Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          yOdXZsn4euQBkrijkncfC0dbti6SutJzz0/vxUvti74=
Subject key identifier:   4C:F5:C0:CE:80:A7:8B:92:CB:15:1E:8A:A9:85:54:4D:5F:87:38:98
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       0193549B5F92C90E64FD21976C2C5E821CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:01:28 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:28 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:28 +0000
Files and hashes:         1: DBXCygkHPRngmQrhrQMRjXF9iPA.roa (hash: KLCLS6xmtT3mu4bsMGL1AXU7JSxXLvGwAMto+f2WpqA=)
                          2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: hQbRPvms+vZ1sbS/LVzGqX4k4kgacT97FVEh4cb1lwY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:5f:92:c9:0e:64:fd:21:97:6c:2c:5e:82:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: Nov 22 16:01:28 2024 GMT
            Not After : Nov 23 16:01:28 2024 GMT
        Subject: CN=4cf5c0ce80a78b92cb151e8aa985544d5f873898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:c8:eb:2d:49:5d:4c:cd:7c:c4:e2:42:68:
                    0a:fd:8f:cc:74:2f:c9:da:f0:fb:8f:56:f9:70:bf:
                    b4:ec:d5:ab:4e:dd:07:62:33:13:8f:8c:d1:a8:85:
                    28:45:2d:4f:62:2f:6c:71:3d:bf:3e:c5:4a:b1:7c:
                    d5:a7:34:79:e0:8f:b0:5e:a1:4c:e8:8d:bd:34:33:
                    e1:c6:20:55:83:2a:41:50:76:cc:f6:32:d7:50:b0:
                    3f:d0:e6:f8:d4:33:17:29:bf:88:19:c1:8f:cd:b2:
                    98:3d:36:b6:01:85:7d:fb:46:b5:d9:27:be:bb:cb:
                    7d:d4:8c:ba:22:73:7c:da:98:43:d7:df:d0:c3:4a:
                    65:a8:d4:01:a5:11:64:9d:dc:14:56:54:e8:00:70:
                    95:aa:8b:da:c6:cb:11:cf:d7:00:09:cf:22:be:87:
                    80:f6:f1:14:e2:a0:05:ad:ff:ac:d8:62:f6:46:f0:
                    03:40:43:a6:b8:74:4b:32:17:e5:f1:1a:57:7e:60:
                    2a:c2:30:3a:c5:75:a5:e5:75:8f:e5:c7:0e:97:b7:
                    9b:15:e7:bd:76:04:2e:69:34:d5:e8:86:94:13:1e:
                    32:5c:e2:92:be:4f:fb:a9:9f:bd:db:1d:78:75:67:
                    7a:42:cb:61:21:6a:f5:4c:d6:70:e9:a3:eb:9e:62:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F5:C0:CE:80:A7:8B:92:CB:15:1E:8A:A9:85:54:4D:5F:87:38:98
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0e:a7:03:1a:21:4a:75:14:03:8e:eb:ba:ca:3d:1f:fa:c2:
         71:e4:ab:36:b5:11:01:68:f5:eb:62:d0:4c:c9:68:02:32:7a:
         dc:ba:99:07:eb:90:31:9c:13:3f:aa:25:dc:3a:6e:d9:fe:92:
         ba:9b:d9:f9:53:6e:67:f1:28:d2:49:12:61:39:83:4b:5b:d9:
         49:54:d9:b3:46:6e:72:96:39:42:bb:fb:27:7d:65:32:ee:ff:
         fa:b1:c8:79:fa:eb:00:71:22:94:f0:6f:67:12:17:22:26:06:
         f6:69:3e:8e:91:6e:42:3c:54:5a:2a:28:64:81:0d:92:60:00:
         93:de:66:a1:e6:8f:60:00:98:86:ad:c5:bd:16:b5:7e:a1:78:
         f7:d9:58:94:10:0c:0c:61:a0:8f:21:57:32:28:41:a2:3b:b3:
         57:8a:7f:cb:0a:0f:e5:2b:43:3e:3b:fa:cb:67:8b:34:dc:a1:
         35:88:9d:1a:9f:d5:9b:ba:f5:38:26:b6:81:84:fe:5e:db:be:
         eb:71:62:cf:c4:01:ca:d8:a9:7f:f7:cd:44:b5:9e:ec:4b:e8:
         22:65:44:35:ed:be:1e:7a:a2:52:76:8f:a9:2d:21:78:62:f5:
         cb:db:fd:1d:43:85:7d:f2:9c:ec:e7:c7:3f:a2:c3:9f:72:6f:
         e8:c7:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:34 2024 by rpki-client on console-fra.rpki-client.org