Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File:                     An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier:          nJkv6IrIlx7dEsqNp9CGl4ED/N8/goh44FRyYLEuIUU=
Subject key identifier:   39:AA:99:C0:76:10:59:A1:5E:FD:1A:75:D4:28:14:EE:DD:30:0F:34
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer:       /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial:       01936A7D729E0BB0A99E91CCEABAB60BE14B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number:          013C
Signing time:             Tue 26 Nov 2024 22:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:26 +0000
Files and hashes:         1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: GKR1iaJJC9bTh41dsWQiBmNL3sXTcQJ3zY9uBKXQJ6c=)
                          2: srhxg9ELohCK3Jk49Vic8vDJv0o.roa (hash: IIqyLrZLtm8L26Fgy0yKvM5Eh/ebP2fUZAQxk2lspzc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:72:9e:0b:b0:a9:9e:91:cc:ea:ba:b6:0b:e1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
        Validity
            Not Before: Nov 26 22:00:26 2024 GMT
            Not After : Nov 27 22:00:26 2024 GMT
        Subject: CN=39aa99c0761059a15efd1a75d42814eedd300f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:ec:fd:f3:06:8b:3e:e8:2f:b1:a2:74:e0:
                    70:5c:f9:82:b7:dd:59:af:82:36:fa:62:b0:5f:a7:
                    55:fd:46:79:f6:a1:a1:b0:23:7a:05:5f:e0:94:bf:
                    ab:1c:a4:af:d3:2d:dc:2c:06:0d:9f:95:23:db:90:
                    b1:6c:a7:d0:5e:ea:31:dd:d3:4a:a6:35:9c:7a:b1:
                    01:eb:43:2c:9e:df:e0:54:f1:86:98:93:20:bf:6b:
                    21:64:7f:a5:a0:19:8e:64:91:49:e6:ea:46:b7:36:
                    b1:e1:be:4f:d5:89:83:04:79:f3:8c:42:e7:ae:ef:
                    c0:24:b9:48:91:19:d6:6b:33:d6:50:5a:96:fd:eb:
                    52:d4:f6:92:af:9b:97:4c:b9:f7:57:25:e6:c3:02:
                    ac:31:d9:3a:93:1c:d6:10:c1:4e:3c:6c:9a:71:12:
                    a9:a0:fe:22:f3:6a:8b:c5:05:97:4e:d2:1b:4d:e0:
                    fb:78:cb:8b:c8:49:9d:5d:93:d5:9f:9f:32:b5:68:
                    08:e7:e8:7c:07:79:b1:be:71:cc:de:be:a2:6e:c0:
                    0a:a2:3c:89:53:ab:eb:f4:55:8a:a1:c4:ba:36:a5:
                    b3:5d:2a:67:50:f5:b8:be:b8:b2:0d:96:a2:ab:1b:
                    13:75:f2:2f:53:23:47:d0:14:d7:a3:5b:31:ec:df:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:99:C0:76:10:59:A1:5E:FD:1A:75:D4:28:14:EE:DD:30:0F:34
            X509v3 Authority Key Identifier:
                keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:c1:ff:13:5e:97:fb:c8:5a:58:68:90:aa:bf:71:55:d4:
         ce:eb:72:ba:77:37:f3:78:13:80:85:b4:d0:ed:b2:6e:69:9a:
         c3:66:bb:e1:fc:10:2f:95:08:e1:4f:de:30:9e:01:a9:0d:6e:
         f2:31:98:d6:42:7d:c3:ed:4c:66:a5:21:78:0b:39:0a:dc:c8:
         a4:c4:7b:1b:fd:fb:b6:ba:18:09:3f:58:12:84:a8:7b:c8:fc:
         c9:ff:76:2e:ea:4e:f7:4b:7f:09:74:14:57:7a:71:81:3e:70:
         9b:e1:87:22:7f:9e:44:53:0c:cf:5c:18:b4:c3:a6:e6:3d:60:
         1a:0d:bf:33:32:3b:8b:d4:ef:2a:c7:59:3d:79:12:36:7e:4c:
         67:9c:57:22:b0:90:75:72:84:2c:98:a8:07:98:c3:54:e1:b2:
         7a:b2:d1:5d:7a:49:3e:65:a4:41:25:31:4d:79:f1:9c:c5:3c:
         91:a7:b1:5e:94:fa:96:39:08:64:9d:69:d5:a7:d5:27:75:91:
         3d:3a:25:e4:c8:ad:ad:7b:18:de:2f:bf:30:8a:c0:58:fd:f6:
         7d:e5:ef:94:f1:85:dc:19:4a:22:fa:66:1f:58:67:c5:96:ef:
         e2:62:e4:f9:e0:1f:72:86:a4:60:73:09:50:32:87:a7:b0:ec:
         3f:39:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:14 2024 by rpki-client on console-fra.rpki-client.org