Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File:                     EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier:          okwnHtSbTXAhWPKsDm80GbPvTwkXsNNZhNUxV6cLjTc=
Subject key identifier:   67:40:AF:91:06:CE:D9:02:D4:AC:54:9E:F0:B3:7B:F3:7B:65:E1:F0
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer:       /CN=122a541caf138341bd32798940de206052910341
Certificate serial:       019368C601382984C67CA6B5B81D2102200C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number:          09FB
Signing time:             Tue 26 Nov 2024 14:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:27 +0000
Files and hashes:         1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: rJA4BvKim76KBDnS1tpi/CcdcBrX4+7Es6M2UKM5bgk=)
                          2: eOut5mkMAgRD715y0mWjS193SHk.roa (hash: st6Wx7lb0R2+Fzpq9t3d6RE3e1uOLe6NA5Kp/nNT0lk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:01:38:29:84:c6:7c:a6:b5:b8:1d:21:02:20:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a541caf138341bd32798940de206052910341
        Validity
            Not Before: Nov 26 14:00:27 2024 GMT
            Not After : Nov 27 14:00:27 2024 GMT
        Subject: CN=6740af9106ced902d4ac549ef0b37bf37b65e1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:c9:0c:54:ee:51:ec:54:16:e9:3c:3b:db:
                    ea:16:d1:cc:97:f3:e9:99:f5:01:49:03:86:d4:08:
                    2b:25:c3:cc:c8:49:27:d4:ee:1a:fe:f9:34:8a:5d:
                    17:ba:28:38:bc:4d:69:a9:f4:86:0d:84:48:59:63:
                    7b:7d:f9:a4:1c:13:03:97:ee:ae:f5:61:fa:3e:f5:
                    7f:71:42:b7:de:21:e7:84:c3:03:88:a5:f2:bd:03:
                    83:15:89:4f:12:6b:34:2c:11:a7:7d:ee:77:b7:fe:
                    74:8c:25:76:cb:c7:97:55:c0:14:d1:d2:fa:6d:80:
                    7e:60:fc:e9:35:c0:fb:6b:59:16:f2:2f:1d:dc:39:
                    0f:ad:5b:29:5f:8a:03:70:b1:40:ca:87:26:41:fd:
                    bf:0b:fd:47:20:51:6d:a9:55:ac:8b:8d:34:be:04:
                    30:3e:df:f7:59:e2:5f:57:ad:84:d4:d1:bb:4c:fb:
                    c6:e2:92:16:50:5b:62:38:5b:e4:1b:8d:a8:a8:d8:
                    00:7c:e6:5a:18:f6:44:d3:bf:db:31:22:1d:6e:11:
                    8b:b3:4b:1f:ac:4b:4d:e3:7d:a5:8a:20:c6:0e:65:
                    6e:bd:26:d8:7d:f3:34:5a:9f:32:62:bd:f9:92:65:
                    9b:5d:7f:e9:dc:d4:b7:1c:ea:8e:28:b2:1b:bd:42:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:40:AF:91:06:CE:D9:02:D4:AC:54:9E:F0:B3:7B:F3:7B:65:E1:F0
            X509v3 Authority Key Identifier:
                keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:70:fd:51:fc:0f:cd:03:f5:4f:e6:29:c3:2d:8c:42:5a:d7:
         33:8a:5b:c2:3e:24:e6:4a:ae:a0:b2:47:e3:fd:72:02:f4:75:
         e1:55:0f:8e:1b:1d:02:8a:8f:49:eb:2e:c3:e9:7a:3c:88:02:
         4d:5f:16:0a:2d:64:24:a7:54:35:30:cd:4b:59:84:fe:75:75:
         d2:d6:dd:c4:13:1c:0d:24:2d:ce:be:61:53:ff:ef:27:3b:93:
         d0:f1:58:e1:46:55:ff:06:6e:e5:59:5b:63:00:58:eb:24:85:
         fe:8a:f7:b9:3c:52:12:77:93:07:99:80:8f:6c:ec:6e:fa:5c:
         59:e9:d9:94:c8:68:c5:ec:33:41:d9:b3:26:d7:e9:13:80:e9:
         07:18:cc:58:d6:9f:ea:1a:dc:ec:87:a4:6c:62:7c:22:e4:11:
         a8:d7:46:51:95:57:0c:b9:bb:bf:08:cf:ff:17:ee:34:ce:cb:
         80:84:f3:0a:37:b7:07:80:2a:8d:63:77:c6:90:52:f5:fb:be:
         51:09:13:b0:7c:63:41:66:f1:e5:f4:d4:c1:19:3a:5a:bf:c2:
         04:15:3e:67:08:d5:90:59:35:f3:ad:7d:3f:6d:43:0d:a4:40:
         ec:c2:2e:c1:ee:f6:da:21:06:df:66:a8:bb:5b:97:f3:25:da:
         5c:4f:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:38:03 2024 by rpki-client on console-ams.rpki-client.org