Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          GI7pMp8YtPKG6WurSkQ9mpQe8R/9VZaRNAIyCkJudZs=
Subject key identifier:   B7:8F:65:28:70:25:62:F2:DD:B0:96:28:ED:31:BA:34:01:81:E3:A2
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       01936A7DC7F3EB74568493D0814085F82D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          11BB
Signing time:             Tue 26 Nov 2024 22:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:48 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: 0tASzzEo4BYVKUm8Pt62huMnnHkcu+ir1M0JO1PpCEc=)
                          2: wAWGCgOGn42x04btliaEqSWrIic.roa (hash: HtjSL8DOFr1dgUUl5P8YVKdjHXwplmqEt7oA7RSDJWk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:c7:f3:eb:74:56:84:93:d0:81:40:85:f8:2d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Nov 26 22:00:48 2024 GMT
            Not After : Nov 27 22:00:48 2024 GMT
        Subject: CN=b78f6528702562f2ddb09628ed31ba340181e3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:52:8a:1a:ed:fa:55:be:12:72:c2:53:fa:
                    bb:de:b5:8c:44:59:bd:a1:07:d4:96:0b:6b:e5:bd:
                    21:31:35:f6:33:ef:4c:e3:36:ed:6d:8c:7d:78:1f:
                    bf:5e:52:f9:e7:d1:95:21:2b:6e:b6:50:ba:24:1d:
                    13:94:de:ac:94:10:50:67:b2:2f:62:1e:34:d3:3e:
                    fb:44:59:90:80:ba:33:43:21:8e:72:e2:e6:74:a6:
                    0a:6c:ea:58:f5:10:47:71:52:da:89:07:1a:73:0b:
                    0d:95:8b:20:1a:f1:29:9c:03:23:dd:03:b1:11:9e:
                    d8:fe:7b:c0:fd:a8:fc:52:93:e1:1d:05:fa:8b:39:
                    59:b3:2e:96:af:ef:22:46:98:4b:dd:59:6d:91:5b:
                    ff:a5:43:67:03:b7:dd:e2:d9:54:d8:9c:db:1f:78:
                    9c:be:3c:be:4f:3f:d5:af:c6:16:06:81:5a:fc:30:
                    ef:c9:cb:63:8d:2e:d7:e9:9e:5b:39:94:92:09:e8:
                    d7:85:9c:00:0c:51:b3:7e:da:0a:2e:69:e8:71:5b:
                    dc:ee:f6:48:bb:3e:16:0f:fc:13:16:2a:1f:39:16:
                    e2:d8:c5:a1:4e:6e:56:96:e4:64:0c:10:d3:b4:b3:
                    82:8d:1f:85:2c:c0:6b:26:b7:75:e8:2e:6d:26:84:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8F:65:28:70:25:62:F2:DD:B0:96:28:ED:31:BA:34:01:81:E3:A2
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:43:c8:44:0a:15:d6:36:0b:5b:e1:80:28:a3:af:aa:83:
         08:6b:38:d7:df:f8:4a:b7:3d:58:c3:65:9f:c4:61:c3:1c:4a:
         cd:57:60:c1:1f:3f:50:9b:52:bf:3f:f9:32:66:0c:ef:c5:04:
         3d:6a:35:32:a4:35:e6:5c:4a:b5:15:3d:13:cb:1c:6c:cd:6e:
         84:04:b9:3e:01:f6:ec:dd:91:75:5a:f5:89:bc:ea:39:af:8b:
         24:e7:f1:7e:10:09:12:51:10:6d:05:7b:fa:85:bc:bf:a2:78:
         0f:61:41:05:56:6a:3f:56:4e:ee:4f:8d:a5:34:50:9d:f5:13:
         bb:b3:a3:d6:77:8c:e5:b8:01:ea:01:9f:54:10:b5:be:79:fd:
         37:e6:60:9f:02:1d:6d:b9:fa:27:d5:5e:5e:06:5a:6e:25:33:
         55:49:35:1f:09:f7:5e:a2:c5:e4:24:1b:0f:91:65:6a:ac:04:
         53:c9:58:bd:ab:d2:94:aa:01:36:5b:0f:23:45:d7:9f:a3:2c:
         37:44:0d:ca:28:58:1c:7d:98:83:ac:e6:ab:51:3f:40:66:bd:
         b1:46:92:dd:5d:26:9a:45:ef:1c:70:db:cb:86:b6:49:2a:5f:
         83:38:90:c3:ff:1c:c8:e6:30:f4:ff:c4:06:c7:b3:af:6b:86:
         14:6f:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:06 2024 by rpki-client on console-fra.rpki-client.org