Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File:                     G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier:          gAgfc1GPQ0GekHaJxYOR03hSGVB5xGap3c+qfaKm5nA=
Subject key identifier:   70:C1:F8:AC:BC:C7:A2:6D:7B:B8:86:2F:50:98:6E:9D:0F:0D:A4:90
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer:       /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial:       0193579B870E2DF6C705A3D9EC4931B8B501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number:          0B98
Signing time:             Sat 23 Nov 2024 06:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:30 +0000
Files and hashes:         1: 0BICdqb5A9bNsYNyfblTmTRkwnw.roa (hash: PtABaGHDi334AqwnRLZfJcN8f3EkaEmqQ2GDuvQaa7Y=)
                          2: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: 8/z1GoV1peALiAa9hH6EFfiqG5rtzzi+eLDVoQOdd6U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:87:0e:2d:f6:c7:05:a3:d9:ec:49:31:b8:b5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
        Validity
            Not Before: Nov 23 06:00:30 2024 GMT
            Not After : Nov 24 06:00:30 2024 GMT
        Subject: CN=70c1f8acbcc7a26d7bb8862f50986e9d0f0da490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:6f:04:88:da:5d:62:35:24:ad:01:97:96:
                    23:cb:68:f2:01:b5:52:c5:d1:4a:7e:fa:f0:eb:40:
                    31:d8:e3:ae:2e:14:cd:7a:a9:8a:6b:3b:d0:b2:35:
                    1d:77:e0:e1:ed:9b:a1:d1:51:f7:a9:2f:7e:bc:6d:
                    1c:ed:0b:c6:73:08:90:d3:93:54:92:a1:45:10:91:
                    49:32:e7:31:29:9a:41:ce:c9:e7:9d:84:96:b3:77:
                    cc:26:26:f3:24:b7:19:67:b2:89:1e:9b:89:a6:71:
                    29:df:d2:ed:64:7b:c0:a1:6e:c9:15:01:08:e5:de:
                    b6:fd:a5:0d:96:85:da:b4:ae:c1:43:05:3c:11:78:
                    b8:17:71:f3:7c:4f:ac:2a:da:90:f6:6e:88:b1:db:
                    34:62:f1:25:59:c6:05:ae:8d:11:b4:e4:2d:3f:35:
                    99:e0:b7:01:c7:38:80:bc:be:14:f9:7e:5d:d4:0e:
                    8a:39:e5:80:04:5f:64:f8:93:6a:97:a3:02:32:f4:
                    36:7d:82:ec:19:bc:4a:1c:9b:e9:fe:bf:0f:48:4c:
                    81:cf:c2:5d:29:20:2f:39:fc:e3:ef:f8:47:26:9f:
                    5a:74:48:99:ac:f5:5b:ae:4b:d7:ca:da:f1:87:d4:
                    53:6d:1b:8a:67:5b:8a:2c:5f:73:ed:f6:4b:4a:49:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C1:F8:AC:BC:C7:A2:6D:7B:B8:86:2F:50:98:6E:9D:0F:0D:A4:90
            X509v3 Authority Key Identifier:
                keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:af:46:2e:36:93:b0:5b:87:f4:39:bc:c3:92:a9:d4:19:
         ef:6c:a0:f5:a1:1a:55:a9:e3:a9:f8:07:e5:3e:b3:84:63:73:
         ed:de:b3:35:54:ac:2c:36:ec:63:73:e3:c5:a7:5e:c0:77:2e:
         8b:13:2b:4f:95:95:b6:b4:c7:36:b7:82:e6:94:6b:60:cf:29:
         8e:26:9b:be:7d:90:10:19:b9:1c:ec:46:bf:c7:ce:5f:42:39:
         93:54:6f:6c:3a:61:33:7c:8b:99:fa:4a:3c:e8:f9:8c:98:9a:
         5e:a9:cb:a3:d1:b9:62:0a:44:f5:9b:94:b7:93:fd:0e:9e:2c:
         99:26:31:1a:9e:e8:c1:14:ed:b3:b8:0a:47:7d:56:cd:95:fd:
         c3:41:a8:3c:8a:32:ca:04:34:5e:7b:3b:8d:16:7f:d9:a6:c2:
         86:11:4a:07:6d:4e:a0:3d:7e:5f:ce:c4:44:89:07:96:8c:88:
         22:06:57:b0:84:d2:23:2e:ac:2c:fa:86:14:09:6f:44:d4:47:
         59:b6:af:17:d9:3f:15:b5:09:2d:d0:f4:7e:71:40:3f:28:62:
         a1:38:78:03:8a:84:e8:56:05:3b:d8:f0:2c:19:d6:19:25:a3:
         b4:75:be:08:f9:23:13:1f:36:7f:29:b2:86:70:c7:67:dd:67:
         0b:a6:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:06 2024 by rpki-client on console-ams.rpki-client.org