Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File:                     AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier:          V0b75dxslGVapMnT8U7QJ3ZEx9b2zX1wqRplrEy0N1w=
Subject key identifier:   C9:EA:02:9D:69:C4:C8:53:0D:B1:66:F1:6E:3C:B3:54:7F:CC:69:13
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer:       /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial:       0194060EED36957359338B6F2ED21F8A3B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number:          B1
Signing time:             Fri 27 Dec 2024 03:00:28 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:28 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:28 +0000
Files and hashes:         1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: bOgRWoJh/T61uiHfDl4FC4poXSFOUi2QILyV7joAivQ=)
                          2: ycxE79kaHLKmf4sw_GJEQD05C5M.roa (hash: 9DLAikha+FPzyhQm1kVdtnHUyUYkM4kI7+N7qBTeUFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:ed:36:95:73:59:33:8b:6f:2e:d2:1f:8a:3b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
        Validity
            Not Before: Dec 27 03:00:28 2024 GMT
            Not After : Dec 28 03:00:28 2024 GMT
        Subject: CN=c9ea029d69c4c8530db166f16e3cb3547fcc6913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:02:c3:6f:a9:1d:13:5d:a5:53:a1:b4:7b:
                    31:eb:a5:fa:b2:36:f0:e8:c3:73:30:27:fd:de:e7:
                    be:c8:d0:30:8f:87:77:dd:07:97:b9:c5:fd:7d:38:
                    38:7d:8a:4d:50:87:18:79:da:37:ad:2a:1f:8a:12:
                    b0:dd:ed:0f:c6:fe:fb:bf:19:6f:9a:2a:e7:71:5c:
                    21:72:3b:57:0b:b4:75:43:1d:41:b0:9f:96:73:b9:
                    06:4b:7c:21:bd:4e:55:9b:24:d7:19:23:b2:fb:16:
                    dd:4f:e1:7e:3a:e7:7a:c1:e1:24:80:ee:5f:8f:77:
                    1f:86:71:4f:d3:91:af:ac:c8:9b:00:87:c9:6a:50:
                    88:d7:78:83:4a:26:95:a9:6f:a5:d9:ff:dd:90:ae:
                    30:38:59:0c:ad:ca:0c:18:a1:e0:f1:bd:54:5f:0b:
                    97:a2:3f:62:6e:f9:21:01:6e:97:25:3f:60:f6:30:
                    0f:df:b7:10:85:5c:2a:2f:30:91:89:1d:5e:cd:06:
                    21:d4:ee:bb:3d:05:d4:be:c0:31:15:96:d4:35:50:
                    7c:63:35:11:1f:23:84:f4:8e:6d:5b:b8:27:98:97:
                    35:f3:76:52:c9:24:c7:14:fc:2e:f3:de:17:79:3e:
                    5a:73:18:01:35:30:b4:d2:43:ba:44:c2:88:20:ee:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:02:9D:69:C4:C8:53:0D:B1:66:F1:6E:3C:B3:54:7F:CC:69:13
            X509v3 Authority Key Identifier:
                keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c9:ca:9f:3e:9f:d8:bf:30:a3:37:81:c8:a2:d1:6e:a9:8b:
         b1:cf:8c:e0:60:fe:89:84:e8:7d:d4:45:35:47:e5:61:1c:8a:
         47:9c:40:ac:1e:22:75:59:64:9d:94:f1:cb:83:7c:26:24:9d:
         a0:a1:0c:43:9d:d5:7d:9a:f3:68:5b:5d:f9:7e:49:36:63:bc:
         88:55:43:df:83:2f:ea:a4:98:76:bb:d0:ef:d0:2e:06:ae:11:
         93:69:21:c5:f2:1d:5f:36:f4:c7:5b:c1:57:2f:48:66:00:b2:
         1a:86:cf:89:8a:b4:60:62:8e:ae:0e:91:c2:8e:3c:69:a6:e6:
         f9:61:39:1b:59:86:e3:06:24:0d:96:f1:2c:48:0d:ac:ac:6c:
         d7:b2:d8:4a:5a:18:3c:bd:cf:b8:c0:3d:bd:75:ff:a9:74:ee:
         1e:c7:9b:fe:33:65:07:23:fd:8a:c1:a3:04:e8:e7:81:50:38:
         0f:2b:e6:d6:61:a1:e7:f9:0a:c0:ab:f4:b2:4c:c1:38:28:fb:
         ef:e6:9c:cf:8c:c3:2d:8a:d7:f0:a8:84:e1:20:d0:24:f2:39:
         21:78:ad:09:56:c5:e8:da:d7:59:7b:cd:d6:73:61:c4:66:8e:
         9c:dd:0b:17:30:9d:42:df:d2:6b:c2:3a:bb:f7:c4:89:0e:78:
         0e:a8:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:15 2024 by rpki-client on console-fra.rpki-client.org