Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File:                     mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier:          KNzCR94zlYMsky7BsSSBV3wFwVaymNNLgpJyai+FULw=
Subject key identifier:   89:24:26:72:70:28:54:38:F4:54:2D:95:B1:B3:3B:1E:73:F7:9A:C1
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer:       /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial:       0193591C06A1889FA9FA82A92FBBC1154B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number:          0A53
Signing time:             Sat 23 Nov 2024 13:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:28 +0000
Files and hashes:         1: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: 26YT/CuQgx/+CAWZSRF2nPboRCyBA9XMa3T5iVm/zBQ=)
                          2: uCXLrf88eLR-TjXN_43VdoZjMoU.roa (hash: t40JVdqohy0LWNUQMYZHmfsEEJsgBt4V6EiZcg8o2cM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:06:a1:88:9f:a9:fa:82:a9:2f:bb:c1:15:4b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
        Validity
            Not Before: Nov 23 13:00:28 2024 GMT
            Not After : Nov 24 13:00:28 2024 GMT
        Subject: CN=8924267270285438f4542d95b1b33b1e73f79ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:2a:64:50:2c:19:1c:21:19:64:80:1e:46:
                    35:72:6d:d7:20:b8:2d:1c:46:90:97:53:16:62:8d:
                    ba:13:64:a8:a1:e8:c9:d4:73:f3:3c:32:7c:14:46:
                    23:02:37:64:fc:ae:e7:ba:2e:7f:71:c6:f7:30:89:
                    3e:6a:ae:af:af:a3:a6:e3:54:86:b8:d2:09:b2:72:
                    7e:3d:3c:f8:cd:e9:82:9c:ff:24:4e:b1:e4:1e:f8:
                    30:6e:25:1c:97:49:e4:4b:81:0b:c2:12:29:87:be:
                    ac:e4:51:1e:9e:58:17:e7:99:c3:56:28:f5:72:f0:
                    8d:68:23:ed:e1:c6:50:97:d5:92:d6:2a:27:62:72:
                    d1:2b:10:99:1a:84:22:3a:e0:5e:1a:5a:83:36:86:
                    d8:6d:01:0c:39:73:0a:b1:57:56:8a:6e:95:0c:03:
                    75:1a:86:9c:1f:1a:b2:19:65:a0:90:99:47:19:32:
                    03:38:59:10:c4:5d:c8:98:ca:5e:f9:8f:f9:64:4e:
                    d6:f8:45:80:26:26:bb:6f:fc:56:95:6f:7a:bd:54:
                    49:05:02:0d:83:3b:56:57:bf:9c:86:c4:4d:05:00:
                    22:2e:a4:20:d9:41:d1:ac:7e:3d:f7:4c:b7:21:c4:
                    29:b6:62:c4:87:80:af:ec:d0:6d:1c:1e:37:8e:c5:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:24:26:72:70:28:54:38:F4:54:2D:95:B1:B3:3B:1E:73:F7:9A:C1
            X509v3 Authority Key Identifier:
                keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:6d:4a:25:97:dd:e0:eb:26:60:51:f9:10:20:09:bc:b0:
         a5:91:70:70:de:e9:0e:18:e0:24:87:a7:d8:69:ac:fe:3f:96:
         8d:a1:8a:ea:a8:f8:e5:01:7d:53:5e:bc:92:7d:8b:da:4c:62:
         da:d7:29:c5:79:52:12:56:ce:9d:be:11:67:0a:85:a1:24:7f:
         87:2f:2f:7f:f8:c6:a6:07:60:d2:99:31:0d:e7:4b:93:da:a1:
         56:27:01:da:0c:6a:95:b0:87:ca:1a:87:1b:de:e8:07:e7:e1:
         e2:4b:c6:23:b5:f2:3b:a3:77:07:90:b7:e3:69:1a:93:ea:dd:
         46:ac:84:62:58:9e:24:07:bb:9f:8d:40:64:6f:4f:21:f5:c3:
         78:de:f3:b2:c0:8b:03:57:29:9f:97:85:56:ee:46:56:b8:58:
         9b:ee:0a:7c:0e:68:2b:74:10:c7:e9:eb:a5:26:c9:31:5e:ec:
         d3:26:e1:7e:b4:e8:51:29:58:78:0f:6f:2f:39:92:c5:82:03:
         e0:17:f9:00:02:df:2f:f0:43:c4:6b:dc:f5:0a:68:81:ff:f0:
         f8:38:3e:13:0c:88:89:c1:60:c3:c1:07:01:e3:b6:a7:ca:a1:
         fe:60:43:78:1a:88:b4:cb:93:c8:1b:e7:b5:f6:9e:3f:63:6a:
         a8:ed:7e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:27:53 2024 by rpki-client on console-fra.rpki-client.org