Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File:                     9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier:          tQikMtjLO5P/76XOzMbUw2jPpnsDwxnvhvliZu2tjF4=
Subject key identifier:   75:FC:D3:2E:F7:E5:22:A6:80:A0:51:CA:8F:34:A4:9F:B4:2D:8F:AD
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer:       /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial:       0193549C1156413537BE087B806A3652026D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number:          083F
Signing time:             Fri 22 Nov 2024 16:02:14 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:14 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:14 +0000
Files and hashes:         1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: 9v1jq+oaDqzpkM/lIN49/4ktnodM3w3PLYoOjis0koo=)
                          2: LAFEC7e9pH2049HNL4TWiCEqKo0.roa (hash: h3j/XG1UP1167ELdB8uaEnwL1nmIeW4wkFNDUeMaMkE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:11:56:41:35:37:be:08:7b:80:6a:36:52:02:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
        Validity
            Not Before: Nov 22 16:02:14 2024 GMT
            Not After : Nov 23 16:02:14 2024 GMT
        Subject: CN=75fcd32ef7e522a680a051ca8f34a49fb42d8fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:6b:34:17:d7:2e:d7:8a:0d:3d:0a:0c:39:
                    97:94:1f:90:0f:ba:80:a7:3b:de:ee:9d:05:3c:0b:
                    81:fa:5c:0e:e7:b5:27:96:87:f0:16:dd:41:67:70:
                    80:6b:de:52:3e:be:28:cc:9a:e2:ec:40:82:0c:4e:
                    b7:4b:4e:1d:4b:75:14:1a:57:b6:f7:ad:83:e5:ce:
                    d8:2b:91:bc:c5:82:f2:4e:c6:60:df:14:1b:32:ed:
                    fb:ce:4d:b9:00:75:77:c8:3e:d2:6f:91:b9:5f:fb:
                    d9:be:67:78:b9:e2:03:a4:97:06:69:be:0b:03:6f:
                    83:46:9b:18:ca:0b:80:39:bc:46:b6:31:8e:8b:3e:
                    be:7a:02:63:a6:e2:6d:1d:9e:4b:63:8e:64:a7:2d:
                    06:22:0c:d2:17:30:31:9b:0a:85:5c:7f:7f:c0:f7:
                    13:d5:99:43:fc:04:42:e5:c3:b2:75:4f:6c:7e:5a:
                    1d:ff:9a:63:2b:cb:e3:30:4e:dc:02:48:49:d9:8d:
                    9e:46:ee:27:c9:3c:16:f4:4e:d6:b6:53:4c:0a:7f:
                    ab:ca:2a:61:0f:05:bc:03:a2:13:bd:9f:22:f3:6a:
                    16:ce:d2:fa:06:57:d4:40:8c:81:83:e2:29:e2:45:
                    a3:b8:6e:17:ca:07:4f:f0:69:4e:ae:3c:98:db:66:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:D3:2E:F7:E5:22:A6:80:A0:51:CA:8F:34:A4:9F:B4:2D:8F:AD
            X509v3 Authority Key Identifier:
                keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:cf:f2:e9:b2:c0:b3:4b:98:54:56:fc:1c:ad:c1:df:67:7d:
         aa:fd:b2:41:3f:2b:15:a5:02:bd:2b:93:3b:33:5e:00:f5:d0:
         26:98:fc:91:64:13:f8:09:05:db:6a:4a:58:27:71:dd:0f:be:
         a9:1f:3e:9f:11:3c:66:95:05:c2:21:fa:de:a4:65:00:fc:99:
         31:b8:33:dd:36:2c:fb:7b:a5:24:f3:0d:bb:4e:4b:24:c4:a5:
         99:4f:af:ad:d3:82:29:64:bf:9e:1c:90:c1:80:c3:d9:dd:77:
         22:31:21:84:c6:d9:18:57:fb:26:ce:76:71:31:37:7e:b6:fe:
         6e:a4:4f:a4:eb:65:49:6d:a4:87:a7:5f:a4:5d:a2:81:ab:b3:
         c8:49:3a:1a:68:40:55:08:40:0b:20:71:65:7c:1c:74:8a:c5:
         81:6f:ca:77:aa:6a:32:29:62:31:f3:dd:d1:78:79:c8:c1:1d:
         c5:a9:e8:fb:17:c4:08:b1:8a:33:4c:68:35:6d:0a:e2:12:2a:
         3b:3e:c1:71:50:54:2e:1b:7f:df:09:c4:0d:5a:6b:de:fb:d7:
         af:9d:86:ee:e5:43:11:97:28:ce:20:3f:a8:01:e0:02:1b:0a:
         28:e8:d9:c9:b7:2c:b0:ff:41:da:54:83:38:03:ea:53:49:c0:
         5e:9f:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:18 2024 by rpki-client on console-fra.rpki-client.org