Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File:                     F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier:          sVcixOy6oVE7d4JfUDFc3M6FsRFHvI2zaMHhnPTl7Q0=
Subject key identifier:   FD:6A:28:EA:E4:CA:90:0B:60:B1:63:60:75:0F:01:DF:BD:05:05:0F
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer:       /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial:       0193579B62516D9CC0C57790CF5059286A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number:          02C9
Signing time:             Sat 23 Nov 2024 06:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:21 +0000
Files and hashes:         1: 0uaxgwrE9Mkiej-22vpSFkXZSjc.roa (hash: hWwNjFgRAOj2BG3xFWOnn/grCx1YpCqKVJqazVM3LQ4=)
                          2: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: IFLY/9XcfMf/2LgSBJfYo+d0imEBA11RpYpttmdOjwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:62:51:6d:9c:c0:c5:77:90:cf:50:59:28:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
        Validity
            Not Before: Nov 23 06:00:21 2024 GMT
            Not After : Nov 24 06:00:21 2024 GMT
        Subject: CN=fd6a28eae4ca900b60b16360750f01dfbd05050f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:aa:34:97:7c:f6:fe:db:54:70:2e:73:5a:
                    2e:1f:05:74:c5:e0:19:62:3b:a7:7f:3f:4c:40:9e:
                    e9:71:a3:92:56:92:66:d2:f8:70:8e:ac:4b:41:e7:
                    c9:20:85:a6:df:87:f4:5e:41:78:64:e0:8c:bf:96:
                    45:c1:af:7b:f2:b7:16:4c:23:77:25:e2:0b:3c:d5:
                    dc:fd:0a:70:3f:63:db:c6:2b:2e:e5:bf:00:a3:df:
                    6a:f4:15:fa:89:18:54:b1:e0:06:b9:1b:3d:da:3a:
                    62:15:49:24:2d:39:dd:d4:99:f2:95:16:38:e0:26:
                    21:18:34:35:74:6a:e2:43:58:54:9a:41:13:a0:53:
                    96:45:53:60:63:91:b9:67:1a:d7:c2:3d:08:8c:65:
                    38:85:c9:95:d5:61:1d:be:00:a9:69:11:96:26:74:
                    b6:bd:65:d6:1d:6d:83:bb:36:90:33:8b:29:b0:f1:
                    0f:36:38:2d:2d:a4:12:07:96:7f:97:05:41:b5:43:
                    f5:36:4a:a5:aa:9f:82:f5:35:0b:6a:4c:cd:90:4c:
                    e4:de:f0:d3:08:63:8e:a3:c0:81:2c:16:eb:b6:1d:
                    ca:c9:32:8f:24:23:5b:27:c9:64:ed:fa:55:16:85:
                    dd:c7:89:5a:1f:2a:a6:0d:70:15:f9:6b:f7:11:37:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:28:EA:E4:CA:90:0B:60:B1:63:60:75:0F:01:DF:BD:05:05:0F
            X509v3 Authority Key Identifier:
                keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:ef:03:46:d2:5e:55:fe:76:e6:47:12:36:f4:c3:c5:8e:
         cb:c2:c3:9f:84:be:24:0c:71:3d:15:02:0d:56:a5:ef:cf:37:
         5b:d0:a7:07:9f:93:7f:48:de:5d:63:a7:50:3d:ce:8d:b0:81:
         8d:97:92:ae:5e:69:68:de:9e:45:30:ab:a5:d6:5e:0a:f2:30:
         77:d8:e7:fa:5a:d8:aa:94:b7:ad:59:73:8d:f9:e0:76:31:41:
         f6:e0:e0:64:bc:61:00:ef:91:18:9a:d1:03:4a:d7:70:c5:77:
         41:aa:98:bd:48:68:ff:e7:3d:80:d9:54:56:00:b1:26:03:8b:
         be:c5:fc:aa:93:8a:1f:b6:8b:7c:15:88:33:12:ff:29:6b:61:
         72:dd:9e:8e:f5:df:66:c0:81:be:24:99:13:ef:be:14:f2:b6:
         7a:6c:29:6f:01:d0:fe:38:ae:23:83:1d:29:7d:6f:57:3a:34:
         73:28:90:b7:ad:05:b4:85:43:aa:b7:4c:5e:15:bd:17:95:2d:
         bd:73:e5:98:3d:ec:16:21:d1:d8:b4:8d:e1:e2:69:0f:e0:77:
         13:67:ae:50:db:3e:aa:04:79:e0:74:4d:6e:73:e2:2d:56:80:
         ec:fa:c5:bb:02:ed:ea:a9:9f:a3:26:a8:c4:e3:16:61:15:f4:
         9a:62:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:45 2024 by rpki-client on console-fra.rpki-client.org