Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File:                     oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier:          0RCHr+PZCqb2o0qyxatFpup7/8UPHiC85nXWwSDEJLs=
Subject key identifier:   BE:A9:60:18:64:2F:25:AD:82:DF:BD:92:21:CA:A9:59:F7:84:F8:B3
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer:       /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial:       019355AD296611F869184FB90AFBB788AA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number:          10AA
Signing time:             Fri 22 Nov 2024 21:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:31 +0000
Files and hashes:         1: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: DvjWJqGorlm7fvn+tnqkynznJVdzAgHFEEKF1UN0XW8=)
                          2: v8_ABhl7cJFlZkKba01EJXGPaXA.roa (hash: vrmDDE66tk9o6hsfW6JzP4JwM1GQqON9lSWpbfUr8O0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:29:66:11:f8:69:18:4f:b9:0a:fb:b7:88:aa:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
        Validity
            Not Before: Nov 22 21:00:31 2024 GMT
            Not After : Nov 23 21:00:31 2024 GMT
        Subject: CN=bea96018642f25ad82dfbd9221caa959f784f8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:60:5e:1a:82:6d:84:52:e3:94:f1:7a:38:
                    4f:ae:10:1a:6e:d7:c1:fc:9a:91:5c:f3:b0:d3:a5:
                    5c:e4:a7:d4:4d:7a:70:9f:ff:30:29:4d:43:0d:04:
                    dc:a6:ba:a4:d4:25:9f:3b:29:dc:8f:62:63:0d:bb:
                    d1:47:23:00:4e:b1:56:24:40:fb:53:39:24:01:33:
                    0e:95:5b:9b:9a:36:06:00:07:46:2f:d1:ea:8c:73:
                    c3:9e:dd:5c:67:0e:d5:29:bd:ec:41:3d:53:af:d3:
                    07:aa:89:50:be:cb:cd:16:d7:4a:c5:12:b7:c0:ed:
                    b8:3d:85:07:72:a9:45:e5:2c:ce:89:a5:07:4c:4e:
                    f6:8b:48:cf:34:d0:ce:79:5e:63:9e:64:d5:32:ad:
                    9f:6a:11:e0:7b:63:14:37:6f:f2:0c:8b:53:bf:48:
                    1a:d2:79:f0:0a:0d:93:a7:26:43:d0:aa:d1:97:1f:
                    6d:fe:22:b5:6d:87:da:f8:6a:18:1c:0b:b2:38:82:
                    65:5b:2f:d3:07:66:02:90:85:48:fe:c1:f1:61:85:
                    0b:df:14:d5:4f:36:81:26:ed:7a:92:41:47:ef:62:
                    d3:63:7c:cc:5e:97:31:89:7e:5c:9b:15:24:df:42:
                    63:6f:b4:97:fa:e8:bf:a1:66:73:71:44:33:a3:39:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:60:18:64:2F:25:AD:82:DF:BD:92:21:CA:A9:59:F7:84:F8:B3
            X509v3 Authority Key Identifier:
                keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:af:2f:fd:5f:4a:a1:7c:1b:83:82:a0:8f:5a:32:71:3f:ca:
         7e:7b:60:0c:57:18:3f:51:62:ef:3b:a9:c7:39:89:5a:17:83:
         5e:76:e1:be:69:3e:f5:ee:34:5c:94:3d:47:8c:c0:af:1a:db:
         df:9a:b1:f5:57:f7:db:7e:44:4d:34:46:ca:40:e0:da:81:83:
         8c:83:12:4f:6c:20:af:f8:03:74:69:2b:db:8c:d0:50:c5:0f:
         0a:71:7f:28:27:68:79:e3:b7:59:93:c7:e7:fd:af:ae:99:26:
         6e:76:6a:67:db:b8:68:de:65:dd:fe:b7:36:dc:fb:d8:a6:6b:
         f3:f6:c8:66:ac:47:e3:c2:55:f2:1c:21:71:f9:01:80:dd:b6:
         f8:69:84:50:a7:06:ac:b9:22:51:50:83:32:9f:bb:d6:a7:4d:
         99:25:a6:29:d2:6d:19:18:52:37:95:be:cf:ae:7c:59:b9:ff:
         0e:09:af:40:32:e8:22:a3:fb:18:aa:5f:af:e2:83:47:e5:ff:
         7c:dc:3b:d8:2d:28:92:a3:5a:dd:b2:47:0a:7d:a5:31:5c:bb:
         46:7f:da:ea:eb:d9:1a:f5:0d:b5:68:28:66:0a:01:6c:70:13:
         04:e6:e1:09:8f:7b:61:a8:51:1b:d4:bb:93:96:7c:b4:e6:1b:
         cf:80:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:32 2024 by rpki-client on console-fra.rpki-client.org