Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File:                     dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier:          6p5gAet0fUh5uMKuuXsB2pppVNwFrIxKsHmKR2YQErU=
Subject key identifier:   B7:DC:EF:32:81:3B:FE:32:72:ED:A2:C1:BC:0D:DD:92:3D:01:B5:4C
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer:       /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial:       01935AD3A5BC42EAA960DE737BC5EE969FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number:          0424
Signing time:             Sat 23 Nov 2024 21:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 21:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 21:00:40 +0000
Files and hashes:         1: TwO0yT1YRg6BcVZ4AowJgC9DiFo.roa (hash: S//NZrEgKa3LN4H3tVPLSdmULlJhqbqckFJCtXCinKM=)
                          2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: b7v9/PCFQ/tx5bQ42J/GdtuJiyvygiglrxrpHTZINpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:d3:a5:bc:42:ea:a9:60:de:73:7b:c5:ee:96:9f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
        Validity
            Not Before: Nov 23 21:00:40 2024 GMT
            Not After : Nov 24 21:00:40 2024 GMT
        Subject: CN=b7dcef32813bfe3272eda2c1bc0ddd923d01b54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:12:43:e1:85:3a:86:e2:4b:81:0a:05:7b:
                    ad:3b:0b:df:3e:48:55:fa:d3:e6:47:35:7f:22:1c:
                    87:bb:70:5e:ea:82:09:d0:a6:d3:00:f2:05:8a:5e:
                    a9:99:cc:bc:75:6e:18:46:ef:d2:27:0a:e2:8b:71:
                    e6:f2:8a:08:11:87:ac:41:ea:6a:05:95:a0:1a:08:
                    68:a6:f3:3c:c1:fc:bb:ae:42:d9:e7:87:17:9c:6a:
                    f3:f7:e6:65:98:58:ff:6e:5c:66:09:8f:88:91:57:
                    25:b4:e1:7b:1c:b0:ac:d8:fb:c9:21:cd:5f:dc:23:
                    fd:cc:1e:50:bb:f4:8b:27:af:8b:e1:10:04:2e:2c:
                    9e:a7:8c:9e:89:e5:b7:03:ce:f1:e4:4f:f6:58:5f:
                    de:20:bf:94:ab:45:da:38:d3:1c:af:6a:f8:d0:48:
                    e4:4f:a3:70:e2:72:ff:e9:82:8b:c7:cd:5d:c3:12:
                    a5:81:2b:ff:73:dd:e1:b0:f9:8e:9c:de:24:47:61:
                    5d:17:a0:c7:72:42:7c:4b:ad:44:03:39:28:c0:2a:
                    59:49:2f:c8:30:87:22:2f:2b:4e:ab:05:5a:3b:b1:
                    79:59:7b:8f:5e:a3:3e:3b:fb:bd:e5:da:d2:a2:57:
                    3a:1b:a5:93:ad:da:c0:c3:89:ff:88:77:6a:0f:59:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:EF:32:81:3B:FE:32:72:ED:A2:C1:BC:0D:DD:92:3D:01:B5:4C
            X509v3 Authority Key Identifier:
                keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:a3:05:5c:2e:8e:02:b4:ca:73:c1:33:68:1e:72:b1:30:
         83:66:38:f6:36:47:58:3a:1a:4e:cd:be:ce:86:8c:02:15:49:
         a2:57:af:09:60:fb:18:47:8f:49:89:76:74:27:b7:78:fd:fc:
         63:ca:16:ab:ad:8d:67:16:2f:e4:ae:e4:18:1c:8a:3c:c3:42:
         8b:9a:50:96:87:b3:86:53:2d:a3:34:24:ae:60:f4:dd:6a:d7:
         4a:59:37:ff:fd:16:86:b1:c5:1d:20:d7:f5:3b:6f:e9:3e:bb:
         06:42:1f:5b:2b:0d:d5:47:66:a3:7d:e7:1f:48:3c:6c:85:1d:
         dc:51:4c:be:ba:dd:70:d1:1d:c3:9e:cc:33:b6:79:ed:ee:03:
         8f:d4:6c:57:48:c3:9f:91:92:0c:13:72:e1:90:9e:71:37:32:
         f4:53:24:6b:90:2d:0d:70:51:db:b5:c7:e7:7c:5d:a8:1b:7e:
         5c:01:4c:e8:44:b3:c8:2f:1e:03:a9:a2:f5:fe:f8:38:4e:9f:
         a3:d5:fb:1f:a8:14:e3:d0:c5:e2:8b:5e:bf:f9:68:fd:7b:fa:
         c8:47:ec:a3:ea:84:99:27:c4:5d:55:31:58:ca:86:df:35:5e:
         2f:3f:15:04:7b:4a:f5:d1:b1:09:6e:98:d1:66:1e:7a:3b:5b:
         74:f2:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:01:05 2024 by rpki-client on console-fra.rpki-client.org