Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          7vBRPcHDkXn7nY8KkIJFhBly+WUz8Zd6/XZiq5JawZ8=
Subject key identifier:   EF:79:48:06:D0:27:DD:E5:78:A2:0B:F2:65:9B:F7:FA:47:64:D0:48
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       0193561AF41AE09722E1DC399D78DC5A0D5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          109D
Signing time:             Fri 22 Nov 2024 23:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 23:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 23:00:26 +0000
Files and hashes:         1: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: EiKmQe7RpLfA8s6N64FLiSD0raBJNV9NnhdoRrIqXSo=)
                          2: P_PmSlBtNo5ZanXVT2tKMsn9yZw.roa (hash: lML3C47qW5MY/iVLGx5cFreTXaKHjUvJpO7UFox5iMw=)
                          3: XDfwZrOPR320bKm4EprjeeGFCBg.roa (hash: zJBCtEmIf7tTN5EB46LJPBqtTKg1ZfAIo61HfsF14tM=)
                          4: pjG67mzLUoh9tvF4CfxfO8AfFHQ.roa (hash: geC5r58YylwaCRtGoWeOTvFsdzYUmynEN8mpGmAzbI4=)
                          5: yPOLvM3GjtGWJlpaVxmJnA4ayxw.roa (hash: K13JDa17K9Vg+1s6yyJHrsjzZZMO/hW7O4mIFoDWSMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:1a:f4:1a:e0:97:22:e1:dc:39:9d:78:dc:5a:0d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Nov 22 23:00:26 2024 GMT
            Not After : Nov 23 23:00:26 2024 GMT
        Subject: CN=ef794806d027dde578a20bf2659bf7fa4764d048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a6:95:c2:4c:65:09:42:c7:ce:46:0d:b3:b5:
                    e1:7a:ad:41:65:8b:5f:8e:23:18:da:49:54:2b:95:
                    92:7c:03:bd:64:c4:3e:e0:e0:f5:16:e4:ce:97:fb:
                    e9:41:49:44:3d:73:e6:60:00:21:5f:1b:b6:9a:47:
                    98:8b:5d:bf:22:54:4d:bd:ec:e1:ef:40:2a:cc:4c:
                    f8:aa:17:eb:05:e7:e4:7c:a5:73:79:43:bd:2c:9d:
                    0b:9f:5b:36:b7:8b:dd:9b:0c:a7:a8:39:e4:25:41:
                    77:f1:7c:ee:76:47:c6:37:32:d2:65:65:a5:27:96:
                    f6:df:66:14:89:f8:00:74:9b:6e:96:a1:0b:03:5b:
                    df:22:a7:d5:02:a2:94:3d:d3:27:c1:6e:35:ad:07:
                    25:a7:a4:2a:e1:e8:0d:cc:5c:d8:0c:0c:e2:0f:7c:
                    50:01:02:27:e1:01:2e:e5:aa:f9:17:09:b5:75:dd:
                    7b:99:d4:85:b2:11:2a:a7:04:46:df:33:0c:eb:77:
                    c0:a1:18:95:73:9a:a8:dd:8e:22:55:4c:53:a3:be:
                    16:f9:7e:0a:ca:72:a0:a1:b3:a3:78:e9:ce:53:38:
                    5b:56:6c:43:7f:1e:78:c1:12:64:29:94:17:6f:b6:
                    c9:18:fa:46:c5:df:90:7f:d6:a2:89:9c:1b:3c:94:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:79:48:06:D0:27:DD:E5:78:A2:0B:F2:65:9B:F7:FA:47:64:D0:48
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:32:6c:fc:6a:e8:c8:77:9e:ac:46:f0:1a:6d:29:37:a9:b0:
         43:22:c8:e7:f6:df:1e:72:eb:8b:96:d2:0a:13:fc:55:be:e0:
         78:43:93:81:86:6d:42:35:e7:5a:de:56:87:f1:a3:30:31:fb:
         3f:bc:95:07:1e:aa:bd:3d:88:84:ec:59:1a:d6:44:d9:83:15:
         3e:94:58:00:87:9e:32:c3:4d:52:18:a6:d4:27:02:cc:e7:ae:
         0c:9d:5e:5d:7c:38:c3:e2:ea:b2:02:86:08:a3:40:72:2d:77:
         97:10:2e:f9:19:81:e0:04:05:5e:f3:bc:50:cd:a4:bc:d6:fb:
         3f:b9:70:a1:1e:11:e1:ec:a3:8c:46:83:e7:f1:d7:7b:d0:01:
         a8:98:2f:23:d7:c8:3b:64:aa:31:d6:be:8f:ed:b9:0d:be:cc:
         53:f4:a4:95:08:64:c0:b5:3d:8d:3c:90:df:54:1e:90:f1:e0:
         71:0d:ca:d5:35:f9:eb:eb:02:98:53:22:79:67:cc:57:a5:06:
         70:80:28:1d:f5:d8:84:90:f8:fe:8a:c1:79:8a:cd:86:10:55:
         07:f4:96:3b:70:78:a1:68:92:f1:e3:dc:e7:59:f5:2d:81:27:
         dc:05:7c:84:d7:a8:04:41:be:2d:b8:d0:2b:3a:a9:57:b3:25:
         69:9b:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:20 2024 by rpki-client on console-fra.rpki-client.org