Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File:                     2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier:          cT01OavUa5NlbXy6+8W8fBuF5U+wz4NmfFWxPap+Vtk=
Subject key identifier:   72:38:69:62:28:0D:0F:80:5F:1D:25:32:4A:20:C0:EB:60:5B:D1:7D
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer:       /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial:       0194067CA9CAD66C0984F011178EB4D0CE83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number:          E9
Signing time:             Fri 27 Dec 2024 05:00:20 +0000
Manifest this update:     Fri 27 Dec 2024 05:00:20 +0000
Manifest next update:     Sat 28 Dec 2024 05:00:20 +0000
Files and hashes:         1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: kj/GcPASPKqO7vQVPRJb2V6PHrrHmdKwhCMsIE3eOLM=)
                          2: SfoTTth3rrA5wQYE34lMo8DB-8M.roa (hash: +P/FPPP55Q/FXM9aimJ+RSJFN5GuJwJnpROSmVWU770=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:7c:a9:ca:d6:6c:09:84:f0:11:17:8e:b4:d0:ce:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
        Validity
            Not Before: Dec 27 05:00:20 2024 GMT
            Not After : Dec 28 05:00:20 2024 GMT
        Subject: CN=72386962280d0f805f1d25324a20c0eb605bd17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:97:e7:5f:bf:8d:21:5f:a8:4e:1b:8a:c0:
                    e4:15:35:3d:c1:01:28:cc:2c:41:13:16:f6:08:09:
                    01:78:c8:6c:a9:87:3d:b5:d8:93:a5:02:98:00:1b:
                    ce:cd:66:94:5c:fb:6e:53:56:8b:05:8a:e6:f1:c6:
                    7f:aa:1d:4d:b3:c2:bb:d9:8f:69:66:27:10:e0:f9:
                    51:91:44:6d:e6:c1:6b:66:e3:5c:69:4c:6f:83:31:
                    56:b1:5c:95:82:6a:3e:78:9d:18:03:a6:9e:44:50:
                    0d:49:50:52:4a:cc:f0:b9:52:9f:2e:5a:5e:48:ca:
                    b2:c3:bb:c9:1a:20:b2:2d:66:9b:f0:04:09:b9:7c:
                    3a:b5:b3:0e:2b:c7:e5:1e:4f:14:12:fb:12:a8:1f:
                    fb:ae:a8:92:92:c1:ad:1e:21:0b:db:10:62:33:56:
                    71:17:e0:11:40:cd:f7:5f:00:91:4c:5e:f4:6e:68:
                    8a:56:b6:11:41:3a:6a:4a:cc:0e:55:67:f0:a0:70:
                    10:16:78:0a:90:dd:0a:6e:e9:88:5d:4e:39:22:f2:
                    1c:0a:29:87:15:99:f4:c9:f9:63:8c:3e:6d:4c:99:
                    e7:f1:32:36:dd:e3:e8:30:01:e4:6b:4a:f4:1a:30:
                    81:a7:2d:92:ec:39:52:83:87:c0:8e:e2:28:57:6e:
                    93:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:38:69:62:28:0D:0F:80:5F:1D:25:32:4A:20:C0:EB:60:5B:D1:7D
            X509v3 Authority Key Identifier:
                keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:e1:b5:43:36:7d:ca:ce:b1:0f:9c:f0:b9:00:0a:07:71:
         0e:8f:6c:a0:78:f6:dc:dc:7b:8b:d6:1e:8d:26:ed:12:49:fc:
         5d:9e:ee:58:3d:79:9d:b4:16:1a:f8:5b:ef:69:39:82:1d:02:
         10:f8:52:f4:85:43:8d:b7:b9:f2:ad:d1:26:c1:01:22:52:e3:
         9d:e3:fc:3a:da:ef:57:45:0d:f5:12:63:86:1e:96:c6:24:ca:
         90:05:4b:61:c2:29:70:45:2a:d9:6a:2d:a6:0b:c0:83:d5:46:
         20:a1:d5:ab:50:8c:d6:ff:dd:22:e4:33:e6:29:ad:35:4a:51:
         27:c9:3f:36:db:c8:11:3d:1c:3e:6f:40:14:2b:05:7b:88:1d:
         93:b8:2a:fb:6c:ba:82:e6:cb:e3:a9:11:7e:82:aa:84:ef:ac:
         92:3b:3c:bc:68:2a:39:a2:8f:0d:cb:b5:6e:73:38:4b:69:5c:
         38:dd:3b:c7:dc:63:ff:17:85:89:db:39:02:74:0d:89:63:5f:
         ff:30:92:22:e0:3d:dd:a4:81:ff:92:32:8d:96:94:c7:2b:e2:
         99:74:7e:a5:01:77:ad:14:92:67:26:8b:6e:ce:7f:70:fa:14:
         9b:ee:f6:db:15:87:a0:a2:ee:f8:11:68:2c:42:ef:f2:fc:8d:
         3c:62:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:05 2024 by rpki-client on console-fra.rpki-client.org