Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File:                     aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier:          sSj16YwojR/sBliYzBVCh8j53ZQf8x4NbFR7/lMR4G8=
Subject key identifier:   2B:90:E3:38:F6:C9:B6:B1:BA:FE:17:77:CE:FC:5E:CC:98:8C:82:43
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer:       /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial:       0193568A046EDBAC869C3366F30EC238D5AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:01:45 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:45 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:45 +0000
Files and hashes:         1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: D8i1RwKbIUGpgeGHVJ4/373dvT90P3PtqU1a0rt1FSs=)
                          2: qi0NTVOqgGLRbOc7n5kGkYBKFL4.roa (hash: uxTSoR8SvD/jzcobrlGp9hBPluoNXWFx2q89b0lkVg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:04:6e:db:ac:86:9c:33:66:f3:0e:c2:38:d5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
        Validity
            Not Before: Nov 23 01:01:45 2024 GMT
            Not After : Nov 24 01:01:45 2024 GMT
        Subject: CN=2b90e338f6c9b6b1bafe1777cefc5ecc988c8243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:56:06:e6:ec:40:d8:9b:f0:6f:e1:eb:c7:
                    6e:33:1c:0c:24:25:77:22:39:36:df:0c:9a:39:93:
                    48:b4:b6:cf:6c:00:32:28:06:94:41:74:87:7c:53:
                    a9:f2:d0:d9:52:8c:0d:03:0c:c6:d3:8d:fd:94:39:
                    e0:b1:9f:21:7b:4f:04:0a:2b:39:a4:63:63:1b:a9:
                    22:be:f5:ae:02:79:54:4a:39:77:09:44:1f:80:21:
                    a9:27:6f:c0:22:9b:61:00:f6:96:78:ad:d0:fc:e4:
                    10:40:f4:85:68:b6:ca:2d:60:95:92:bd:f1:03:6c:
                    8d:c6:55:e6:cd:b0:c1:47:c6:89:b1:b0:41:d4:cc:
                    98:a6:c5:a0:83:2c:bf:78:c7:06:8e:80:dd:0b:1e:
                    98:0d:e0:6a:a6:36:5f:48:d5:42:b5:b2:71:77:e9:
                    ad:a2:0f:f9:e1:70:f6:6f:52:d7:33:ec:a6:b2:1f:
                    8b:64:1a:0e:3a:22:ee:48:e1:f7:b2:f5:d8:6d:e0:
                    2c:02:9c:4f:3e:00:4d:f9:64:a7:30:2e:80:42:f6:
                    86:e9:be:41:b3:47:e7:29:a3:94:5b:8a:40:f5:b7:
                    99:2e:76:d7:d6:ab:a9:31:87:ca:70:69:89:2e:88:
                    55:a5:45:30:5c:ac:d5:85:3f:3e:38:e3:db:49:88:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:E3:38:F6:C9:B6:B1:BA:FE:17:77:CE:FC:5E:CC:98:8C:82:43
            X509v3 Authority Key Identifier:
                keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:37:53:0c:96:38:c1:f0:bd:c9:04:87:df:96:86:6b:d3:e5:
         74:28:14:a6:08:f5:05:c5:7e:58:71:9e:49:0a:07:b3:ca:85:
         cf:91:59:de:44:e9:da:05:bb:7d:cd:28:db:6f:3b:26:d4:f8:
         45:8c:e8:5c:f3:d2:c5:43:09:5e:07:b8:e0:07:6c:dd:04:0e:
         3f:c3:e4:9b:4b:18:95:9a:36:f2:81:95:19:41:e5:8c:27:86:
         e6:59:45:da:95:82:1e:b2:88:79:a0:dc:dd:8b:12:8f:fe:ec:
         30:b0:1b:fb:73:70:61:af:2e:dc:c4:2f:32:28:d1:cf:80:e2:
         ad:bc:69:29:c1:2e:33:93:41:bf:ec:e7:6f:80:08:7b:cb:8f:
         98:93:e6:40:49:4e:bc:8d:4e:46:2b:16:a5:17:07:1c:39:ad:
         b4:d2:f0:d7:4c:2e:7b:ad:51:cb:c5:2b:a3:c0:50:e0:96:ca:
         b8:b4:9b:cd:ca:99:74:47:66:71:e2:c2:cd:35:c0:35:96:9c:
         16:34:7a:b2:65:98:c4:de:8d:17:e2:dd:cb:9b:3f:cc:15:ff:
         36:b6:4f:ca:1c:0f:06:c0:30:0d:cd:62:36:ce:39:7d:0c:03:
         7f:aa:6e:a4:03:c8:b5:26:35:0b:b9:bb:6b:40:d1:ab:2c:b0:
         a1:18:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:03 2024 by rpki-client on console-ams.rpki-client.org