Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File:                     8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier:          J+MdOhjsh5gYvbSOIrOA1x/fiRHnO34Il8E+BBo/3lE=
Subject key identifier:   0F:0D:5C:C6:90:00:D5:0D:10:0B:84:0B:9A:52:3E:4B:7E:F2:B6:27
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer:       /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial:       019357D2A022E7D664FACC90125DCDA394AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 07:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:41 +0000
Files and hashes:         1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: 4iECx5VGqqTdiOgn8GCTuWiwe612XB0byENnqVm+4EQ=)
                          2: DUQSx04274WpRndnyarrff3nGEQ.roa (hash: 9s8U7DT0n9exf09vHF90VqhCURYAzKitXIwJmWcORM0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a0:22:e7:d6:64:fa:cc:90:12:5d:cd:a3:94:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
        Validity
            Not Before: Nov 23 07:00:41 2024 GMT
            Not After : Nov 24 07:00:41 2024 GMT
        Subject: CN=0f0d5cc69000d50d100b840b9a523e4b7ef2b627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f3:58:77:91:b1:d2:fd:4f:9b:28:bc:90:0f:
                    b1:ca:38:bf:c3:a6:be:a6:2d:10:93:60:a9:0c:57:
                    a5:42:c5:eb:60:96:86:4e:90:8f:fb:42:17:0d:9a:
                    fd:42:e1:73:a5:02:8e:ab:56:3c:e4:20:2c:c7:c4:
                    0e:f2:75:82:31:49:8f:66:13:72:67:da:b6:af:c7:
                    5d:94:5d:3b:de:6a:9a:2c:b0:2f:8b:33:df:d1:df:
                    0a:41:e5:5e:d5:fd:34:cd:a0:1d:f4:b5:14:21:1f:
                    bd:d5:0c:d9:65:88:27:0e:a3:f8:d5:5d:b4:e0:92:
                    9a:a8:5a:c5:66:4d:ca:29:cb:15:ca:0a:63:3f:06:
                    dd:c0:15:bd:43:b9:c3:fc:79:a9:f6:42:df:32:13:
                    1d:c9:d9:06:ae:86:15:2f:4c:f1:02:e8:86:71:d7:
                    85:bb:1c:eb:4b:da:56:83:45:ec:f5:bb:ea:f8:55:
                    5f:13:25:e6:1f:8b:0b:dc:dd:db:91:67:c8:e9:e4:
                    04:50:3b:1c:f9:77:ec:3a:ad:5e:40:55:f4:e7:54:
                    a3:ae:9f:a7:2b:cb:21:94:9c:2e:96:38:96:83:f0:
                    8f:e5:5e:66:e7:2b:c7:16:a4:71:a0:6e:ec:d4:59:
                    54:cb:2d:06:15:da:36:9b:3f:cb:50:a7:63:4f:08:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:5C:C6:90:00:D5:0D:10:0B:84:0B:9A:52:3E:4B:7E:F2:B6:27
            X509v3 Authority Key Identifier:
                keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:52:c2:51:fe:7e:50:8a:31:c0:e5:a4:fb:6e:b9:a1:1a:f4:
         1f:60:b7:c7:4a:aa:0b:f7:82:9f:68:c7:14:5a:d1:d6:06:b6:
         33:43:cb:d6:be:75:61:fb:9e:c7:06:9e:8b:ab:8a:8c:89:61:
         ea:f6:0d:50:c1:82:73:5c:01:8d:de:b3:f4:53:67:a9:d9:c1:
         b1:ca:0a:5c:b4:c5:59:ac:6a:72:b2:51:04:22:bf:af:51:32:
         0b:6c:a1:a4:69:30:86:c0:9c:9a:14:b4:15:41:6e:5d:d3:9e:
         42:6f:ca:38:04:aa:2a:1b:ed:5a:f1:60:44:21:00:2a:12:45:
         54:73:d8:cb:9e:86:6a:c6:24:9c:4b:51:20:66:40:8e:cf:6b:
         23:e7:74:76:eb:3e:85:99:fe:a7:bf:76:3a:3b:89:a5:5d:cc:
         1d:51:cb:b3:9d:d6:1c:58:00:4d:ec:39:73:75:a3:3e:3f:9f:
         c1:8d:6b:1c:62:b3:54:63:51:79:1c:45:29:d3:1b:fe:35:10:
         01:19:ad:eb:26:e1:0f:99:f6:00:01:ec:90:17:ea:5d:91:17:
         76:cd:ec:92:d9:34:cc:c9:45:10:5f:8c:b2:ad:70:76:b9:20:
         1b:44:97:3d:5b:54:bf:e6:3d:17:ab:af:f6:16:b4:2d:47:de:
         8c:7b:6a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:24 2024 by rpki-client on console-ams.rpki-client.org