Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File:                     dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier:          sFJABTtqHrS1GvCRV5KPksZ31K2yl/r2WxppwwPW/EI=
Subject key identifier:   65:01:1B:0A:24:3F:13:B4:E1:A1:D9:D3:34:42:32:8F:FD:85:38:1B
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer:       /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial:       019350BF80D1F2ABDDFD8BEF932F192A2C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number:          1373
Signing time:             Thu 21 Nov 2024 22:02:27 +0000
Manifest this update:     Thu 21 Nov 2024 22:02:27 +0000
Manifest next update:     Fri 22 Nov 2024 22:02:27 +0000
Files and hashes:         1: 22vCrB3xq21gOIxE8_ZP9EhZtEw.roa (hash: 6Lny7dAoV+jtS4Q//9kJKn8+fyv7gmCkPc23Vc7+lh4=)
                          2: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: RC6dbN6CAuGDtJqt9GZHrov6RIYtwuRQ/5IG6+ZbwxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:bf:80:d1:f2:ab:dd:fd:8b:ef:93:2f:19:2a:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
        Validity
            Not Before: Nov 21 22:02:27 2024 GMT
            Not After : Nov 22 22:02:27 2024 GMT
        Subject: CN=65011b0a243f13b4e1a1d9d33442328ffd85381b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:fa:d3:4b:60:58:ca:e8:e3:28:d5:b5:f3:
                    1b:4d:fa:85:42:af:9e:1f:90:c4:47:f2:55:1b:80:
                    2e:43:23:1b:d0:56:65:0e:1f:d2:f5:58:64:35:f0:
                    7f:1e:ae:99:f4:0e:d2:59:21:8e:cd:67:91:86:47:
                    83:a4:7b:66:7b:ce:e1:78:42:87:c2:cd:da:f7:25:
                    40:c8:f0:89:c9:ff:6a:b9:df:d4:46:2f:35:1b:06:
                    fa:e3:fa:a0:37:47:eb:09:82:89:9e:ab:9b:74:b3:
                    e2:56:c9:ae:50:eb:b4:5b:e2:bc:18:3d:9b:28:75:
                    31:75:c8:49:47:24:e1:87:2d:91:d3:02:11:9d:89:
                    2c:6e:58:25:dc:81:62:75:d7:de:b3:57:a3:eb:99:
                    09:e1:23:19:0b:4d:f9:3f:6a:bb:c9:fb:09:e8:80:
                    59:74:55:57:27:82:b0:bb:bc:ec:7c:8c:50:3b:0f:
                    90:4c:1e:e0:9f:e3:fd:20:db:5c:a0:45:ad:c9:14:
                    92:f3:fd:af:83:13:ac:a2:b6:9e:26:c6:49:d4:99:
                    9e:a8:4e:70:01:d6:0e:39:1d:80:fb:3c:ad:7c:b7:
                    22:da:94:64:f1:e0:2c:37:a9:44:fa:d9:87:13:5c:
                    aa:6c:fc:70:f0:c7:48:1a:25:f5:c8:1c:d8:22:79:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:01:1B:0A:24:3F:13:B4:E1:A1:D9:D3:34:42:32:8F:FD:85:38:1B
            X509v3 Authority Key Identifier:
                keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:5a:b6:db:f9:4d:ca:db:ed:bc:c6:fa:6c:a6:d0:ab:1e:
         0e:76:55:43:c6:a0:ef:f3:3b:ec:d8:cc:85:f8:b0:4a:48:85:
         27:82:53:49:7b:94:cd:08:d6:59:ab:4a:aa:21:9e:81:6b:6b:
         3a:5b:e7:9a:27:53:7d:e1:a3:0a:4f:37:ae:54:f8:a4:32:bd:
         30:e2:8d:30:89:86:b1:3e:a4:f7:ae:27:40:df:d8:09:ac:4c:
         e3:e4:7d:4c:0d:4b:16:e5:00:d3:42:f7:06:b4:d7:d1:64:59:
         40:f3:77:a1:07:15:23:ec:19:36:77:26:e6:9e:e1:f4:ae:53:
         bf:91:5c:82:db:c1:1e:93:9f:52:1b:bf:f5:fb:88:2f:2d:bc:
         d1:8e:1c:67:ff:a3:fc:b4:1a:32:4d:ff:5c:28:29:2b:b3:9c:
         4f:33:4b:2b:d1:35:f5:8a:60:e6:24:d5:9d:09:29:46:92:b6:
         a0:3c:99:cd:e0:b6:0e:d2:f1:4c:58:a5:d0:7f:fa:9f:20:a4:
         00:29:8f:e8:ef:6a:b9:1a:c2:1b:76:ea:89:4a:32:f2:69:0a:
         06:06:03:79:dd:5c:5c:91:c2:27:b9:54:b3:ac:39:5c:72:42:
         1b:46:62:46:e6:f2:4c:0b:4a:c0:23:4a:88:aa:cb:25:8b:93:
         a3:01:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:48:48 2024 by rpki-client on console-fra.rpki-client.org