Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File:                     hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier:          bdEaNB5W+SzthCf3HUPAIvaRsHVLCxpmo60hhz+xE1o=
Subject key identifier:   0C:84:F8:A0:00:8F:42:F0:22:22:08:D6:4D:C7:45:FB:85:D8:1D:38
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer:       /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial:       0193553F939A1A6F33577E93A01BAF450B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number:          1304
Signing time:             Fri 22 Nov 2024 19:00:50 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:50 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:50 +0000
Files and hashes:         1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: St48IVvfuui8fjhLJumQJxuTMCjfgCR+hpI1fExQzPY=)
                          2: sbnQW6oPMIiNUyJZFdoKMg3xWF0.roa (hash: 3D0H4S/qpmPPSHQyJ9ValO9Qxl6raepFEzTUldwega8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:93:9a:1a:6f:33:57:7e:93:a0:1b:af:45:0b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
        Validity
            Not Before: Nov 22 19:00:50 2024 GMT
            Not After : Nov 23 19:00:50 2024 GMT
        Subject: CN=0c84f8a0008f42f0222208d64dc745fb85d81d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:cc:ba:bd:82:4f:4c:12:99:fd:6c:71:c8:
                    ca:db:c4:b1:1b:71:96:68:01:a7:29:94:75:b1:bd:
                    84:4d:8c:fd:57:45:9a:14:f1:de:31:47:e6:64:87:
                    9d:96:95:da:4e:bb:d1:7b:b3:35:43:2f:5e:77:3f:
                    6e:da:f4:5e:fc:83:75:b6:07:5a:79:d3:da:b8:e3:
                    3c:a5:90:5e:54:7c:63:b7:94:17:86:be:27:da:ca:
                    62:00:36:b7:09:42:98:c6:5d:13:69:d6:20:f8:e6:
                    9e:2d:f1:47:21:5a:4e:78:ee:6e:ba:f6:a4:34:82:
                    ca:54:13:11:66:a1:c5:99:ca:bb:77:a8:86:87:59:
                    2d:d4:85:06:81:d8:55:a3:82:8e:0b:c1:9c:a0:1e:
                    b3:59:0b:9c:e0:ff:7e:6c:bd:45:b2:a7:8c:28:e2:
                    2e:2a:38:0f:b5:11:a4:b7:b5:65:88:02:aa:b0:a7:
                    0f:2b:e1:51:18:ba:0f:81:d0:74:86:72:b8:a2:7f:
                    2c:2e:16:8d:b9:d3:8e:f9:dd:f0:bb:16:6f:13:93:
                    cd:33:e7:8b:dc:08:10:17:83:3d:08:bb:62:56:17:
                    87:ac:bc:83:35:84:1c:d2:11:20:fa:e0:23:00:39:
                    f9:4a:dd:77:6a:23:14:92:ab:47:c5:f2:b8:c2:a9:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:F8:A0:00:8F:42:F0:22:22:08:D6:4D:C7:45:FB:85:D8:1D:38
            X509v3 Authority Key Identifier:
                keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:1d:98:32:07:bc:c5:96:7b:0f:a3:63:1f:cb:b8:74:97:
         4f:0d:73:15:38:ae:72:c1:59:a3:25:bd:1a:a7:f4:0f:2c:2f:
         c1:37:b0:dd:b6:c5:a2:71:2f:66:43:f1:7a:5a:7b:3d:39:2c:
         f6:31:36:13:fd:22:a7:61:b0:0c:68:1e:0a:fc:8c:b4:89:ad:
         04:85:7f:0a:fa:c2:77:8e:54:e6:f3:39:b8:e1:66:0b:c6:da:
         ee:bb:86:e8:43:e9:29:7b:a9:27:96:33:98:67:d3:eb:7d:0b:
         95:ec:a1:cb:7e:3e:dc:97:c6:ea:ff:73:90:0b:70:ab:dd:f5:
         52:2d:ad:e5:76:7e:0f:c6:21:bf:56:47:0c:bc:93:cf:dd:5f:
         f4:35:c7:4e:a9:f7:b8:72:8d:e4:3c:04:71:fe:30:39:d9:7c:
         97:f2:26:58:9a:5b:2e:d1:41:92:cc:4c:22:61:14:68:3f:8a:
         01:06:23:6b:10:3e:6b:00:fc:a0:ff:b0:6c:d8:8e:68:f3:0a:
         09:70:be:df:73:f7:f0:7e:0a:fe:9c:86:0d:59:9b:ff:e6:78:
         4f:5d:5f:67:66:47:82:0e:71:33:b5:d4:b3:19:7f:9e:9f:16:
         f8:df:5a:0d:84:53:85:57:f5:82:cc:cd:e4:39:c8:d9:ed:06:
         11:54:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:15 2024 by rpki-client on console-fra.rpki-client.org