Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File:                     CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier:          D6WZ04Z4DBW1kOIumJ76PJu8FGP11p84vY9Vhq/wsJo=
Subject key identifier:   B1:6C:B0:78:ED:4F:DA:ED:62:83:00:68:1D:73:ED:EC:52:39:ED:F4
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer:       /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial:       0193652090F2C4661ED3D714D41D73846D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number:          103D
Signing time:             Mon 25 Nov 2024 21:00:53 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:53 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:53 +0000
Files and hashes:         1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: 9U1uFPX/M//m8VAdbcjMhAuCYMCzo8gqd7Zthdq+Npo=)
                          2: szlTn72_0B-necyALaKZqt7q1lQ.roa (hash: fgXxo4cO8DSK+XNksfyiEdH7Kx8pzIbQGntatI7lXvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:90:f2:c4:66:1e:d3:d7:14:d4:1d:73:84:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
        Validity
            Not Before: Nov 25 21:00:53 2024 GMT
            Not After : Nov 26 21:00:53 2024 GMT
        Subject: CN=b16cb078ed4fdaed628300681d73edec5239edf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:11:6b:1e:bb:bc:64:1e:56:72:1a:08:f7:
                    3a:10:81:70:0f:4f:25:54:04:73:7b:e0:b3:b3:5b:
                    50:f7:f2:6e:96:0b:94:19:ae:7a:61:aa:2c:79:9b:
                    ff:88:20:0d:ca:9a:7b:1d:40:96:d6:89:94:6d:50:
                    0c:60:de:d1:0c:13:85:19:e9:d4:d3:e2:3f:75:0d:
                    29:ff:41:20:70:a1:f2:ba:2f:36:82:53:21:b7:82:
                    62:19:e4:6e:0a:ef:93:79:7f:d6:18:54:b8:cd:82:
                    c7:97:f7:ad:4c:16:0a:4b:37:0f:bd:8e:d6:6f:e1:
                    4e:50:70:b5:61:a6:ed:65:24:c8:f4:ae:b3:80:60:
                    72:e0:7d:3a:6e:52:7f:68:32:8d:48:38:d9:a1:b0:
                    54:25:5f:72:1b:47:49:3e:d5:7c:65:fa:78:48:ba:
                    17:ed:ba:4b:d5:02:aa:55:51:27:e7:58:4e:58:93:
                    a7:a2:b5:cc:9e:98:e8:cd:ab:ba:5d:31:b5:b8:a0:
                    42:2b:44:cd:58:c7:5d:17:92:32:39:92:67:f4:24:
                    2b:3f:dd:10:24:55:8e:a7:7d:03:f4:a0:6c:e5:8d:
                    a2:2b:e2:75:a0:60:0e:57:b4:6f:69:6d:ee:c4:7c:
                    2b:64:e9:f7:00:a2:97:42:0f:c2:08:5f:af:2f:3e:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6C:B0:78:ED:4F:DA:ED:62:83:00:68:1D:73:ED:EC:52:39:ED:F4
            X509v3 Authority Key Identifier:
                keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d7:09:3b:d0:9b:38:aa:6e:56:36:32:7a:8a:1f:5d:1a:46:
         b9:08:ee:39:dc:1f:3d:5a:e1:f9:01:02:97:a1:c3:c2:eb:11:
         34:1c:1e:d1:39:51:cd:12:f7:4e:36:fd:82:7b:f9:50:5c:62:
         a2:8c:58:6a:b9:ab:0d:21:a9:e6:dc:77:91:25:df:8b:1a:63:
         f5:49:48:12:0b:bd:d3:26:85:7f:08:c0:91:18:bf:84:93:a7:
         1b:31:c2:8d:df:3f:b6:58:d2:7a:a8:de:7c:55:3b:2a:5f:77:
         01:1b:2f:dd:20:09:19:4f:e2:c6:ca:1f:2d:e2:a9:b7:e1:0b:
         1c:89:3e:a2:a5:a2:4f:65:af:9e:5e:7e:fe:d7:57:bc:b7:ae:
         cc:1e:39:62:b8:22:2b:ce:35:62:96:6b:5a:4e:21:0d:b2:30:
         7f:68:38:e3:dc:b6:54:c8:6d:2d:6d:73:16:83:c0:ca:0f:2b:
         08:a7:fe:ef:a0:0e:83:b0:0e:a6:8d:3e:dd:c7:79:16:51:8a:
         20:d7:9c:ab:10:34:29:be:bc:86:08:3d:c7:cb:e1:76:84:78:
         9e:4c:f7:82:a5:d8:82:9d:8b:f0:4b:e7:52:ea:14:f8:99:85:
         8f:3a:d4:11:1c:dc:df:3e:8a:0b:50:f5:e6:85:ec:4a:89:6d:
         ec:ed:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:05 2024 by rpki-client on console-fra.rpki-client.org