Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          D6QuECZnsrayUqJYYSYIxDbmOv2ZcybjapE6j6EJp9Q=
Subject key identifier:   CF:97:4A:52:52:85:E3:83:BF:55:A4:4F:1F:A7:3D:EC:4C:AA:8A:5A
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       0193674618FB24AD8CAE3E5C6BF92B0A9FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          0205
Signing time:             Tue 26 Nov 2024 07:01:07 +0000
Manifest this update:     Tue 26 Nov 2024 07:01:07 +0000
Manifest next update:     Wed 27 Nov 2024 07:01:07 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: INkz8fmrRGj5Bxwf3YrnA2kVhmKJeJc7EyHe1t63MYI=)
                          2: KOXHwZwXOkEl6XTikJWAKunPc5M.roa (hash: WaAT9W3gPWCb4VheN+iicDYoYhDP1RCHMn+Q9BQnEb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:46:18:fb:24:ad:8c:ae:3e:5c:6b:f9:2b:0a:9f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Nov 26 07:01:07 2024 GMT
            Not After : Nov 27 07:01:07 2024 GMT
        Subject: CN=cf974a525285e383bf55a44f1fa73dec4caa8a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:1a:5c:67:4f:f3:9c:99:13:60:b2:bd:56:
                    c2:6b:d7:f7:2a:11:8d:05:4a:5d:23:b5:7d:3c:7f:
                    e2:d0:c0:cf:30:00:ec:de:41:44:b0:c9:aa:24:a3:
                    ca:59:b8:97:2e:3c:7b:71:ea:2f:41:90:4e:98:96:
                    3f:5c:40:a0:c5:b0:55:53:1c:91:fd:41:17:2d:a3:
                    61:f0:73:73:d5:c0:f7:cb:77:fb:e5:3c:d7:f8:5c:
                    35:36:87:5c:52:4b:a2:94:3d:68:3b:75:ac:d4:8c:
                    b1:96:9c:9d:89:37:27:e4:87:dc:1c:95:bd:96:8d:
                    a0:2e:29:07:2e:55:42:45:04:87:bd:74:af:69:24:
                    b7:d8:39:55:62:62:30:9b:a3:74:bc:36:d5:e7:a9:
                    97:9d:27:69:0a:80:33:07:2a:85:99:e4:6a:45:c6:
                    1d:2f:3a:72:0b:10:00:b5:0c:f8:4c:bf:fa:e3:e3:
                    5f:8a:76:7d:13:3b:35:7e:3b:2a:42:50:08:90:bf:
                    e2:5e:46:c3:88:48:84:cb:6f:28:0b:3a:6b:4b:32:
                    12:d9:30:e7:9f:0f:87:3b:8f:26:00:be:ad:50:b1:
                    34:03:5c:1e:d0:7b:45:95:59:ec:8e:c9:2c:ab:24:
                    b1:3e:92:29:f9:72:ea:f6:f4:0e:9f:f9:f3:69:ac:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:97:4A:52:52:85:E3:83:BF:55:A4:4F:1F:A7:3D:EC:4C:AA:8A:5A
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:fc:39:e6:94:de:af:12:40:3b:07:96:d1:9e:75:5a:52:
         16:c0:6d:7e:32:e3:1e:17:04:10:7e:d4:7c:07:09:31:88:1e:
         ee:87:9a:5d:d2:db:8f:8a:81:eb:1d:16:a1:45:32:97:5b:bf:
         7d:78:0b:fd:04:16:8a:55:1e:21:9e:88:cd:2f:55:f4:17:a9:
         45:3f:d9:de:2d:57:cc:fc:eb:2e:76:68:48:13:64:7b:60:94:
         70:a8:16:e7:e6:af:3f:c4:6b:08:53:3b:b8:43:3c:66:d2:63:
         7b:bb:a0:45:43:57:a7:bf:b9:c5:27:2a:ee:01:fe:2b:b8:83:
         b6:f5:07:e9:7b:62:72:6e:8f:a8:8a:10:56:6b:b5:13:42:a7:
         dd:e8:48:48:8b:fc:fa:b8:74:e8:93:fd:dd:ea:31:9a:81:5f:
         79:50:a3:3a:d0:91:bc:a7:38:15:9b:07:28:7e:13:fb:5c:a1:
         35:fa:1e:60:72:86:be:e9:6d:48:f3:dc:0a:69:60:16:0e:c2:
         59:05:b5:49:b5:5c:4c:60:bc:c3:15:64:58:f4:a2:6f:c4:e2:
         5a:2b:ae:52:3b:06:94:83:68:41:14:d2:0b:47:40:67:f1:a7:
         90:af:e2:2d:e2:b3:a7:9c:e8:a1:67:f8:1e:7c:79:1f:eb:48:
         d3:c8:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:18:16 2024 by rpki-client on console-ams.rpki-client.org