Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File:                     6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier:          HUgzgiWatOyxGsvZ+EQ1fm2bYiw8zn77YiGMlalHB64=
Subject key identifier:   D3:5B:6D:75:A7:E2:15:25:51:E1:B2:DA:0E:22:B7:95:7A:DF:42:66
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer:       /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial:       019367EB962B20AE2A867C80358284105BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number:          1319
Signing time:             Tue 26 Nov 2024 10:01:52 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:52 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:52 +0000
Files and hashes:         1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: LiJAY7HSQ9V0b18ez2fDLc5JH2r4E3OhbRsIX7UYQFs=)
                          2: RGuyH-Acp7bD_N8WRz1KpsAWts0.roa (hash: xySVF9tGbUrbcKd2WSzNpT/H6NQqoOLOFRnOfoc48CA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:96:2b:20:ae:2a:86:7c:80:35:82:84:10:5b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
        Validity
            Not Before: Nov 26 10:01:52 2024 GMT
            Not After : Nov 27 10:01:52 2024 GMT
        Subject: CN=d35b6d75a7e2152551e1b2da0e22b7957adf4266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:76:57:b6:55:a2:cc:e0:ef:79:a8:97:21:33:
                    b8:2b:a2:8d:c4:97:c6:00:1b:af:ba:10:d3:df:3c:
                    7a:e4:63:70:a1:ec:98:f3:1c:2f:4e:d5:a3:97:64:
                    99:0e:2f:89:32:08:a4:26:d2:54:56:df:77:a3:bc:
                    36:59:63:70:34:a0:73:d0:ac:fa:5b:66:c6:f6:a1:
                    0d:4e:4c:51:9a:50:ee:9c:ac:9f:7e:8f:98:2b:a3:
                    a7:b5:75:4b:b7:f6:94:14:33:9d:e7:54:2c:f1:b7:
                    7d:2e:12:a8:41:0f:6d:e2:68:d7:f7:e0:3f:66:1c:
                    b3:c5:4b:08:6a:75:a4:40:a0:6f:f9:e1:64:05:a2:
                    f9:33:74:e5:82:66:37:19:30:65:08:1c:00:8c:4e:
                    81:6d:87:71:90:8b:43:3b:2b:1f:bb:94:b3:a0:eb:
                    36:01:de:14:f3:2c:85:26:7f:27:ea:76:fe:bf:29:
                    5d:8b:c7:66:be:8f:d6:d6:c0:24:cd:2d:f6:f6:4e:
                    59:e5:3c:02:7e:20:a8:40:fd:41:6e:4f:1f:bf:e6:
                    59:2d:28:bc:e8:d0:91:01:14:ef:8d:ea:69:b7:43:
                    e3:17:cd:99:ce:24:19:a0:80:87:ed:5f:f6:b9:e1:
                    bc:89:fa:dc:11:d9:40:9e:f3:ea:12:99:cc:c3:4b:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5B:6D:75:A7:E2:15:25:51:E1:B2:DA:0E:22:B7:95:7A:DF:42:66
            X509v3 Authority Key Identifier:
                keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:67:e8:e4:cf:e7:8c:3b:10:5a:13:e4:2a:47:c9:15:66:
         1f:a3:19:c9:ef:28:52:e2:91:35:ed:a6:7f:f4:89:0c:07:2a:
         da:b6:78:87:19:58:84:62:4f:b7:12:1a:2c:a7:5c:20:9d:00:
         cd:05:64:af:df:5a:f3:a9:61:6d:45:c2:69:f9:3d:3d:47:c0:
         36:4c:19:17:5f:da:66:c3:30:39:83:32:50:31:a8:eb:16:ad:
         16:70:61:9f:57:33:af:ee:2b:1b:f2:b9:0e:4e:fc:7e:15:27:
         39:3c:8e:57:3f:da:a5:75:1f:15:fe:3b:f5:ab:85:cf:6a:57:
         d0:22:14:e4:11:cd:71:d3:de:80:07:55:66:3c:04:63:cf:a8:
         e2:a8:70:03:52:84:5d:8f:b8:cd:58:a6:58:8e:98:ca:21:4e:
         3b:87:91:1f:fc:db:3e:1d:fa:71:22:5f:45:64:c4:78:37:07:
         7d:2d:38:51:91:07:12:e8:21:0e:a0:9b:35:df:c4:61:d5:88:
         b8:d0:1c:81:76:cc:34:a9:e8:14:40:41:b7:ec:78:73:77:c6:
         98:38:0b:98:8b:23:b5:df:f4:5f:10:cc:5d:bb:a2:80:ce:b1:
         de:aa:01:89:44:14:68:5c:dd:fe:18:8c:f0:49:c2:19:ba:65:
         4a:53:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:57:18 2024 by rpki-client on console-ams.rpki-client.org