Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File:                     S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier:          Q7YtFtEhBlBEYqVe47Z40qoqYr4xXrkvD30MYUdkpFc=
Subject key identifier:   BF:93:22:F6:1A:84:13:F2:CD:A6:3D:D2:3B:C6:50:38:C2:B3:16:30
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer:       /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial:       019354D168C67251571EE85BDF80F8B3F5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number:          12FF
Signing time:             Fri 22 Nov 2024 17:00:30 +0000
Manifest this update:     Fri 22 Nov 2024 17:00:30 +0000
Manifest next update:     Sat 23 Nov 2024 17:00:30 +0000
Files and hashes:         1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: i12VB1yxXPGo8l38PXx1YHryMPWH019WnIvX5yf9bM4=)
                          2: UnsiNFwfkHpWXtKbJ_1qE42m9Vc.roa (hash: rtpHEvW+XK+qlfA8t2ah6/0hzwaF0yUjzFhlKVRi+xQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:d1:68:c6:72:51:57:1e:e8:5b:df:80:f8:b3:f5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
        Validity
            Not Before: Nov 22 17:00:30 2024 GMT
            Not After : Nov 23 17:00:30 2024 GMT
        Subject: CN=bf9322f61a8413f2cda63dd23bc65038c2b31630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:b9:33:ff:ff:de:ce:f4:62:8a:15:0e:50:
                    0c:d9:11:6d:18:4b:d5:88:22:ca:4a:f2:01:dc:8c:
                    b2:82:e5:ff:d1:f4:9c:38:56:46:47:32:ce:16:8e:
                    98:79:71:39:0f:d5:15:f6:09:07:66:de:64:ca:c5:
                    9c:32:ab:c0:8b:97:82:07:17:b7:44:83:d5:e4:4e:
                    58:1f:28:9a:a4:24:b5:ca:e2:93:18:74:70:41:a8:
                    be:c5:3b:1b:4e:e4:93:85:48:c3:6c:56:57:a8:96:
                    36:91:07:bf:37:31:ef:3d:3d:bc:29:82:3e:ea:16:
                    5c:6b:60:2a:29:07:c3:4f:1f:f1:c4:41:d3:ed:6b:
                    f2:73:ca:d3:5d:97:2f:ae:19:e1:e8:d1:80:bb:d7:
                    ec:4d:a5:fa:c1:58:47:ce:44:ae:16:43:b6:00:62:
                    56:bb:9f:13:68:ef:99:de:f5:9c:a2:f4:d4:4f:b8:
                    6f:5d:a0:4b:be:f0:32:4b:ce:8e:7c:da:77:70:26:
                    fd:53:c3:dc:d7:a8:eb:ef:64:53:8d:ab:6c:dc:22:
                    4c:e0:1c:93:8d:24:69:89:ea:c7:a4:47:b2:91:b1:
                    46:c0:e4:f8:a8:8c:dd:a0:cc:a4:cf:22:fa:25:88:
                    25:e3:33:44:97:d8:9d:f2:9e:d2:94:31:85:da:4f:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:93:22:F6:1A:84:13:F2:CD:A6:3D:D2:3B:C6:50:38:C2:B3:16:30
            X509v3 Authority Key Identifier:
                keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:f5:b6:f4:32:b0:2f:9d:e7:08:bf:84:b6:be:f6:dd:f5:75:
         00:c9:08:ff:db:0f:cb:36:b5:b6:6a:dd:d1:09:6a:b3:5c:6a:
         44:c6:30:e1:12:ad:37:e7:f3:ef:24:5e:18:79:33:58:ff:45:
         ca:c9:b0:73:47:0e:44:83:67:52:0e:fc:2b:c3:c7:77:12:f5:
         c9:8f:99:c8:7a:54:af:e7:65:98:9b:68:c0:4f:70:46:98:2f:
         85:7f:ef:8a:3c:e2:88:70:e0:b3:8f:d0:b2:ea:c6:02:2a:17:
         e2:bf:41:3d:4a:32:e5:80:91:f6:b6:2f:55:0c:1d:53:64:e0:
         bf:fb:b5:4a:a4:2b:d0:53:b6:05:75:5d:95:58:8e:a7:68:96:
         f8:25:8e:56:4a:c3:d8:f7:d1:b4:da:eb:8b:3f:fb:9c:26:ed:
         b6:e0:31:8c:82:f9:e3:b9:9b:d2:b6:9d:db:b6:22:e3:69:90:
         b5:ab:a3:47:ca:b2:56:8d:73:09:2e:ad:b7:90:c9:9e:78:94:
         2d:22:9d:e3:c2:6d:e5:c7:1c:b5:18:57:d6:ca:1e:29:59:cc:
         64:79:12:63:00:84:84:26:ec:e7:4f:dd:4a:ee:52:f4:04:15:
         0f:a8:6b:df:5f:c3:37:04:d3:c7:bd:62:37:a0:b3:ff:d4:09:
         48:8b:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:15 2024 by rpki-client on console-fra.rpki-client.org