Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          N3XKJo60aaFCzHxuxqOAE8TqHLN35MdswUzhiu6uX8s=
Subject key identifier:   E9:8D:24:36:CF:F9:80:AA:6D:18:0D:8B:F6:E4:D9:26:1F:10:E6:28
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       01936B227DA32EB7781A032799CBBCF3ECD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          07A8
Signing time:             Wed 27 Nov 2024 01:00:42 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:42 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:42 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: c9IIt0Gd8/ZKHuaLnKOtCBW9d7dBbfCawgDLudRqNh8=)
                          2: YBXIkJ6h_W8STrM_i2hO4C86lnA.roa (hash: 5aWCPYqVjBDCEBQobKyTgCBT1dO9pb1qMNRyRW1r9Ow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:7d:a3:2e:b7:78:1a:03:27:99:cb:bc:f3:ec:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Nov 27 01:00:42 2024 GMT
            Not After : Nov 28 01:00:42 2024 GMT
        Subject: CN=e98d2436cff980aa6d180d8bf6e4d9261f10e628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:60:e0:0e:7d:dd:83:9e:0c:a1:64:a4:55:
                    e6:a9:9a:2b:54:9d:c3:42:de:33:77:56:94:00:a3:
                    66:f2:5b:51:b2:49:86:fe:28:01:a1:76:de:50:c8:
                    69:0d:31:bd:2d:a7:f3:2c:c3:a9:48:b8:62:ee:62:
                    c9:99:8e:aa:8c:42:ef:22:b2:4c:24:7f:66:e6:90:
                    8d:f9:c9:b3:90:a2:23:44:f5:91:d9:21:4c:d3:3d:
                    83:87:5e:4b:56:b7:82:d2:d1:d6:2e:7d:3e:5e:8f:
                    97:26:4f:63:cd:a5:71:ab:db:34:1f:3e:7f:47:d8:
                    99:e1:70:84:dd:1a:a3:02:24:19:68:bd:cd:0b:ad:
                    e2:96:b6:29:6b:49:c1:a6:d0:b3:ed:0d:63:91:d1:
                    87:28:4f:af:dd:3e:8b:e9:be:9d:2c:28:f5:03:c0:
                    fb:c3:74:3a:2d:3b:dc:aa:f8:82:ae:39:30:64:f2:
                    24:7c:f3:06:58:32:c1:df:19:6c:95:b1:4f:45:01:
                    78:14:da:67:3f:c8:7a:91:88:bd:93:0c:07:fb:5e:
                    bb:03:39:ad:ac:50:69:6f:89:03:e0:f7:82:38:c1:
                    0d:b9:85:9c:cf:bd:5c:4f:43:51:20:8f:74:f7:17:
                    c0:a8:53:a9:f8:91:27:0b:eb:f3:43:14:51:98:2d:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8D:24:36:CF:F9:80:AA:6D:18:0D:8B:F6:E4:D9:26:1F:10:E6:28
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:74:00:b6:19:5f:c5:c1:b9:85:f0:ed:85:51:67:86:2a:
         4c:5a:f4:d0:21:fc:7a:d8:f8:85:98:85:f4:3e:bf:cd:f5:2a:
         f8:a9:c6:f4:10:af:26:8d:bd:8a:2c:15:2d:3e:0b:a4:29:03:
         9e:ed:4a:e1:26:91:be:f7:b6:1e:43:3b:88:9a:61:95:64:6b:
         01:fc:02:e5:ba:33:6a:ec:e8:f4:83:a5:45:b5:0d:4d:39:ff:
         c4:1c:56:19:0e:88:38:df:7f:de:5d:55:a5:ab:8f:4c:ca:a0:
         a3:c3:32:ad:96:b3:21:77:6e:12:08:0d:cc:22:c9:a3:e3:b5:
         6d:65:6b:d2:3f:52:48:34:7c:c4:bf:14:20:95:bc:61:c0:b2:
         ec:8c:17:cf:7b:19:d1:da:4a:88:68:42:44:53:38:ba:3a:ac:
         b9:ce:90:c5:0d:10:cc:ac:92:d8:e1:c3:03:5b:1c:8b:9f:25:
         66:81:12:e5:01:96:10:ec:60:91:c0:79:9e:b0:45:41:b0:67:
         7b:02:e6:10:37:f1:09:21:ad:f1:94:e0:d9:26:7f:fa:75:75:
         3a:6c:57:1a:10:cb:c9:21:6c:09:76:8f:5b:23:d0:09:6a:dc:
         fd:9c:03:eb:e6:4b:39:84:1d:5b:1e:a9:88:4e:00:13:f5:fb:
         ef:c1:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:46 2024 by rpki-client on console-fra.rpki-client.org