Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File:                     d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier:          iuF6WO/vwErTioqOCvwZD0HTkHtyHl1QICNgLKMb9Do=
Subject key identifier:   AD:8B:7F:C3:2D:2D:67:1C:8E:9D:E6:7A:5A:DE:52:B8:EE:E8:B1:75
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer:       /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial:       0193584049C942A5DA298916FC671E6E0602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number:          EA
Signing time:             Sat 23 Nov 2024 09:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:28 +0000
Files and hashes:         1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: ZUA8OCPzjo1b4ji9TVcvbtlQcuwda5fsP5/DGE/S9hM=)
                          2: eXJsvIMRzCBvweK-8EuNyX77t5Q.roa (hash: nOutuXW40VY0AmmJ0f/OAiD+Vy5peuxfOnhiSSTX27M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:49:c9:42:a5:da:29:89:16:fc:67:1e:6e:06:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
        Validity
            Not Before: Nov 23 09:00:28 2024 GMT
            Not After : Nov 24 09:00:28 2024 GMT
        Subject: CN=ad8b7fc32d2d671c8e9de67a5ade52b8eee8b175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:eb:c2:d6:39:96:44:82:f4:48:61:a0:6a:
                    94:9c:0b:01:c6:8d:6a:12:74:e3:3d:78:c2:6c:ef:
                    6d:bd:fe:c4:66:18:18:0d:5a:df:90:4c:9e:f8:dd:
                    a9:55:d6:1d:96:f9:be:f9:a9:c1:da:60:df:8e:05:
                    6e:3c:c0:80:72:87:76:b9:38:cb:7d:1f:4f:c7:1c:
                    89:78:8c:60:13:f7:5a:6f:1a:93:1f:0a:c9:c6:76:
                    d3:00:15:8d:9e:74:5b:e1:45:c2:8d:62:27:45:07:
                    7e:7a:12:6a:4f:c3:11:37:28:7a:dc:47:8c:01:1d:
                    a9:4f:52:d3:bc:4b:c5:81:d8:cc:8c:75:7a:3c:73:
                    b6:e9:60:9a:4a:5e:12:88:68:74:8f:5a:9a:40:a1:
                    ac:9a:0a:ba:17:c3:fd:ae:0e:19:db:de:2b:54:94:
                    f7:c0:80:c3:e0:4c:7a:51:fa:93:6d:a3:6b:67:db:
                    a5:14:da:0b:88:a8:f3:02:d7:cf:01:ad:e1:a6:f7:
                    d7:08:de:4c:f4:03:28:f7:58:62:e1:38:de:a3:85:
                    3b:97:2a:9b:0a:7a:d2:c2:16:7f:bc:80:64:fd:da:
                    f5:59:bc:ae:b9:23:2f:27:b0:40:32:7c:93:25:73:
                    24:e2:ea:d9:9e:17:fa:36:8f:89:35:37:3f:e7:8b:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8B:7F:C3:2D:2D:67:1C:8E:9D:E6:7A:5A:DE:52:B8:EE:E8:B1:75
            X509v3 Authority Key Identifier:
                keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1d:6e:50:5a:47:9a:3a:20:e6:b1:f5:28:88:e6:fb:f2:1e:
         a7:92:38:5a:da:90:bb:c0:7c:8f:43:58:d7:b4:f9:a5:39:cd:
         29:ae:ad:09:e6:b3:80:4e:fb:63:3c:ae:f5:56:28:bc:7e:32:
         f7:98:81:1e:b9:d6:44:11:ec:c6:1a:f8:bf:f5:dd:4f:a1:6d:
         84:55:b0:a9:59:20:64:76:90:58:3e:ac:62:b9:03:5e:9a:2f:
         be:4e:77:36:6b:b7:15:f3:7b:f0:53:96:12:6d:aa:b5:6c:0f:
         cc:fb:70:8f:82:3c:49:32:cb:88:0f:4a:15:a5:b9:6b:28:44:
         b8:ee:11:5f:d2:f3:69:19:74:7d:6c:a6:ac:81:ca:98:24:84:
         42:89:26:95:58:56:33:96:db:16:6c:27:11:56:2f:11:77:a7:
         8d:d4:47:01:a2:e1:e3:ab:2c:82:e2:52:17:48:96:a7:d3:40:
         47:7b:3c:bc:07:0c:c7:18:86:0a:21:6a:50:32:e8:3e:32:05:
         69:1e:43:04:52:33:98:0f:2f:bf:27:2f:93:cf:25:37:a8:af:
         f4:ac:34:dd:b7:38:b9:1b:c0:d3:56:71:3f:e9:35:c3:d8:d9:
         d7:a6:33:c0:0f:3f:33:7c:28:fb:33:60:cc:d2:04:bd:15:61:
         4a:3c:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:07 2024 by rpki-client on console-fra.rpki-client.org