Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File:                     q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier:          0+PR1ejb//hmTDMTgbCYZSfJl/5AmWRIS4o1OuLMms0=
Subject key identifier:   AF:52:52:92:76:9B:7C:B6:06:05:42:1D:67:99:15:E3:47:8B:AD:A6
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       01936B225E81A7FDD55DCDBE2471D969792A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number:          0251
Signing time:             Wed 27 Nov 2024 01:00:34 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:34 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:34 +0000
Files and hashes:         1: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: 21zEMYS9saGq48UmSteValMtcfHvjQ1iWnvVzRR1M3E=)
                          2: x-KkgP1Weyr_majUKVSIQM5tgfY.roa (hash: Og9tXQSZKBUlkOBEX4b0hnrGKdhKehxcNDaPrIq5KFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:5e:81:a7:fd:d5:5d:cd:be:24:71:d9:69:79:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Nov 27 01:00:34 2024 GMT
            Not After : Nov 28 01:00:34 2024 GMT
        Subject: CN=af525292769b7cb60605421d679915e3478bada6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:e2:19:dd:6a:53:73:1c:f9:78:93:f0:46:
                    24:ef:ed:20:19:50:59:c1:30:40:d7:06:90:dc:cb:
                    71:4c:9e:ef:4b:57:23:87:60:66:66:87:2a:0e:52:
                    df:c5:07:3f:7d:3f:c4:03:d7:00:11:63:89:e4:96:
                    5f:e8:77:60:8a:3b:07:0a:00:62:31:d4:09:85:4e:
                    31:65:b3:21:bc:dd:53:70:d7:a8:e1:53:a4:a5:8d:
                    16:c9:93:27:3a:06:d4:d4:9b:1a:26:6b:45:fc:42:
                    67:cd:4d:fe:9b:a1:32:e1:5e:32:ad:7e:5e:55:e5:
                    37:f1:4b:15:8e:5a:ea:52:0a:9e:b7:f4:b2:5a:c0:
                    46:21:53:c8:39:30:c1:37:6a:71:0d:2f:72:cd:34:
                    96:20:b0:15:b4:d8:f5:47:e5:83:fd:63:81:d8:23:
                    17:0d:13:95:8a:3c:e8:14:a2:9d:cf:a5:5c:56:a5:
                    13:53:06:6d:b7:4a:33:4b:cf:25:2a:3c:ac:3c:7d:
                    7c:f4:47:87:2b:5e:04:bd:25:6b:9d:40:c0:42:a6:
                    e0:c3:68:ee:37:54:21:b3:b8:ea:5e:68:5c:08:dd:
                    eb:f9:7a:05:5b:38:b1:bd:cd:4c:5e:90:2a:db:3e:
                    75:87:36:37:1d:8a:0d:ef:b7:ab:b3:4c:32:18:ed:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:52:52:92:76:9B:7C:B6:06:05:42:1D:67:99:15:E3:47:8B:AD:A6
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:66:00:f6:2f:dd:a0:14:43:c5:a1:6e:bd:bb:9d:fa:b7:a4:
         eb:b4:af:c1:92:db:fc:66:65:cb:04:6a:a5:61:4e:1a:2a:a1:
         d4:68:2b:e3:70:6e:b7:52:1d:f2:9f:c7:92:a9:c9:aa:0a:87:
         4a:46:f4:c3:77:a0:2a:78:b2:2c:e0:8d:c9:7d:a8:93:68:9f:
         00:24:fd:74:bf:b6:c0:1e:19:e7:fe:6c:f8:89:de:fb:32:31:
         81:89:41:4c:78:73:00:94:45:ed:43:68:00:9d:43:07:96:6b:
         4f:93:cd:f6:7e:37:a8:82:71:b9:18:ed:a9:30:de:5f:c2:09:
         30:69:01:02:a9:f0:72:90:0f:38:71:3d:0f:69:d0:c4:81:07:
         68:9a:ab:8e:85:93:d2:73:78:4e:93:68:b1:fb:dc:e2:a8:cf:
         84:71:2f:bc:3f:91:ef:55:b8:8a:70:09:ec:c5:2b:89:d5:7b:
         71:98:b3:c5:37:6c:c9:39:8d:ed:54:f3:47:5b:9e:b3:b3:15:
         46:65:76:e1:f8:d8:0b:72:af:99:7e:03:c7:4f:da:50:66:17:
         de:42:70:f6:4f:6c:2a:63:0c:e9:0f:7f:9a:eb:b5:35:6e:30:
         2d:38:a7:47:21:08:59:cb:ef:67:0a:54:c5:54:d4:e3:05:74:
         e5:66:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:51:47 2024 by rpki-client on console-fra.rpki-client.org