Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File:                     aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier:          mvogUcbQiTXT+4veK0C5KKSGbguK6xDCsHJrX1J6+Ms=
Subject key identifier:   3C:DF:7A:2E:8E:D8:B1:2C:32:94:46:B1:9C:9D:33:ED:4F:92:AC:55
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer:       /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial:       01935350E15761676B174928E0389ADF9BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number:          1301
Signing time:             Fri 22 Nov 2024 10:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:29 +0000
Files and hashes:         1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: VEtdBwlctsaJ4P/uMxM+CUjBXV4Zrar69uAwebcpajg=)
                          2: uhhrhqvzOeSJQczE88-nuObPqH4.roa (hash: Yb5cZ/LHByIgFLifli2ZGkEPxMgtx5WlcPXyQ3MtdFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:50:e1:57:61:67:6b:17:49:28:e0:38:9a:df:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
        Validity
            Not Before: Nov 22 10:00:29 2024 GMT
            Not After : Nov 23 10:00:29 2024 GMT
        Subject: CN=3cdf7a2e8ed8b12c329446b19c9d33ed4f92ac55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:ab:bf:dd:80:0e:82:2b:3a:ab:0e:de:34:
                    99:75:89:1b:04:38:4d:e1:53:f3:3d:cc:4a:08:6e:
                    77:41:28:27:02:3a:4f:b1:72:00:7e:e6:01:d8:26:
                    bb:04:29:2d:17:f8:3c:00:a9:61:13:b9:12:39:ae:
                    b0:51:16:85:c0:d7:66:3f:de:12:08:5e:8e:a4:96:
                    00:31:d1:84:af:1d:e7:68:6f:2d:ca:ae:8a:c5:d1:
                    ed:1c:22:5e:c8:19:96:2f:d3:c4:e4:b6:24:e0:49:
                    29:87:a7:25:54:66:4c:f9:b1:be:15:f2:b7:74:e5:
                    d5:46:df:ef:f7:ea:a0:32:a2:43:8e:a5:88:d7:e1:
                    7e:62:41:d8:86:f0:dd:df:46:b0:fd:ba:5f:3a:ef:
                    53:91:c1:58:dc:44:18:42:17:2c:82:87:79:4e:bd:
                    68:5c:99:e3:61:6f:e0:d6:52:89:b0:ae:49:c9:53:
                    68:68:9c:01:61:8e:5e:3f:85:8f:9b:12:3c:ea:3c:
                    80:80:2b:a0:1b:c7:46:b7:27:15:8e:f8:6a:5a:e5:
                    c8:4b:0c:56:a4:63:7a:52:6b:a3:27:12:00:98:ed:
                    5f:45:38:c4:0e:10:44:e4:92:88:9e:e8:2b:9c:66:
                    b8:e0:0e:54:37:93:dd:3f:91:93:a4:41:6f:be:c1:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DF:7A:2E:8E:D8:B1:2C:32:94:46:B1:9C:9D:33:ED:4F:92:AC:55
            X509v3 Authority Key Identifier:
                keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:88:1f:1e:41:68:f7:17:1e:91:2b:d0:04:fa:b7:c6:0d:f1:
         30:c8:72:7c:75:c1:d0:a2:9f:dc:64:88:a7:6a:7a:1f:c5:52:
         a3:2f:25:1a:19:26:65:5f:f6:c7:97:24:59:ba:35:37:ed:5b:
         f3:11:71:31:ff:23:a7:c0:8c:50:01:bf:e5:57:2e:00:ba:34:
         c4:1d:4e:92:a7:65:a3:f5:b6:e3:b7:36:20:a7:78:51:47:29:
         34:fb:f7:5f:f7:39:62:b3:bd:b7:f5:86:15:25:73:17:55:56:
         12:d3:22:95:c0:17:4d:00:87:9d:1d:5c:e3:17:88:01:f1:9c:
         79:d2:b9:8c:07:fc:bf:f6:a4:d4:49:87:b2:34:16:c0:23:6d:
         a7:72:e0:e5:c0:ab:aa:9e:ab:94:44:5b:70:4e:ec:57:ee:a5:
         33:79:1a:50:dd:17:8f:d0:d8:08:91:aa:3f:6c:be:14:b5:e5:
         04:4e:c9:7a:2f:97:e1:b4:06:53:9e:6f:54:cc:69:ce:eb:65:
         65:64:af:e6:05:6e:a3:b7:a0:ef:d5:e7:18:8b:ec:d1:cb:78:
         c7:39:b6:f3:9b:44:ac:7c:0c:49:67:3a:1c:29:13:78:39:f6:
         56:8f:76:dd:79:4e:03:ce:9e:c8:98:b8:a1:f7:04:ad:24:e5:
         4b:37:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:55 2024 by rpki-client on console-fra.rpki-client.org