Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File:                     dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier:          KqZbs3WKjosrFeTsOQSxyyvkVYLLZmZ5T6Cl7jP2xsI=
Subject key identifier:   9E:00:90:27:B6:A6:22:F7:42:EB:2C:7C:2D:F0:2E:EE:AE:72:81:AA
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer:       /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial:       019356BFBEBE5A7A85C015077092F8B5183F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number:          8B
Signing time:             Sat 23 Nov 2024 02:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:26 +0000
Files and hashes:         1: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: 4wmEZ3pta+Y47oMXE1OC49DMarhbKDRE06nMd1aRH4c=)
                          2: hd-Tq01vtZiDxdHPRnORrt_UbMI.roa (hash: 88e4dCrNQgxhjSfeAmKd35uZKWHkd6G/rRRExqAL29I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:be:be:5a:7a:85:c0:15:07:70:92:f8:b5:18:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
        Validity
            Not Before: Nov 23 02:00:26 2024 GMT
            Not After : Nov 24 02:00:26 2024 GMT
        Subject: CN=9e009027b6a622f742eb2c7c2df02eeeae7281aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:ec:9d:25:bb:ea:f6:90:26:ce:1f:50:03:
                    40:73:ca:24:64:0a:3e:08:8c:e2:a5:bd:8f:3d:8f:
                    27:ec:87:5c:14:79:b3:fd:bb:87:7c:87:99:c7:88:
                    bf:d0:99:fd:29:7c:ef:44:d8:01:f4:d1:2a:b4:93:
                    74:5c:59:8c:54:1d:fe:e1:79:5f:7c:40:ac:d0:6f:
                    b5:1e:90:40:ea:f5:f8:a4:8c:5a:e2:2d:fd:84:ea:
                    f5:e2:06:1a:6a:21:57:d0:e8:1a:ba:9f:05:bb:ac:
                    e5:ee:f5:ea:c8:16:29:c1:7f:6a:75:11:61:af:1e:
                    57:dd:e7:4f:ff:67:16:26:e7:93:a8:42:05:15:2a:
                    63:62:b4:34:07:3c:c6:a8:46:6b:44:92:65:78:27:
                    ba:6b:84:a8:e6:81:a5:b1:7b:4a:be:34:1d:28:41:
                    10:8f:5a:cf:c1:93:ea:28:3e:83:d2:f2:0d:f1:2f:
                    cc:b0:b1:82:8e:da:4e:6d:08:38:de:d4:a1:7c:cb:
                    9a:23:44:97:d9:38:36:b8:52:72:26:4c:80:da:ab:
                    03:0d:75:09:51:70:b4:2c:b4:3b:15:1b:1a:ae:d7:
                    bc:8a:ad:3c:04:88:71:92:61:2c:0d:f2:92:3c:9d:
                    90:0d:6f:32:f6:21:78:3c:ec:ae:e8:62:d0:07:9e:
                    85:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:00:90:27:B6:A6:22:F7:42:EB:2C:7C:2D:F0:2E:EE:AE:72:81:AA
            X509v3 Authority Key Identifier:
                keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:25:13:cd:ec:2f:dc:1c:33:e3:03:e1:56:7c:fa:0e:0f:1d:
         7e:43:3d:5b:44:eb:ea:63:81:5a:a0:24:73:d2:f3:2c:d4:29:
         97:2c:6b:cd:a4:93:f6:ba:a5:98:94:07:9b:4a:9c:c0:d7:0e:
         85:9d:ec:f2:fb:28:0c:b3:46:69:8b:d6:4f:d1:05:ec:f4:a9:
         f5:1d:62:7e:89:43:6a:62:85:dd:e3:54:db:9c:11:a0:8a:e7:
         99:88:6c:33:ee:7f:d2:51:a4:ce:e5:8e:5f:e0:4e:11:7e:b6:
         1d:0a:37:ac:59:a4:b2:55:b3:93:23:2b:58:25:9e:84:1c:d3:
         7e:d8:9e:be:8f:f1:18:a9:3c:b9:54:56:f0:9e:43:62:ec:57:
         fd:dc:6b:70:a3:76:c7:97:b6:55:8e:cb:5b:72:55:0e:7f:af:
         26:50:43:0a:3d:6b:54:4a:33:b4:e1:1a:1a:09:9b:59:ce:a2:
         e7:9b:c5:4b:41:73:b4:44:f5:2a:be:a4:5c:fb:d6:14:99:24:
         0d:5a:3d:1f:bb:fd:d3:9e:58:8c:40:20:b8:93:e4:b2:93:29:
         00:1a:24:8c:d9:09:cc:4f:bc:55:04:56:db:ec:b0:5b:be:c3:
         71:fe:6c:82:c0:ec:9c:6f:f4:ea:e1:2f:3c:c7:3d:1a:37:4d:
         2a:24:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:42 2024 by rpki-client on console-fra.rpki-client.org