Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File:                     yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier:          g0tlBU1XsrDuqMfjpTn9TGNf8/4oiSZK4KNbYPFx4qc=
Subject key identifier:   DC:9D:77:52:EB:36:FD:E6:EB:CF:53:08:EE:DE:B8:7D:75:79:A3:5B
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer:       /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial:       019369DA0ADAA27C84F834D06067C4AB714C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number:          0451
Signing time:             Tue 26 Nov 2024 19:01:57 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:57 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:57 +0000
Files and hashes:         1: 9ZB-22Cnw9i3n3OSR6D9EEjW0bg.roa (hash: 8UMpt/Nk662F4eJ3c9gCqZTTRWVgdhfHTCVziU+N5oo=)
                          2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: Zoq47vhnBFP9qMAHjtGmmSll6/MxGyCn4A/3HnY+l1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:0a:da:a2:7c:84:f8:34:d0:60:67:c4:ab:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
        Validity
            Not Before: Nov 26 19:01:57 2024 GMT
            Not After : Nov 27 19:01:57 2024 GMT
        Subject: CN=dc9d7752eb36fde6ebcf5308eedeb87d7579a35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:d1:a1:6b:bc:b0:0d:67:17:c0:15:5b:27:
                    55:d9:c0:01:08:64:16:b4:f3:0a:ab:e0:a2:94:47:
                    d7:37:28:ee:22:9e:93:60:dd:7f:c9:89:6e:e0:4d:
                    91:8a:c1:ca:96:73:ae:20:3e:0e:9e:3a:48:18:db:
                    51:d1:f8:ea:a9:e9:37:7e:e5:03:b9:af:e7:cb:1b:
                    1f:87:22:e1:6f:23:16:a8:b7:af:66:28:b3:fd:15:
                    77:29:8b:4b:1e:e1:01:a0:8b:91:33:d6:38:6e:c5:
                    52:ff:01:84:8b:02:3b:4e:b4:96:1d:38:ce:1d:42:
                    7d:d4:94:df:8b:5f:a6:7b:f5:1b:89:bb:eb:89:55:
                    d2:71:8c:e1:90:f9:a4:22:01:f7:1a:05:80:c4:5d:
                    e9:00:9e:ed:29:fc:7a:1b:43:bd:d1:0e:fd:e4:05:
                    c7:97:95:e7:2b:09:99:98:ed:c1:25:b3:69:4d:49:
                    0f:b4:00:56:d6:0e:66:90:17:04:3c:84:fc:6f:a9:
                    c9:a2:f8:cc:ff:5e:62:49:17:1b:14:84:b8:44:a5:
                    eb:5e:df:65:03:51:84:27:4a:03:d2:b0:f0:f5:23:
                    2a:02:88:3f:77:af:82:6f:e8:ad:93:71:da:bb:97:
                    38:c2:fc:8d:39:ed:ba:ee:e4:0d:a7:54:f6:ec:36:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:77:52:EB:36:FD:E6:EB:CF:53:08:EE:DE:B8:7D:75:79:A3:5B
            X509v3 Authority Key Identifier:
                keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:c3:89:26:a2:a2:82:89:77:7b:51:aa:5f:49:da:99:01:
         09:63:7e:db:d1:62:84:7d:49:f7:0f:2b:26:6c:14:2b:2a:72:
         d7:a9:cf:ec:a6:2a:9c:67:82:1a:e1:d8:36:28:bd:85:5b:51:
         a4:2a:51:e3:7f:25:2f:ef:bf:d5:6e:2c:db:86:2f:9c:b4:e6:
         04:ca:f5:bf:8c:57:75:4f:f9:70:d1:fb:04:f2:90:d8:e3:f8:
         18:27:65:27:10:e3:e6:a3:b6:19:48:6b:90:67:fc:67:df:39:
         c8:40:1e:9d:18:e9:94:59:54:a6:c4:ac:f8:8f:b0:6e:01:25:
         15:1d:c0:b7:0d:ce:85:0d:8c:a8:26:e8:49:0c:ef:b3:3f:d4:
         af:d9:72:82:6d:7a:6e:cc:ed:88:80:17:30:88:d8:78:d0:6a:
         aa:1e:ec:01:5d:81:69:f1:6a:c7:e9:54:c4:88:ef:b2:d0:f2:
         09:0d:6d:c6:4f:8e:95:80:09:f1:00:d3:02:b2:c3:bb:80:1d:
         3c:d2:2e:60:fc:97:dc:73:fc:75:63:fd:de:62:65:1e:a6:71:
         fd:45:76:8e:4a:3c:62:f4:62:82:5f:57:ad:c8:9c:8e:30:98:
         3f:c4:34:f8:c1:06:ed:67:39:53:79:80:79:06:25:24:ac:71:
         2b:c7:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:06 2024 by rpki-client on console-fra.rpki-client.org