Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          fy477vdmURjqfd+UXJR+QhljkLzDgwAAvy7YCaaSGwY=
Subject key identifier:   16:60:54:43:4F:43:B4:3E:68:8C:00:A2:D3:68:84:54:60:BE:58:A3
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       01938D09E5B91499E26BD1198596F24E6AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          12BA
Signing time:             Tue 03 Dec 2024 15:00:56 +0000
Manifest this update:     Tue 03 Dec 2024 15:00:56 +0000
Manifest next update:     Wed 04 Dec 2024 15:00:56 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: IzbBuewx6jnuQgzsjQx5BDKI5n4KovXXWXM8panNlN8=)
                          2: JRVztGK8XOcz2d7MhpsRhajnNt0.roa (hash: zH690o7DHuqsVpYNCSte/wK4sJBigZCEk8Wkmeh98SU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8d:09:e5:b9:14:99:e2:6b:d1:19:85:96:f2:4e:6a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Dec  3 15:00:56 2024 GMT
            Not After : Dec  4 15:00:56 2024 GMT
        Subject: CN=166054434f43b43e688c00a2d368845460be58a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:51:e6:cc:f2:53:21:00:51:0e:d8:ae:e7:
                    6d:0c:51:1a:83:43:32:82:51:0d:ce:f5:92:06:32:
                    0a:16:59:6d:bc:f1:7c:b3:10:9c:01:f4:68:6f:63:
                    55:4b:ba:d8:19:26:cf:1c:41:c4:f3:45:b6:cd:45:
                    68:85:4c:d6:1e:d9:10:94:a9:e0:ee:72:c7:67:52:
                    34:cd:60:9b:27:f9:ec:d0:88:10:49:9f:c3:21:a2:
                    f1:f1:5f:66:3c:f2:2d:81:0d:c3:01:fb:ae:4c:3a:
                    81:d8:95:a8:fd:c5:eb:51:97:e1:57:f6:0e:6f:34:
                    81:aa:15:dd:b7:f1:1e:0e:0e:44:d3:a7:ef:aa:38:
                    03:93:a8:c7:50:cc:2d:ad:40:2a:2e:86:31:87:7c:
                    67:12:3e:36:f5:d9:6e:60:f3:c5:68:4b:2d:22:9f:
                    0c:65:62:45:e1:f8:2e:6e:d2:62:d2:a5:aa:60:22:
                    a8:55:76:ad:c5:19:b9:7d:f6:c3:13:c5:bb:e6:fe:
                    84:1a:33:30:3f:b0:19:35:db:6f:68:94:69:74:b4:
                    0a:00:fa:1e:79:f0:7d:53:f6:b4:f7:44:47:8d:6a:
                    e2:32:6b:e4:67:7a:36:d4:9f:f4:0b:d6:e6:9c:2d:
                    6e:f3:0f:bb:dd:d1:8e:47:c8:c2:59:8f:54:6b:28:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:60:54:43:4F:43:B4:3E:68:8C:00:A2:D3:68:84:54:60:BE:58:A3
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:1a:6c:d7:9e:fc:4f:bb:7c:e1:b6:17:f1:c7:a8:2b:19:
         58:f9:be:c9:d6:79:53:25:24:d5:32:81:2b:0a:9a:e9:3c:60:
         df:ce:7c:c6:77:8e:c3:0b:a3:cb:a8:00:9d:ed:2e:85:5a:29:
         ee:ac:1d:56:d2:98:c8:19:32:c3:c7:cf:c3:05:24:d6:1b:53:
         cf:f2:8a:e6:b4:17:d2:4d:83:a3:ae:00:ee:3b:b9:73:13:c3:
         e2:a6:51:29:f6:bb:0c:69:7d:2c:f3:2f:21:1e:e5:a1:b8:41:
         7c:98:47:1b:72:28:7d:61:c8:36:37:df:3b:09:24:a7:26:e9:
         16:4c:a6:95:f7:6b:6d:ce:f7:57:47:9c:6c:95:2e:bc:ea:bb:
         1b:79:e2:b3:a9:0f:f3:67:26:32:dc:74:48:ea:94:bb:2e:31:
         19:15:d5:f9:31:be:6f:87:19:f6:44:a1:a4:7e:9b:74:a2:8a:
         fe:28:1c:63:4b:9f:72:84:fb:2a:9e:79:22:72:a1:c9:9a:65:
         50:42:ff:e7:01:a9:6c:6e:85:e4:ee:56:7f:7a:3c:df:9b:99:
         80:ec:76:83:6e:97:b4:1e:3e:3c:84:ed:5f:57:06:93:59:c6:
         d7:f9:ec:cc:40:34:d9:c5:aa:93:83:fa:9a:91:7b:a1:03:49:
         99:3b:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:30:24 2024 by rpki-client on console-fra.rpki-client.org