Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File:                     F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier:          c72iusTFlHCe8Ph/ZpSpxT54zHsUpGZMzbLCVzQH65w=
Subject key identifier:   0F:58:67:9E:17:0F:81:CD:0D:2A:01:BC:06:F7:9F:88:A7:4C:E4:E1
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer:       /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial:       019406EB039B2082FE8A8F44AF2EFDFD9A92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number:          0143
Signing time:             Fri 27 Dec 2024 07:00:52 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:52 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:52 +0000
Files and hashes:         1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: Gc52COzeOYaHseDNweGLT+Xp7rhNFObJNGELvbTMJes=)
                          2: f4O-GTlZC3WAmbYNbM3NjxebP_M.roa (hash: z+xkO59m7bbT0ktsgoOGZhstR7KpE9bKWBBRzUxz2Kk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:eb:03:9b:20:82:fe:8a:8f:44:af:2e:fd:fd:9a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
        Validity
            Not Before: Dec 27 07:00:52 2024 GMT
            Not After : Dec 28 07:00:52 2024 GMT
        Subject: CN=0f58679e170f81cd0d2a01bc06f79f88a74ce4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:b9:cc:19:0e:d8:af:09:f1:66:f0:5c:63:
                    54:68:99:3c:ce:41:e1:fc:e7:c7:8e:db:38:da:95:
                    d9:a9:53:89:e6:b5:e7:23:58:f9:06:ca:e1:0a:e8:
                    84:6e:bf:82:8d:79:fa:72:e7:2c:d8:9e:e6:ec:11:
                    44:85:38:c3:d3:22:40:0f:13:e1:2e:cd:56:ed:02:
                    b4:3f:4a:d5:cb:c1:39:65:a1:07:05:45:4b:98:9e:
                    d6:96:10:f8:d9:9d:11:7b:5b:92:e2:41:6e:f7:b9:
                    91:61:da:85:59:6a:b5:78:98:25:d2:fb:58:b6:41:
                    bc:a1:4c:42:ef:95:c8:0d:44:d9:25:59:b7:31:ed:
                    aa:73:fc:c4:41:25:ff:2a:7f:b6:79:e4:b4:3c:48:
                    df:ab:31:33:cb:f3:37:1a:7a:e0:06:f8:11:f7:2a:
                    f2:ab:d7:66:b0:3c:f4:0c:d0:fe:e2:73:14:b6:91:
                    37:f4:0e:0f:0a:4d:7f:06:bd:ad:9f:c4:43:a7:49:
                    50:ec:30:8d:aa:2c:ec:bf:37:7d:2f:a1:5b:48:78:
                    d7:b1:37:d7:a8:bb:4d:78:32:1e:3e:5f:4f:47:d4:
                    51:ee:80:9e:73:f9:64:b2:3d:13:1f:d7:18:b5:ed:
                    19:0c:f4:78:36:23:d9:60:ef:95:3c:70:8d:0a:fc:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:67:9E:17:0F:81:CD:0D:2A:01:BC:06:F7:9F:88:A7:4C:E4:E1
            X509v3 Authority Key Identifier:
                keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:80:ba:aa:0c:4a:b1:3a:4c:29:61:4b:6e:93:1e:b7:e4:38:
         c7:fa:67:50:45:36:70:ae:42:4c:63:5d:26:f0:bf:5e:71:c4:
         58:27:10:75:12:a6:53:ad:eb:bd:d1:ef:d8:ab:67:62:1c:30:
         a0:0a:c0:9c:3a:ce:c3:f2:44:a9:79:a1:36:66:ee:d9:5c:d7:
         ae:8a:cf:6e:85:db:b9:5b:f5:d3:b6:2c:01:55:04:da:fc:38:
         8b:6d:62:40:3e:aa:08:48:61:51:6b:bd:23:6c:07:ef:a4:c9:
         4a:f8:59:b4:05:61:82:a6:67:31:3a:9c:74:f2:64:d1:a6:e0:
         54:87:60:88:3e:81:f4:5c:77:08:39:74:b0:84:5d:2f:13:44:
         2f:7a:c0:7e:89:50:26:0b:bc:cc:df:0c:95:2f:57:3c:1c:ce:
         bc:06:c4:14:a6:b4:60:14:69:ad:87:94:a6:79:79:f6:57:29:
         48:d8:97:01:13:76:2f:f3:ba:07:94:88:9d:11:13:18:a4:f3:
         30:6b:7f:62:42:b5:e1:63:3e:ef:d1:1e:a4:4c:05:a8:2d:14:
         a3:bd:f0:c1:6e:8e:61:21:b4:ef:c0:b0:1f:b6:ff:5b:75:75:
         ff:d8:06:09:2a:5d:ce:0a:be:94:ec:38:58:7f:85:8e:ab:f9:
         37:b2:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:06:35 2024 by rpki-client on console-fra.rpki-client.org