Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File:                     D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier:          DGFmKU18bYppTQSbOcfF+2AOT4C07eY8SqF2ZXY4QPU=
Subject key identifier:   AC:B8:2F:C8:DC:EF:C5:7B:50:9D:7B:F5:7D:5F:54:3B:2E:54:08:6F
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer:       /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial:       019406B431A4073FEFDEAEE0823CFF1F1C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number:          02E4
Signing time:             Fri 27 Dec 2024 06:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:59 +0000
Files and hashes:         1: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: 9xBxZBrG2hBBKaduHtlXRItifBfH3tUqnR/CvWenipo=)
                          2: jhw7BmvJ9pdPWLtAi1mTZAViLrE.roa (hash: z6+a8tFTEAQ4+Ydh1AtV64RM/5NN2HVyeSGMoqbSjFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:31:a4:07:3f:ef:de:ae:e0:82:3c:ff:1f:1c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
        Validity
            Not Before: Dec 27 06:00:59 2024 GMT
            Not After : Dec 28 06:00:59 2024 GMT
        Subject: CN=acb82fc8dcefc57b509d7bf57d5f543b2e54086f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:42:ab:29:cf:2a:bb:29:c9:c7:c8:2a:87:
                    e4:75:81:37:09:6f:c1:de:34:07:f8:0f:77:63:8a:
                    38:64:49:64:ec:a9:c8:0b:7b:e6:c9:78:71:be:b9:
                    b3:dd:e0:ae:e2:cd:b2:59:ac:c8:2e:ce:a9:e0:98:
                    7c:f4:fa:9f:07:af:dc:17:d9:75:98:d4:f1:58:b3:
                    7a:af:4f:82:4c:f9:55:e4:8a:ac:e9:35:2a:b1:3c:
                    e7:ab:6f:25:93:87:98:5f:42:8d:e3:5f:c1:72:97:
                    f3:8d:a7:1f:39:bc:c1:eb:80:09:90:88:10:ce:bd:
                    ff:65:6d:32:5e:62:ef:8a:5c:ab:b6:d9:95:6f:6a:
                    8d:75:b8:f3:46:bd:57:e8:56:0d:66:1c:42:16:70:
                    f2:f7:0f:7d:0a:e7:d9:bb:df:1f:a7:21:68:48:b9:
                    58:8d:3b:4b:03:b1:0f:8f:f7:d2:20:eb:90:d0:41:
                    d9:2f:fc:bd:32:16:3a:bb:41:42:f1:a9:86:3e:42:
                    83:29:de:8b:11:df:93:ad:1b:ca:b2:f1:8b:a1:73:
                    6b:6d:26:3b:fc:61:8e:96:06:c2:ea:e2:b7:eb:27:
                    fb:5f:1a:0f:fe:24:ca:61:75:ed:03:52:ed:f8:ca:
                    c3:cf:6a:48:bd:63:46:31:c0:64:95:ff:29:f2:47:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:2F:C8:DC:EF:C5:7B:50:9D:7B:F5:7D:5F:54:3B:2E:54:08:6F
            X509v3 Authority Key Identifier:
                keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:10:0d:2b:4d:90:b7:cd:4f:12:74:b0:88:8c:ff:b1:be:a7:
         f7:97:df:db:0f:54:5d:08:68:b2:da:18:ae:75:9d:10:bb:71:
         2c:a7:ef:77:aa:81:e2:33:19:4c:31:2d:b5:96:ac:88:cb:8d:
         ac:3e:37:f2:7f:50:0a:01:a4:a7:e3:37:e1:7b:c2:e8:d2:5c:
         bd:dd:58:a4:0b:2f:02:74:95:a1:84:81:72:cf:66:5f:0b:e7:
         58:81:65:a8:be:ec:ed:b6:94:2a:c5:44:b9:2d:15:b0:7b:3d:
         30:c2:b9:73:76:be:85:90:9c:a9:a4:bd:b4:15:d7:ba:58:4a:
         c5:fb:0b:70:bf:d7:a3:fc:99:10:5e:b2:d5:f9:ca:53:55:1b:
         ca:3a:e9:b5:f9:59:cc:6b:d3:4e:b9:16:88:53:5a:96:7f:04:
         ce:b3:c7:62:ee:dd:45:c9:19:a6:f6:87:9b:6c:d6:0b:f4:bd:
         b1:a2:67:b3:e7:eb:af:5b:92:d9:79:c1:0b:19:90:8e:70:e3:
         3d:0c:94:45:66:a8:7b:13:3b:cd:25:05:f3:06:15:32:32:90:
         67:04:25:90:f0:76:4b:73:e8:02:76:61:92:b2:45:f0:b9:b4:
         dd:b7:f4:55:04:68:ba:8e:de:c5:6d:ee:f2:54:cf:c1:0d:8d:
         20:e4:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:21 2024 by rpki-client on console-fra.rpki-client.org