Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File:                     MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier:          NEfTV2tjTsn14IzoWxmQg+VgWFH4xKh6t2pzImQhqD0=
Subject key identifier:   B9:DF:C1:23:93:AF:2F:65:9B:C5:5E:14:49:FF:94:F7:7B:BC:E2:0C
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer:       /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial:       01936AEBB03DEADA01946371B695CD64766D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number:          27
Signing time:             Wed 27 Nov 2024 00:00:51 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:51 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:51 +0000
Files and hashes:         1: MvbeMKm492SENE0M07bAJz6t028.crl (hash: KsrOUWr614r5UgqWNOqrUqkycBTMBVP2/MjZDcNn5Rg=)
                          2: Sq9GOR5WTJROQ5DItaSAWOx6Ozo.roa (hash: e2S6wl6E8kylNsgcZ7GkcN4azPCOZsyIfv/29XMV2nA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:b0:3d:ea:da:01:94:63:71:b6:95:cd:64:76:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
        Validity
            Not Before: Nov 27 00:00:51 2024 GMT
            Not After : Nov 28 00:00:51 2024 GMT
        Subject: CN=b9dfc12393af2f659bc55e1449ff94f77bbce20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:36:9c:5f:56:2e:15:0b:1e:ff:1a:75:9d:
                    87:9d:31:95:0a:15:db:28:f5:31:19:57:40:a0:f7:
                    9c:0d:7d:49:30:d8:be:4e:c3:16:86:52:9d:74:31:
                    ce:e4:b2:5e:9a:33:cd:ec:94:e8:e7:c8:43:58:ca:
                    68:c5:99:23:d2:62:d4:97:12:8d:47:fa:c8:90:43:
                    fe:cd:69:af:36:79:3a:c7:d1:37:d4:d6:5c:61:60:
                    86:5d:dc:7c:9c:16:98:f4:8d:f8:c7:58:02:fc:42:
                    30:ca:d1:1f:7b:e0:51:ce:b7:d1:bb:43:91:34:00:
                    11:16:a6:49:c0:4e:68:8d:db:aa:bb:cd:6a:6d:e8:
                    24:9b:c0:58:b2:51:7f:3b:4c:a4:cd:43:3f:e7:46:
                    8a:67:6a:84:b8:ab:53:d2:2e:89:c1:7a:18:36:52:
                    80:4c:36:9f:05:d6:13:9e:a9:e5:79:96:0c:c5:18:
                    55:b9:b5:ac:04:c5:bb:fd:56:b2:48:8d:82:9e:57:
                    0f:5d:06:67:ff:eb:2c:a2:c5:40:15:a8:cb:12:15:
                    77:fe:0b:d7:cf:12:0c:66:4e:66:31:76:aa:24:69:
                    3a:12:1c:e2:b4:50:18:4a:d6:26:5b:46:85:f4:6e:
                    33:7d:e0:6e:75:e5:3e:7a:f4:3d:a7:25:e0:15:88:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DF:C1:23:93:AF:2F:65:9B:C5:5E:14:49:FF:94:F7:7B:BC:E2:0C
            X509v3 Authority Key Identifier:
                keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:31:55:84:99:47:2d:26:4f:08:86:6d:cc:5f:c8:62:37:
         2e:b8:42:d3:c0:5f:77:52:78:6b:34:ae:9f:51:77:1b:81:06:
         57:1e:15:8f:07:e2:96:e2:c4:12:70:13:40:07:9d:75:8d:01:
         01:35:2f:d0:22:83:12:da:7b:67:d4:c1:5a:be:98:3e:2a:64:
         e4:55:94:ab:6a:d0:85:27:12:14:68:15:d3:04:14:44:ea:17:
         11:dc:0f:78:da:a6:ea:63:6b:08:57:3f:a6:3e:0a:3b:ac:a4:
         5c:1a:37:3f:5b:1f:38:63:9d:ef:8e:5c:25:c5:03:96:d0:3f:
         c2:ac:75:bb:49:df:51:85:08:ec:c5:0e:da:f8:5d:0a:9b:3a:
         1b:2a:8a:c5:e3:9d:69:ac:18:f9:25:bf:fc:03:fb:60:fc:20:
         38:e3:ef:26:7c:14:8f:09:66:a1:3f:e7:77:81:23:64:a5:90:
         50:25:6c:cb:ef:11:a7:7f:c4:69:50:64:0e:34:61:c5:21:52:
         cb:26:41:81:90:07:03:c8:e5:9e:c0:38:16:6a:81:20:da:b8:
         31:04:2f:d7:cb:be:b3:f7:49:53:18:31:7c:d5:e0:e6:51:de:
         eb:22:2d:d2:ff:00:4d:97:26:d6:6a:5c:39:6f:68:b1:0c:35:
         29:f4:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:22 2024 by rpki-client on console-fra.rpki-client.org