Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File:                     vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier:          N+zvhqg9S+eaA5Of50ulDFoqbzniaV57rinLGAmHHa0=
Subject key identifier:   10:6B:06:71:BF:83:65:29:B5:62:8E:94:A8:85:99:A4:D1:49:41:F7
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer:       /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial:       019355767A4F71C3B8620CDF1E439280B590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number:          0506
Signing time:             Fri 22 Nov 2024 20:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:48 +0000
Files and hashes:         1: 48A5UTvM9kHjYizTlFJZbeO3T8U.roa (hash: mv+fuXM2We3m8H92I/SCvwrsUfVnIVQGWqEuExpW838=)
                          2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: Gh5xFgKBL35hgraU0LWnQbkiDJE7RyHDsXH9PvkSxjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:7a:4f:71:c3:b8:62:0c:df:1e:43:92:80:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
        Validity
            Not Before: Nov 22 20:00:48 2024 GMT
            Not After : Nov 23 20:00:48 2024 GMT
        Subject: CN=106b0671bf836529b5628e94a88599a4d14941f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:bd:bf:63:d2:ca:b9:32:0c:1c:08:7a:90:
                    49:b4:02:d4:ec:f0:50:fe:d2:8b:13:81:82:74:bd:
                    ec:f9:c6:c5:65:6b:cb:a3:84:cc:e6:6a:c2:36:ad:
                    38:ec:82:e0:4a:b5:58:0d:70:5a:8c:e8:a1:5d:a9:
                    67:33:3c:91:a4:96:0e:37:83:e6:8d:e6:a4:5c:68:
                    32:5c:40:a8:e0:90:fe:27:3d:58:d2:14:9b:e6:88:
                    84:bc:00:57:0e:a0:d8:97:29:af:9d:bb:74:43:f8:
                    fa:42:1f:2f:cf:82:25:1c:51:87:27:03:0e:20:f3:
                    cb:9b:75:d6:f9:99:40:1d:4a:56:dd:16:ef:80:98:
                    03:59:6b:67:14:32:4a:68:42:29:7c:95:58:97:50:
                    30:7b:66:10:6d:0f:a0:7d:1b:ee:6e:96:ba:5c:50:
                    23:1e:01:4a:fb:53:68:67:87:3a:28:5e:9e:36:98:
                    cb:37:e9:e5:9e:2c:1c:69:25:d1:b1:3a:26:3b:5c:
                    97:9b:6e:e7:37:d8:18:c7:0a:c8:17:00:b2:ef:fe:
                    63:33:66:6b:2f:89:55:91:ab:de:01:46:27:d0:24:
                    c6:db:c3:79:4b:77:a5:dc:9a:c5:cb:96:28:c1:6d:
                    39:a1:84:60:d5:e7:dd:27:21:7b:4f:6e:f9:27:aa:
                    92:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:06:71:BF:83:65:29:B5:62:8E:94:A8:85:99:A4:D1:49:41:F7
            X509v3 Authority Key Identifier:
                keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c9:88:16:36:0b:8d:d9:db:5c:86:80:5c:7f:57:9a:65:e1:
         4a:be:82:7d:6c:fd:2a:bf:8a:ca:01:2a:68:4c:58:99:01:43:
         1f:ad:9b:0e:6b:00:35:26:04:51:f8:ee:86:d3:ba:01:a6:b3:
         e8:02:f7:fd:f6:1e:5f:54:f6:7a:4e:18:7e:e8:8c:22:fb:5e:
         9c:e9:cb:b6:5b:aa:2b:a2:a4:ed:e7:ce:8c:ae:9c:68:61:4d:
         b5:e9:9c:e5:5b:54:58:1f:1d:67:09:c7:99:56:13:5b:55:46:
         6e:ff:f7:5d:c3:a5:46:75:7c:06:38:89:41:83:89:04:cc:1d:
         8d:ac:7b:a7:22:b6:a5:a8:6d:15:0c:10:77:7f:88:e6:d2:36:
         10:4c:06:33:88:f3:45:42:59:0d:1c:42:cd:ae:15:0d:36:58:
         40:26:9d:14:5c:ea:56:ed:c3:59:e1:93:5a:dc:e4:67:c8:e2:
         48:b8:18:d2:2f:ec:32:12:74:df:86:1d:c1:2a:85:8f:5c:9f:
         19:a2:81:0f:5e:ba:32:f2:d4:08:b9:55:10:ec:54:ee:68:ce:
         62:a6:10:42:17:2f:dc:91:21:4b:bc:35:48:09:d9:fe:55:ed:
         0e:66:74:79:ef:31:8d:0c:ea:fa:66:c4:88:f1:c0:a5:77:33:
         77:d0:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:20:06 2024 by rpki-client on console-ams.rpki-client.org