Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File:                     J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier:          tQxsZUPynBabShkA+E4HgGgxgLikSn+x4+l0aBZ1wuA=
Subject key identifier:   0E:F1:7B:79:5A:54:6F:34:3E:C8:7E:74:94:AF:FB:A9:4F:AA:E9:0B
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer:       /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial:       0193579BA6156CED8E7188E31AA809DB1E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number:          0F1A
Signing time:             Sat 23 Nov 2024 06:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:38 +0000
Files and hashes:         1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: tOkxHlLTMmnZxy0+RIj9K3iDubHytwYky1YVBB7WqxM=)
                          2: n-bsnv75MCJBNtlQOfpmCXwyY6c.roa (hash: KIvmAbIgfVCHCwz9CrzCulyIc1RbOxY5H9QVJBayhyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:a6:15:6c:ed:8e:71:88:e3:1a:a8:09:db:1e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
        Validity
            Not Before: Nov 23 06:00:38 2024 GMT
            Not After : Nov 24 06:00:38 2024 GMT
        Subject: CN=0ef17b795a546f343ec87e7494affba94faae90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:a1:d3:69:84:07:1b:6c:7f:f0:75:6a:5d:
                    58:67:99:bf:c8:48:07:db:42:31:d7:8a:23:5c:90:
                    ba:43:26:a1:97:f7:c1:2a:54:97:2b:4c:bd:47:d2:
                    e5:99:87:f8:69:77:05:3a:ec:bb:bb:41:c2:18:ae:
                    c5:c7:84:2e:18:f0:94:93:df:45:c7:11:d9:35:f3:
                    55:f7:e3:38:e8:7d:8d:9b:a1:a6:02:81:e4:cd:c8:
                    5f:16:d7:c4:86:33:f6:b1:22:21:36:19:5e:e8:ae:
                    f6:cd:b8:c0:e7:b9:e2:73:95:c7:e3:ff:22:21:34:
                    1c:96:f2:30:3d:ba:b9:d3:28:f1:f8:41:d8:9f:79:
                    60:7f:73:3b:e8:59:26:0c:a6:da:40:c0:ca:ba:e2:
                    df:01:b2:3c:04:81:cc:c6:09:ab:3f:dd:80:65:45:
                    a2:ed:d9:cb:90:03:d7:3c:fd:b8:5f:05:ab:b1:24:
                    74:a8:cc:8a:f4:0a:71:26:ab:17:e7:b7:c3:eb:40:
                    de:58:4e:6a:e6:db:69:aa:fe:00:3b:63:ab:c9:96:
                    91:77:87:c5:98:fd:5f:f2:37:35:67:03:b9:55:9d:
                    23:74:dc:e1:3c:b7:cf:9c:17:8d:48:0a:5b:68:0e:
                    51:eb:52:b1:e8:e3:70:fd:7c:da:17:72:5d:4c:dd:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F1:7B:79:5A:54:6F:34:3E:C8:7E:74:94:AF:FB:A9:4F:AA:E9:0B
            X509v3 Authority Key Identifier:
                keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:e8:6c:9a:ab:be:db:7d:e2:5a:b6:2b:f6:13:e3:71:56:
         32:63:d5:7e:0a:6f:45:3d:b6:1b:ca:65:f7:5f:c0:10:c7:eb:
         68:9c:86:24:6b:24:cb:55:45:a8:5c:5e:0e:e9:88:3d:94:75:
         27:4f:0a:8a:e1:93:46:6e:04:3f:3c:12:02:63:df:dd:66:f6:
         8e:9e:87:47:b4:3c:36:5d:eb:d1:54:d5:17:fe:de:56:32:5a:
         06:3f:36:1e:e2:48:a7:20:f5:55:3e:84:54:e0:b6:2b:49:90:
         a4:46:81:3e:22:05:d7:b0:b3:39:03:9c:59:8a:61:5c:a8:21:
         83:ec:03:50:3e:f0:ec:aa:20:f3:f1:6d:34:dc:2a:ac:e1:93:
         74:00:9a:d5:ca:e6:ac:77:82:fe:16:7e:da:8b:ef:a8:4b:1e:
         55:2b:58:77:09:c9:e3:06:0e:a6:31:d9:93:ea:4d:68:a9:ac:
         48:25:f3:30:5b:4a:af:a7:e1:26:46:3d:70:b8:71:78:b0:bd:
         1f:27:72:57:6a:82:3e:30:1c:6b:3c:ae:4e:3d:2e:c2:9c:2a:
         89:be:09:63:4e:bd:b4:56:ae:f1:6a:b9:1b:85:b8:d9:ea:8c:
         fc:e5:8a:48:c6:64:0e:01:63:2b:91:e0:90:59:90:bd:7f:94:
         b7:e8:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:31 2024 by rpki-client on console-fra.rpki-client.org