Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File:                     96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier:          ukRNLRmQ4ZQ8oxAsT+YKvusi4X5XnImaYsHCRPNQ98Y=
Subject key identifier:   F8:A7:98:94:52:5F:36:63:23:A8:51:4E:98:53:6F:B0:AB:EE:DA:CA
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer:       /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial:       0193580918015846367B9DE104D65DC534D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 08:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:11 +0000
Files and hashes:         1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: f+8K9KH9CrmfjU4J4lPjOShDvsiKExB1kAx603JRT1o=)
                          2: mJqvMzlkXHdHiRUEPuJl-RWjNuI.roa (hash: jNOltm4il7hK2Uf5JrBc9qyM66VFvetOvLZLqOyZkvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:18:01:58:46:36:7b:9d:e1:04:d6:5d:c5:34:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
        Validity
            Not Before: Nov 23 08:00:11 2024 GMT
            Not After : Nov 24 08:00:11 2024 GMT
        Subject: CN=f8a79894525f366323a8514e98536fb0abeedaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:e9:a8:28:be:3d:a9:7e:31:03:b8:d4:ba:
                    a1:de:94:7d:43:20:83:d0:ae:e7:91:f4:55:1c:39:
                    7e:94:1b:23:5c:3c:24:d0:97:fe:84:32:ba:78:99:
                    b8:4b:f7:c5:61:d4:7f:5d:60:5f:42:cb:ab:af:a6:
                    f1:87:9a:0d:37:21:1f:7d:17:a3:9b:de:2f:49:97:
                    cd:ab:19:2e:7d:07:00:27:17:ff:a9:4f:9e:78:e3:
                    30:6c:f2:54:31:07:9b:b0:fa:a9:84:0f:95:ae:0e:
                    89:bc:89:b7:e5:6e:f1:45:40:c6:93:65:bd:d6:37:
                    eb:de:93:36:09:52:f9:47:83:ad:11:b6:ef:5c:3b:
                    3d:43:24:3c:48:84:f4:0d:36:29:4b:3a:10:67:5c:
                    ba:ec:22:81:0e:41:6f:b9:2e:b3:21:65:ca:15:30:
                    42:21:c4:18:c7:d8:99:95:cd:cd:c9:a1:55:81:f7:
                    69:0b:27:26:77:65:f3:67:00:41:8a:fe:e5:a2:30:
                    44:0d:e4:2f:35:e2:f0:87:88:a1:03:4d:83:26:1c:
                    a5:3d:e2:35:d1:d7:34:c7:cf:ed:a0:81:68:f0:f9:
                    75:81:d7:a9:99:0d:63:e6:74:92:20:6c:b4:f8:92:
                    6f:89:f4:1d:61:79:4f:ba:ca:34:00:b1:f5:46:2e:
                    9d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:98:94:52:5F:36:63:23:A8:51:4E:98:53:6F:B0:AB:EE:DA:CA
            X509v3 Authority Key Identifier:
                keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:62:58:f1:f6:d0:09:7e:de:22:59:77:1b:e7:e4:9b:16:79:
         10:2d:9c:28:fc:60:98:30:6a:7e:26:e0:d2:6e:69:b6:8e:4f:
         c5:fc:9a:4b:b7:fa:87:80:11:3a:fd:3f:dc:58:17:6f:6f:73:
         fb:cd:1f:ac:cc:cd:c5:6b:31:03:d2:45:22:20:6b:13:6d:a4:
         f0:f2:d2:b1:5c:dd:af:95:e4:d3:26:f3:78:77:bf:45:d3:90:
         c8:65:c0:de:c5:dc:0f:fb:43:da:68:6a:2d:e8:8b:10:e7:e1:
         52:a8:1d:ae:f4:bc:82:ff:bb:a4:56:5c:df:43:93:b0:6e:e2:
         a1:8a:46:00:68:8c:39:21:19:9b:e1:6b:41:45:7c:65:6c:0d:
         d2:63:15:68:df:94:60:b3:1d:96:37:32:ea:b3:ec:20:95:33:
         fe:ea:c9:3a:8a:4b:d0:1d:d0:1c:8c:7e:0b:76:20:8c:dc:25:
         7d:54:da:b5:76:ba:4e:74:c4:ea:cb:48:34:7a:e8:a6:5f:4a:
         d2:ed:20:af:d2:eb:a4:f0:e7:18:32:b1:11:7f:e1:bf:e1:1c:
         29:7e:1d:f8:2b:7b:f4:d0:55:4e:47:a7:c6:e8:a3:58:d3:ad:
         6b:e7:2b:8e:0a:4c:17:a8:0d:e9:6d:09:0b:6d:1f:7b:43:84:
         7b:6e:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:48 2024 by rpki-client on console-ams.rpki-client.org