Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File:                     IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier:          zNh2VXG6d0f492bSWu+3YjwPVJP6JYfyhXlRSkveGDQ=
Subject key identifier:   E6:96:57:12:B7:E7:54:59:26:61:A8:F4:2A:65:37:95:8B:B6:DA:59
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer:       /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial:       0193572DEB2C3DE4057E554B7D612F8D746C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number:          0361
Signing time:             Sat 23 Nov 2024 04:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:47 +0000
Files and hashes:         1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: sLOZT8cAQB1yI8/TBrzliZPf2J7yfCvx7OwyhKi0Crw=)
                          2: LBbWU0WMfzZhNoSO9RgqOybvX_M.roa (hash: /oeybjLETuVV7wntucTgdof/2swnXe6vcy8si6AUK3k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:eb:2c:3d:e4:05:7e:55:4b:7d:61:2f:8d:74:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
        Validity
            Not Before: Nov 23 04:00:47 2024 GMT
            Not After : Nov 24 04:00:47 2024 GMT
        Subject: CN=e6965712b7e754592661a8f42a6537958bb6da59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:a8:fe:63:7c:bd:4c:d9:6c:f7:b6:fb:8e:
                    c6:6c:13:07:49:cb:ad:60:ff:09:86:81:60:72:30:
                    4f:ff:d3:0e:53:24:25:85:66:22:bd:e8:80:1f:6a:
                    b1:b6:ac:af:a4:6f:9d:11:0e:22:a1:9c:da:fb:96:
                    1b:d8:5a:5e:73:f9:0f:52:ad:ca:4a:a5:90:44:d1:
                    7f:85:bf:97:3f:80:34:a2:66:02:24:72:43:35:2c:
                    d5:66:e4:b7:da:30:93:b0:a8:e6:f7:45:43:ed:23:
                    65:94:22:ff:a9:df:f0:1f:f7:38:4f:56:8d:04:47:
                    14:2a:45:70:7c:5c:cb:c6:35:c4:47:dc:21:af:c3:
                    55:9b:7d:48:51:c7:65:db:19:71:0f:e2:aa:f9:a9:
                    01:de:7c:d3:4c:50:68:72:79:f7:2b:bb:37:56:bb:
                    8b:5e:b6:66:3b:42:41:f0:5f:ec:51:92:fc:32:57:
                    e1:f3:41:05:7e:ec:13:3c:31:88:af:b1:57:00:46:
                    20:1c:d0:02:dd:41:06:b4:00:70:45:84:02:41:80:
                    d1:37:8e:87:6a:a3:21:14:ad:7f:4d:65:11:2d:43:
                    57:cb:91:0b:3d:26:3f:03:58:5d:7d:96:87:45:6e:
                    61:2e:e4:93:80:7c:47:aa:56:47:bd:cc:ea:9a:a1:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:57:12:B7:E7:54:59:26:61:A8:F4:2A:65:37:95:8B:B6:DA:59
            X509v3 Authority Key Identifier:
                keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:cc:13:6e:26:33:ea:b1:c3:72:88:3d:bc:79:f9:83:13:
         59:8a:ad:6d:36:e4:6f:7e:6d:ba:b5:31:a9:83:c1:a2:ce:3d:
         e0:d7:72:f9:0f:c3:b7:4e:c4:16:7b:b9:29:45:af:a6:86:7c:
         3c:6e:b1:f3:35:ae:c8:2e:d9:a1:39:89:a4:8d:3a:44:12:86:
         2d:26:dd:00:69:bc:0f:b6:00:e8:0e:7a:01:da:1f:fb:3e:a8:
         b5:d6:49:ac:c9:8d:51:db:03:ce:a5:76:b3:4c:02:60:2e:b4:
         a6:0f:15:49:67:39:8e:71:3c:a0:1f:1a:d9:7a:29:0f:b7:cd:
         39:2f:ce:cc:4e:20:40:66:90:c2:1d:d4:9a:19:2a:16:e9:9d:
         8e:ab:58:c0:58:3f:62:f1:c0:b6:61:9d:7d:cc:78:e4:77:c3:
         1f:09:23:89:15:c5:88:d5:59:92:df:90:bc:f2:54:9c:4e:4d:
         13:f2:ec:11:4f:a2:36:33:23:57:9f:a1:e6:76:85:ca:45:9c:
         ee:a5:6f:d7:68:1d:d2:bb:8d:92:c4:1e:e7:ce:14:b8:3f:bc:
         b9:95:3f:cd:c3:73:7d:53:e9:b0:cf:50:2e:b6:cf:a3:1c:99:
         23:42:66:b2:fe:14:58:df:d3:0d:58:6a:10:93:79:68:5c:78:
         27:8b:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:08 2024 by rpki-client on console-fra.rpki-client.org