Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File:                     IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier:          +zrJ3IgCxA9NaqjuXt+Kp8/uVUSFCMzy3vbLCLtUo6k=
Subject key identifier:   D6:5A:E0:CB:FA:17:A0:63:61:73:5B:B8:A4:14:03:88:C1:6B:76:78
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer:       /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial:       019356BF9D5DDB5CB04807BBF9EB3581E28E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number:          0691
Signing time:             Sat 23 Nov 2024 02:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:18 +0000
Files and hashes:         1: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: 4N/gcAdPA5QsFXGuaa3GEpTTjMFj5LgQls6F0AXrVT0=)
                          2: hGb-zFBMKxPtANKlmyVC0WrH_ic.roa (hash: /cX/aa8EcOGm/VPVvkfI95TOnDLkiaLn3vg+gZRdxUQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:9d:5d:db:5c:b0:48:07:bb:f9:eb:35:81:e2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
        Validity
            Not Before: Nov 23 02:00:18 2024 GMT
            Not After : Nov 24 02:00:18 2024 GMT
        Subject: CN=d65ae0cbfa17a06361735bb8a4140388c16b7678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:b7:61:ec:4c:17:ab:46:2f:a6:bd:e6:bd:
                    24:bb:5d:0f:1f:c5:67:ed:ad:f4:a5:61:71:48:c5:
                    d1:31:da:dd:78:04:24:28:ee:41:96:3b:fe:95:d7:
                    b8:dc:3c:56:5f:e2:b8:0e:3e:68:be:1e:dc:8e:a1:
                    79:4e:01:d4:ca:c5:a5:bf:e6:d4:7d:4e:23:a6:36:
                    e7:95:13:1a:86:38:a7:96:0f:6b:7b:1e:96:bd:03:
                    8e:57:dd:d7:92:c3:74:5f:f4:18:67:7f:a7:6f:6d:
                    3e:08:6f:a2:33:2e:d0:7b:cb:23:67:c6:0c:0d:c7:
                    27:d7:45:28:c0:0c:63:a3:89:bb:7d:99:54:81:1b:
                    07:1e:4a:38:b5:3a:c9:a7:f8:50:c6:f3:e2:93:4d:
                    d6:c4:9c:23:8e:4b:41:34:12:50:56:c8:4b:f8:03:
                    b4:4e:e3:33:d9:4a:f5:3e:00:23:f4:af:0b:73:04:
                    56:13:6c:31:42:57:f6:55:20:fc:1c:b5:f6:42:31:
                    12:bc:0f:94:18:08:61:89:c8:f0:a4:9a:f0:46:9a:
                    09:bb:63:83:d3:00:90:fa:29:3e:22:cf:a2:33:90:
                    9f:91:35:7b:2c:84:01:d7:b8:73:e3:71:74:a9:b1:
                    8e:96:82:9c:2e:d8:93:db:23:98:df:8f:e7:ea:2d:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:E0:CB:FA:17:A0:63:61:73:5B:B8:A4:14:03:88:C1:6B:76:78
            X509v3 Authority Key Identifier:
                keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:18:8a:f9:92:f7:99:26:be:84:8b:fe:a6:f4:53:d4:e1:a5:
         ea:85:38:8a:fc:7e:55:d2:f3:24:d7:06:ca:c1:c8:92:55:a0:
         74:99:06:f5:8f:cc:dd:5f:79:9c:a7:3f:77:41:8e:15:c4:64:
         53:72:c0:30:03:03:1d:2e:17:ad:bf:a8:eb:6a:77:54:b8:6d:
         fe:de:06:16:27:99:d0:2f:0e:84:ac:ef:10:cd:d1:88:bf:f9:
         94:e4:e6:34:80:65:4f:56:f2:e4:7c:fa:b9:a2:f4:b6:42:56:
         7b:d6:cf:87:28:6f:1c:f3:f5:ab:8c:da:4d:24:55:08:b5:b9:
         50:3c:bf:42:62:36:a0:4d:5e:ac:c9:dc:4b:30:b5:23:d6:35:
         fd:bc:b2:b4:2a:06:68:f8:4a:69:c0:26:30:73:18:d6:58:d3:
         9b:26:4d:b5:37:40:bb:f3:1f:66:ba:71:ad:3c:e7:8b:6c:42:
         73:16:da:0d:0e:27:8c:16:8f:1c:15:e6:d9:e0:da:9a:53:83:
         ae:a1:4d:f2:42:25:a0:c4:e1:4b:8e:bf:01:88:b4:f5:1e:91:
         68:e6:92:25:b8:cc:02:ed:fc:87:81:cb:78:f9:cc:fd:82:41:
         79:32:f7:1d:c3:da:48:e9:54:e6:cd:d4:32:38:87:02:9d:64:
         5a:97:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:01 2024 by rpki-client on console-fra.rpki-client.org