:
         4b:ad:f7:21:12:3e:4a:77:c4:78:82:9e:35:ec:e4:b9:74:2d:
         f9:6b:1b:c7:13:fe:3d:b0:30:97:31:32:67:c4:40:0d:70:c4:
         21:b3:ce:eb:49:8e:46:b7:5b:7a:95:bc:24:00:e4:89:b8:8f:
         c5:c3:5e:6e:81:0d:f1:64:fd:f5:33:42:7c:45:62:32:c9:9d:
         50:00:43:2a:2c:6d:67:ab:3e:4c:76:64:5b:21:50:89:d1:dc:
         16:da:dc:a1:2f:ec:1e:28:6f:7e:6c:20:98:52:ab:49:e6:57:
         44:57:5a:92:bc:ea:af:75:d5:0c:80:69:db:73:76:b1:58:da:
         4d:b9:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:38:03 2024 by rpki-client on console-ams.rpki-client.org