Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File:                     2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier:          EgXjj077nHUhyCMXKnXKVt0KFbxKqNaL8ZgnB2XZu9c=
Subject key identifier:   5F:97:F7:11:11:77:EE:BD:37:D6:B3:86:47:B3:EE:F5:E6:C5:05:62
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer:       /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial:       0193651FE9EE8E271457C31F0C0CF8585C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number:          0183
Signing time:             Mon 25 Nov 2024 21:00:10 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:10 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:10 +0000
Files and hashes:         1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: sgYrhlLuxM1a83tAMudS69sbQfe0HgGcUnTHixsuPNs=)
                          2: RgO-ockD6WgwYrTAoXEjptE-bYc.roa (hash: 7gLorKZY6Y1guOsTicTohcjrXyC2DZgLgDlRQgk5HuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:1f:e9:ee:8e:27:14:57:c3:1f:0c:0c:f8:58:5c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
        Validity
            Not Before: Nov 25 21:00:10 2024 GMT
            Not After : Nov 26 21:00:10 2024 GMT
        Subject: CN=5f97f7111177eebd37d6b38647b3eef5e6c50562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b2:c5:6f:61:f4:60:dd:01:1a:e5:ef:e0:4d:
                    57:ee:82:6e:10:3e:09:31:99:4c:c3:f3:c5:63:2c:
                    d4:5c:28:17:a7:93:c3:68:06:79:a7:50:a0:17:85:
                    fd:3d:50:8d:aa:06:bc:5c:cf:7e:c6:54:1c:e9:86:
                    4d:fa:ce:dc:61:ef:1a:ab:5c:8b:42:2c:24:17:04:
                    26:19:57:c5:c2:da:a4:25:cd:69:15:eb:ca:11:c6:
                    75:75:88:3c:92:e5:4c:01:12:87:af:e4:68:55:65:
                    b9:e3:ac:0b:42:bc:89:de:66:c8:35:d3:42:3c:85:
                    3e:de:fd:70:4e:ab:04:ed:13:38:0d:0a:48:ce:45:
                    ae:31:3b:ae:0d:0c:c4:c8:da:7e:9b:3f:73:f6:b2:
                    d2:73:52:1c:57:75:17:5e:56:c9:2a:de:f6:fb:ea:
                    17:13:97:94:81:3c:49:6a:c5:f2:0a:7a:9a:6e:f3:
                    84:d0:3c:35:de:4c:16:74:57:86:94:b6:8e:0a:b9:
                    93:86:56:d6:f9:c0:aa:c2:31:2b:69:c2:9b:af:dd:
                    14:db:56:f9:e2:5b:9b:4b:07:fd:46:6a:a2:8f:71:
                    da:7a:e3:2c:a3:a7:b8:06:7a:95:43:c5:06:d5:db:
                    69:2a:c5:f4:70:12:ca:78:1d:89:f8:32:79:87:3a:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:F7:11:11:77:EE:BD:37:D6:B3:86:47:B3:EE:F5:E6:C5:05:62
            X509v3 Authority Key Identifier:
                keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:6a:84:18:f2:76:20:b4:8e:6f:c5:98:3f:bc:4c:d0:ad:
         09:e9:51:5f:0c:bb:d6:26:03:af:38:3d:9c:d2:a2:a4:5d:b8:
         5c:81:48:a9:45:cd:2a:58:fb:0f:36:f6:05:5a:77:83:ee:01:
         f7:12:fb:29:55:ad:b9:a7:1a:68:5d:38:d0:40:26:29:22:0b:
         c6:24:de:4d:1f:f1:b8:58:a8:26:b8:23:46:03:c6:0a:21:6f:
         03:14:00:56:28:8f:ea:2e:96:08:18:c9:8e:8e:a8:a1:66:31:
         68:ed:fb:68:05:69:ff:d8:e3:5e:cd:01:7d:18:37:70:5c:bb:
         c9:85:91:87:de:f4:aa:5e:61:05:e5:cc:e3:6a:e3:16:9d:3f:
         d2:c7:cb:5b:e7:71:4d:03:40:fd:3e:f2:86:90:9a:23:ae:d3:
         7e:86:60:44:fd:e3:29:a2:aa:69:33:eb:0d:14:d3:f5:2a:5f:
         ac:69:fc:7b:5a:67:f8:a4:f8:ee:a0:31:29:31:88:ac:a3:3b:
         26:e7:10:93:ae:66:d7:d2:27:cd:f1:c4:ac:f3:56:1e:20:7d:
         fe:e4:36:76:ce:38:e0:23:28:72:5b:e8:27:8a:1c:d2:e5:36:
         56:91:22:1f:c7:ac:9c:eb:3c:86:e9:d7:d8:c3:82:4c:a4:36:
         db:92:1a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:16:44 2024 by rpki-client on console-fra.rpki-client.org