Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File:                     pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier:          bGWWyq432r9qPEgD9RnP6++jZoAsS5YgMQSnartqFt8=
Subject key identifier:   74:17:9C:15:D0:F9:C8:2E:78:B2:3C:70:EB:42:08:76:1A:DE:91:B9
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer:       /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial:       01935689C78318C0EFD3C7570546F3452B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number:          08F3
Signing time:             Sat 23 Nov 2024 01:01:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:30 +0000
Files and hashes:         1: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: KsVvyroZDt+6KsAX9EB0mR2RuiIOy9psecDExNweKcE=)
                          2: tOSxZOxJKleonEMvQFRBOblqOFM.roa (hash: S5l7y8jnMRml64IX6+MPcJ6uCfuAdVoXNY848uOybSc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:c7:83:18:c0:ef:d3:c7:57:05:46:f3:45:2b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
        Validity
            Not Before: Nov 23 01:01:30 2024 GMT
            Not After : Nov 24 01:01:30 2024 GMT
        Subject: CN=74179c15d0f9c82e78b23c70eb4208761ade91b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:87:6a:e1:45:d0:a0:41:82:5b:15:d1:32:
                    da:dc:f3:74:d5:26:1a:85:0f:60:fd:03:60:5a:41:
                    80:b3:fb:40:e7:88:2f:5e:58:0c:cd:e8:32:ea:72:
                    8c:d8:a0:47:b7:1e:1e:4f:89:a8:0c:af:af:09:73:
                    f6:b3:ac:56:80:b7:79:10:d1:28:78:4c:56:91:19:
                    d2:a3:60:ea:7f:00:48:c4:81:48:11:13:99:5f:8a:
                    bd:c4:27:88:02:ae:e8:e7:5e:53:59:22:5e:00:05:
                    9f:44:fe:3e:1d:13:75:f9:a5:b4:27:52:80:5e:e7:
                    ba:ff:22:ac:ef:48:b4:37:20:1c:42:a9:7b:39:33:
                    9a:d0:50:32:75:80:76:72:e8:2f:b5:3f:f1:94:6d:
                    3a:dd:01:16:51:d8:df:4d:ed:c8:e0:1f:ca:a5:6a:
                    5c:aa:6e:c1:50:95:a3:10:8f:d8:21:7f:8a:5b:05:
                    d7:91:5d:38:86:a9:65:f0:c3:11:6f:df:e4:bf:d4:
                    df:1a:3a:ee:2c:a6:73:97:25:07:1c:29:83:36:df:
                    83:72:6f:56:73:a8:2e:61:df:b0:bc:6f:3f:69:e2:
                    95:08:19:12:5d:c4:38:51:ee:fe:d0:74:78:f8:8b:
                    3c:1a:83:2f:5c:b8:40:40:65:b6:5c:98:54:96:57:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:9C:15:D0:F9:C8:2E:78:B2:3C:70:EB:42:08:76:1A:DE:91:B9
            X509v3 Authority Key Identifier:
                keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:20:f6:8e:d8:10:b4:9b:8b:0b:4b:61:09:50:c5:69:c3:55:
         b1:f1:9e:2b:41:7b:bc:a7:94:35:2e:e7:d8:44:67:df:c5:6c:
         65:07:66:ce:d2:3c:b6:90:60:39:d8:4c:02:37:ee:d1:ef:ee:
         da:90:86:95:60:fe:60:28:b3:5c:08:e2:b8:a0:23:d6:6d:ec:
         b3:01:cc:8a:4b:c2:c1:4f:19:ea:12:bf:6e:6d:1c:f0:31:aa:
         e7:0b:5d:55:37:e6:7a:f1:91:20:c7:dc:e5:a5:8a:6d:88:92:
         28:4d:4b:44:de:ec:5e:52:07:79:4b:07:04:61:3d:aa:bf:9d:
         2d:69:04:d9:8c:69:c3:5e:04:87:f3:35:25:c1:eb:b4:c3:46:
         9a:73:52:9e:dc:96:15:e3:4e:c3:14:e2:70:71:82:99:e0:dd:
         02:0f:16:91:83:95:8b:10:34:c9:87:21:4e:06:60:bf:47:a3:
         bd:82:c9:ba:bd:c1:f6:77:9d:f9:e6:3e:a5:a3:f4:ac:34:f3:
         b6:b5:ff:6f:f1:51:6e:98:5f:81:91:5d:3b:91:58:db:79:2f:
         1a:11:55:6e:ef:54:e9:34:14:51:e5:f0:30:a6:84:ce:1e:82:
         45:63:75:a0:39:eb:f6:16:3a:92:0f:db:01:f4:ed:aa:b0:39:
         f5:0f:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:51 2024 by rpki-client on console-ams.rpki-client.org