Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File:                     1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier:          73+ZWxhkWDD5+rmWJ07LU9o38uwMwNc+slFWD4Zp+uY=
Subject key identifier:   6B:85:EC:4F:E2:3E:63:F3:73:C5:19:76:5D:F1:FD:46:5C:DC:F9:E5
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer:       /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial:       01936067A860A071FF9A9A7A1D03D0E1B101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number:          CC
Signing time:             Sun 24 Nov 2024 23:00:26 +0000
Manifest this update:     Sun 24 Nov 2024 23:00:26 +0000
Manifest next update:     Mon 25 Nov 2024 23:00:26 +0000
Files and hashes:         1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: JCE90CedaJGIhJjByzPHHOVYUScBrnQUs6k1m1kPgo4=)
                          2: 8_sSHU-RubPLjwD_4JsVMp-yyWs.roa (hash: p+pSDUr3/+v/iKGB+1XD2RtrjH4/SU/KZMiyQh6gL+o=)
                          3: PNlPfRnBWhvw5B0PnPaVkbth6VU.roa (hash: +p2AiQR2ITKnah7oc/FGfndpiicS1VTyc074QK0SfTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:67:a8:60:a0:71:ff:9a:9a:7a:1d:03:d0:e1:b1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
        Validity
            Not Before: Nov 24 23:00:26 2024 GMT
            Not After : Nov 25 23:00:26 2024 GMT
        Subject: CN=6b85ec4fe23e63f373c519765df1fd465cdcf9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:77:9c:64:87:6b:56:39:8d:da:29:1d:53:
                    0b:80:9b:cf:97:da:6d:52:90:44:69:c4:2d:6c:80:
                    1a:7e:de:35:79:af:6d:12:7e:d8:52:be:19:79:25:
                    e9:5e:39:b6:18:28:1f:dd:62:5e:9b:c5:fa:ae:fb:
                    4a:58:fa:b6:b6:f5:49:37:9d:9a:04:11:99:c9:9f:
                    a8:a9:95:31:7a:6d:19:53:7f:7c:8a:90:83:32:77:
                    83:d4:04:0b:71:e7:23:2d:8d:83:53:eb:83:48:bf:
                    ac:04:29:a7:9a:86:bb:1a:ff:09:a0:83:b7:6a:9e:
                    32:2b:54:e9:48:b9:7e:46:24:98:eb:6f:f0:b3:bb:
                    15:a9:57:08:55:7e:a3:85:63:a1:7d:ac:33:c8:19:
                    e9:32:12:4a:a8:04:9e:8d:42:17:3a:2f:20:5e:b2:
                    78:25:2f:f3:f4:41:c4:34:89:fa:a9:c2:1f:fa:88:
                    0b:ff:6c:4a:71:3e:5c:ef:c4:31:2c:48:40:43:1d:
                    ee:ba:26:2a:9d:20:d1:73:25:f5:45:f2:10:4f:8e:
                    99:75:ed:d0:4d:10:42:86:fe:64:34:11:ba:45:eb:
                    05:81:94:20:bc:06:a7:4c:f3:6e:7c:8a:5d:94:68:
                    8d:ee:ae:70:07:23:ad:f2:94:0d:45:f9:ed:43:42:
                    eb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:EC:4F:E2:3E:63:F3:73:C5:19:76:5D:F1:FD:46:5C:DC:F9:E5
            X509v3 Authority Key Identifier:
                keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:89:fd:81:7a:03:e3:0e:85:86:71:1b:87:c5:f8:61:49:25:
         f7:a6:e9:21:33:ad:68:7f:9d:47:b0:8f:46:85:65:2d:e6:ee:
         c7:41:25:57:b0:37:b6:82:4c:0e:1f:61:f7:dc:67:4d:15:e2:
         6e:91:3d:ee:e4:80:9c:b8:cc:11:ee:36:f6:31:a2:e7:fe:6d:
         52:92:11:5c:c8:24:46:ef:e2:83:a1:4a:30:53:e0:9e:7a:71:
         4d:32:46:d3:ab:a3:28:e2:6c:c2:94:ac:45:37:53:3e:26:35:
         99:c5:56:2d:9d:b9:69:eb:f4:fa:93:63:cf:52:e9:6f:98:91:
         06:4c:1c:71:23:9f:a9:84:d1:4d:70:3f:9f:e3:06:7e:bf:a0:
         87:b9:7b:ba:9a:5c:22:f4:90:cc:95:16:75:de:fd:71:03:dc:
         6a:61:3f:34:70:e3:4b:55:ec:32:ba:5d:cc:68:82:50:b8:71:
         fe:1c:a9:42:0d:03:d0:ab:2b:df:52:09:c2:76:1a:30:49:a4:
         22:a1:51:ff:6c:7b:6e:dd:e8:e2:f6:06:cb:30:e3:3d:b0:a7:
         7e:15:6e:32:46:c4:84:a9:16:21:d5:1e:68:ef:e4:a7:41:6e:
         df:ab:05:e3:7a:ce:5b:a5:90:ba:b5:ac:de:29:c3:42:53:da:
         54:eb:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:32:11 2024 by rpki-client on console-ams.rpki-client.org