Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File:                     DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier:          D5GwWwr+oDrxTB2N5FG1BeylcaBwLPC5ioBODjux54U=
Subject key identifier:   15:AE:C7:66:CB:51:9F:E5:E5:48:1B:5E:6C:99:83:1D:33:58:0D:C2
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer:       /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial:       01940721944ABA7331DA1835289F531C8CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 08:00:28 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:28 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:28 +0000
Files and hashes:         1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: hVXJ7tSPeEAzkpxeT5PtF5ToQh5ZDCbTtF6OghHYFZc=)
                          2: UYDxzmpaTGgP8-Zd_G7wSXwSnMw.roa (hash: Zq71Y3kZqS1DjA/P9v/qmkbp25PeI4KazxkcbUG0zo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:94:4a:ba:73:31:da:18:35:28:9f:53:1c:8c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
        Validity
            Not Before: Dec 27 08:00:28 2024 GMT
            Not After : Dec 28 08:00:28 2024 GMT
        Subject: CN=15aec766cb519fe5e5481b5e6c99831d33580dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:ea:8d:f1:6d:35:cf:bc:26:7e:d7:15:1a:
                    f8:0e:93:47:b4:f5:37:2c:42:ba:17:6b:11:30:9f:
                    5e:dd:6e:ea:51:9b:88:15:13:56:9d:8f:5c:66:78:
                    3d:4a:7e:32:42:80:d7:3c:c0:69:de:fb:79:cd:61:
                    41:00:13:b5:b4:83:5c:e8:29:9b:d8:4b:f8:26:e3:
                    3d:d9:21:b7:e9:ea:72:04:37:46:8c:13:5d:55:bc:
                    a1:d5:57:ce:f4:b9:2d:01:38:45:3a:54:97:86:5c:
                    f2:0d:a4:e0:d6:e5:dd:21:d5:7c:35:3e:10:a2:cf:
                    1a:e1:a5:30:57:c9:be:50:5e:0c:1f:bf:b8:ec:a2:
                    b7:01:10:cc:fd:27:1d:c7:fa:cc:af:8f:43:b4:0b:
                    14:7b:48:72:34:2c:54:80:4e:35:9f:81:db:ff:b3:
                    3b:aa:b0:d2:f1:70:2b:af:b9:5f:e2:81:2e:72:d3:
                    e3:24:fb:c3:6d:07:a8:bb:57:54:8e:31:a6:83:20:
                    24:ac:ad:27:47:75:39:00:2d:55:2d:88:04:ba:1e:
                    85:19:4d:60:ce:0a:39:56:3e:50:f3:a3:17:c2:ba:
                    af:f0:e9:87:33:ac:e2:ed:52:08:ae:32:d5:bc:17:
                    29:d3:14:48:6d:60:b6:3d:11:3d:e9:37:66:99:88:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:C7:66:CB:51:9F:E5:E5:48:1B:5E:6C:99:83:1D:33:58:0D:C2
            X509v3 Authority Key Identifier:
                keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:af:93:47:0d:88:db:30:5a:ed:10:35:ee:e9:d3:01:c9:
         f4:a1:b9:03:01:ad:9f:f2:9f:6c:e8:cc:ad:ff:6d:60:dd:ec:
         8c:cb:5f:b7:9f:f2:58:15:03:9a:40:06:5b:34:bf:d7:5c:80:
         7b:41:06:9a:40:36:a8:1f:32:b2:a5:bc:da:a0:c3:0d:72:c9:
         1e:22:bb:9a:89:4b:ce:00:68:12:44:12:40:87:f1:c6:f5:02:
         c3:c4:1d:f9:c4:e0:5e:b9:35:0e:69:21:49:89:4c:70:3a:0f:
         a0:25:cf:fd:b5:4c:b0:78:80:81:c3:ea:19:ad:f5:ec:a6:26:
         0d:12:76:a5:89:55:8e:5d:37:93:a1:89:a3:df:1b:0e:d9:e0:
         ff:55:39:da:24:25:b2:80:10:15:b2:db:ed:2a:db:9b:d1:a1:
         8a:bc:e6:f3:13:9c:ba:7f:3a:b6:0f:99:4b:c2:d9:d6:3a:b7:
         ff:b6:a6:ae:d4:53:84:65:59:9d:90:f6:ad:17:d5:07:57:be:
         27:02:f3:d4:2c:8f:e6:65:91:11:21:6b:ec:78:ae:6e:7c:5d:
         b4:43:47:bb:f1:04:d7:8c:b2:c5:65:b8:6c:76:4e:27:b8:d5:
         10:47:39:f0:8f:88:a3:e5:d9:4d:4b:8c:23:18:d0:62:88:ce:
         0e:34:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:45 2024 by rpki-client on console-ams.rpki-client.org