Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
File:                     FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json)
Hash identifier:          URlu1wWfIBzF1VpVFghhvVWhfztrXtUgFGuNubJzYNE=
Subject key identifier:   D4:3E:42:87:BD:12:77:7E:BD:87:C4:3D:BC:5E:22:19:1D:B1:FC:5F
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Certificate issuer:       /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial:       019365FEAE1B696969BE4A4F149A97812989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
Manifest number:          1376
Signing time:             Tue 26 Nov 2024 01:03:29 +0000
Manifest this update:     Tue 26 Nov 2024 01:03:29 +0000
Manifest next update:     Wed 27 Nov 2024 01:03:29 +0000
Files and hashes:         1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: QHthcMVXEtdI6Hk9cjBDUFVl2l7IOWvQZif1/3XRxBo=)
                          2: KWDvnpI_tcS7mN1MHdXjld16zko.roa (hash: eG7EeYqDpK94gTCM5HklNkSyeRgl1ffb/mRVSL9dZs8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fe:ae:1b:69:69:69:be:4a:4f:14:9a:97:81:29:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
        Validity
            Not Before: Nov 26 01:03:29 2024 GMT
            Not After : Nov 27 01:03:29 2024 GMT
        Subject: CN=d43e4287bd12777ebd87c43dbc5e22191db1fc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:76:ca:b9:73:6e:a3:52:67:da:48:ca:49:
                    7b:c0:92:ee:0f:3d:fe:89:05:52:5f:e3:64:21:68:
                    e8:28:50:85:b0:c2:a4:25:54:11:f9:b9:21:9f:f5:
                    82:73:40:eb:40:31:b0:d6:e4:8e:6b:c4:a9:72:f8:
                    a0:15:0c:8a:b8:a1:0d:8f:13:3b:0a:a6:a0:8d:95:
                    95:03:a7:3a:ac:77:c0:8e:34:06:be:55:c9:ab:bd:
                    f8:2f:b2:d0:d6:c1:cf:d6:1a:3c:90:92:05:13:60:
                    92:63:1f:15:08:45:3d:c5:9b:6a:3c:3a:ca:4b:7b:
                    da:5e:36:64:fa:6c:8b:ed:8b:4d:ed:1c:1e:89:e6:
                    df:1a:95:a7:ce:1b:98:4c:b8:cd:58:c6:90:d9:b4:
                    eb:7d:b2:69:8f:65:7c:c5:f1:ea:68:93:dc:22:e7:
                    5c:23:fd:06:78:6a:ca:5d:2e:f0:d9:95:42:62:11:
                    94:fa:aa:2f:13:60:51:aa:70:3f:8b:f7:0b:3d:01:
                    85:96:db:bd:40:a8:3e:0e:57:5c:e8:17:ba:df:b7:
                    d5:4f:57:10:d7:d9:35:3b:7e:f9:08:2a:ea:1b:0f:
                    2e:81:b8:7f:4a:0f:b3:02:b5:b0:e9:46:c1:e7:36:
                    30:72:ab:9e:71:7b:dc:0b:8d:0c:ab:37:2f:4a:51:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:42:87:BD:12:77:7E:BD:87:C4:3D:BC:5E:22:19:1D:B1:FC:5F
            X509v3 Authority Key Identifier:
                keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:49:1e:d0:f3:88:16:1c:97:d3:69:17:14:70:86:ce:7b:6a:
         e5:a5:53:04:3d:eb:d9:d2:29:6b:28:c5:6d:d4:83:c8:f5:01:
         d2:c9:49:0d:2c:f4:da:35:8a:c7:3b:ce:1a:3d:52:43:50:1d:
         69:fa:19:80:09:09:7f:45:c6:f9:70:94:13:6c:07:d2:1f:57:
         9d:fa:68:94:17:5b:da:7d:88:0d:ae:10:17:32:ce:e6:fd:ba:
         b5:a3:bf:cc:3e:d5:5f:17:08:43:60:d3:cd:d5:21:4c:2b:53:
         23:f0:61:74:38:bf:c9:4b:23:03:a1:29:35:f4:09:88:9c:b9:
         93:60:72:fb:f7:5e:9a:54:19:2b:c4:a7:5b:92:bf:ba:9e:71:
         d0:f6:16:a4:1d:28:5e:3b:63:28:11:f9:08:df:73:73:88:45:
         2a:b4:c8:fd:69:49:6c:6b:bb:d5:01:be:d4:f4:05:77:ad:40:
         55:f3:80:69:b5:29:08:49:4d:82:8c:28:8f:1a:a2:07:fe:76:
         75:81:e0:b3:a9:68:aa:3a:82:76:c2:ba:2e:75:cb:5f:b8:3a:
         37:47:ab:90:e9:5f:b0:f5:5f:d4:2f:fc:f6:e5:9a:87:a1:5a:
         b3:d1:34:f2:3b:f4:a5:05:db:6c:d2:25:6f:28:1c:73:7e:ce:
         aa:e3:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:16:55 2024 by rpki-client on console-fra.rpki-client.org