Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          1tu/0/3vo3Hhs4eSBKuIxcE1oABrNshy6G4NCbQAdNY=
Subject key identifier:   56:0E:CD:6A:49:B5:B9:AD:A6:BD:BC:3B:2F:B6:0D:00:64:C0:FB:54
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       0193549BCC64A599E8B92971894D551EA928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          01CB
Signing time:             Fri 22 Nov 2024 16:01:56 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:56 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:56 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: +mbKU+mp0q31y+GFy6qa/wjzFVCScqEA52KBo/r56yc=)
                          2: OYKPc_lev13m7c0K2xIt_bDXYyc.roa (hash: aob3cQrPcgwzLrRp5snLH1nqMq2xsJ/zTqFGEt5DzxA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:cc:64:a5:99:e8:b9:29:71:89:4d:55:1e:a9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Nov 22 16:01:56 2024 GMT
            Not After : Nov 23 16:01:56 2024 GMT
        Subject: CN=560ecd6a49b5b9ada6bdbc3b2fb60d0064c0fb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:a4:9e:7c:42:7d:a5:87:07:b5:2f:20:ea:
                    65:74:8e:aa:e5:1c:bf:af:bf:f4:f9:59:69:90:8e:
                    22:3e:bb:0d:cd:37:c2:86:83:34:ef:f8:5c:f9:6a:
                    6d:85:3f:53:9f:1e:e3:c8:1a:f4:1b:11:8a:d4:1e:
                    ea:9f:01:04:6f:50:80:40:81:f5:66:22:1c:fb:44:
                    c6:f6:cb:21:a7:88:66:21:0d:78:37:38:68:12:cd:
                    93:19:25:f6:37:6d:6f:94:a7:b0:99:72:ff:42:8c:
                    17:25:f9:1f:89:75:6d:d6:20:f8:92:ef:28:ec:95:
                    22:cd:89:b8:8f:e2:99:ff:1f:58:fb:b9:3b:33:64:
                    34:6f:02:43:34:8e:26:44:6e:f6:95:4a:5f:3e:bb:
                    14:32:7e:c3:45:04:b1:c5:cf:7c:5a:d0:3f:69:d6:
                    54:82:31:e6:e1:50:f2:01:5a:4c:a4:9a:7b:4f:94:
                    7a:31:f5:be:2a:c0:22:68:2f:95:b7:4f:0b:e6:4a:
                    56:6c:a5:95:79:d0:9e:02:b8:b4:0f:4d:46:85:70:
                    24:bc:1e:4a:71:f1:d8:ab:1f:a7:02:d5:76:4e:2f:
                    96:84:73:e8:4f:48:84:f6:6e:0a:8d:59:d4:d7:94:
                    d5:55:cd:bc:8e:20:2f:5e:25:65:a9:20:16:13:7b:
                    90:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:CD:6A:49:B5:B9:AD:A6:BD:BC:3B:2F:B6:0D:00:64:C0:FB:54
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e8:54:ad:38:d2:09:b8:cb:0f:55:a3:f8:a1:3d:64:f7:28:
         91:bd:82:ba:22:3e:e3:9d:0f:81:ef:a6:ce:9d:df:61:a6:80:
         64:9f:13:20:2f:26:a5:6e:59:12:9f:11:f1:bf:5a:a5:37:ae:
         0a:ee:03:c2:89:bd:8d:36:01:c7:71:d8:43:fc:c5:b3:41:0c:
         ff:54:0d:d8:eb:c8:52:78:25:34:78:cc:99:49:15:70:2e:57:
         bb:eb:ac:6b:7d:17:73:78:ca:c0:a6:2e:61:65:62:3b:9d:fa:
         7e:e2:aa:22:22:d3:5a:4c:96:95:44:b4:8d:ce:57:86:27:50:
         41:19:98:71:15:ca:83:33:e2:dc:9f:fa:20:ed:a6:df:21:a5:
         ce:29:0f:a1:c6:b4:9a:ba:1f:82:f2:59:dd:2b:85:69:54:e7:
         bb:e9:a2:15:0d:24:63:87:e9:f0:58:8b:46:96:5f:93:73:b7:
         96:bd:fd:e1:65:ba:e4:a6:0b:84:da:32:7c:9a:39:de:b2:52:
         dc:79:1a:0b:9f:91:61:73:15:58:f8:74:d0:98:c1:7f:5d:20:
         50:c3:24:95:24:71:d1:fe:ae:c7:19:4a:99:02:c3:b6:8f:6a:
         c0:e4:7f:59:6d:51:5c:9f:fc:05:86:19:64:8d:84:ce:45:e3:
         db:0a:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:58 2024 by rpki-client on console-ams.rpki-client.org