Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File:                     XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier:          XxZUDc70QyHE8wnymXanlrKY1qxHPh3gB4HiBRTbItY=
Subject key identifier:   AA:5F:9F:9B:B8:12:55:93:F1:C7:A7:A7:D8:10:EF:65:88:94:92:78
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer:       /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial:       019236CA153665555F281792A022CDFC8BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number:          11E1
Signing time:             Sat 28 Sep 2024 04:01:06 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:06 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:06 +0000
Files and hashes:         1: 7AdSoYmrqvkmP6lM_Xrw7difVzw.roa (hash: b9H9yiYWmd5zbCKQ1uBZEKl9GMPp0QH2PUETysc0jyU=)
                          2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: ON1AKvHwgJB5fUcssNjzJVsE0EtcLcwQ+5Bjwr46R4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:15:36:65:55:5f:28:17:92:a0:22:cd:fc:8b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
        Validity
            Not Before: Sep 28 04:01:06 2024 GMT
            Not After : Sep 29 04:01:06 2024 GMT
        Subject: CN=aa5f9f9bb8125593f1c7a7a7d810ef6588949278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:a1:ea:05:43:47:1a:38:08:e9:3a:6d:70:
                    a4:ca:f3:dd:c4:24:81:8f:43:a4:26:0f:3c:3a:12:
                    ae:bf:1e:9a:73:a2:f1:91:9e:8e:5b:49:af:db:d3:
                    83:03:8d:85:34:60:b9:83:a4:92:99:d3:45:b4:01:
                    3c:97:96:d4:5e:ea:5a:27:e7:7a:a0:51:33:c8:f9:
                    95:66:0b:c2:d8:b2:43:08:fa:5a:64:ed:22:ef:16:
                    94:0f:fc:4b:eb:bf:f2:e2:9f:8b:cb:db:df:f7:ed:
                    7f:79:01:01:67:ca:6d:2b:4c:3e:a5:96:bc:10:5c:
                    de:ab:6f:18:cc:72:3a:ed:7f:c9:bc:0e:82:a0:9b:
                    11:56:e3:30:cc:87:95:28:81:79:72:27:51:bf:00:
                    52:ef:8d:32:c2:eb:66:d1:06:21:4c:9f:a4:04:c8:
                    05:ed:78:ef:ed:68:4c:5c:26:a9:0d:4d:88:8f:62:
                    45:b3:79:a9:dd:0d:6f:52:e5:3e:48:66:8e:af:76:
                    77:a9:a4:93:b4:44:80:36:88:34:25:e7:20:0c:b5:
                    bb:19:d7:6e:5c:ff:06:a0:03:15:fd:2e:16:00:5e:
                    9b:3b:9b:8f:95:01:51:55:4e:b9:1a:b3:96:09:d1:
                    bc:04:4a:f8:6d:78:b9:09:64:9b:1e:06:53:3b:65:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5F:9F:9B:B8:12:55:93:F1:C7:A7:A7:D8:10:EF:65:88:94:92:78
            X509v3 Authority Key Identifier:
                keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:88:3d:f3:cf:b3:1c:86:46:63:01:09:68:3e:01:a6:a4:
         77:26:98:c0:32:38:af:68:f0:33:c5:fa:59:b0:be:83:af:2c:
         40:da:1a:0c:dd:92:a0:f6:8e:dc:ea:c1:7d:c5:79:60:f4:82:
         fd:d3:01:91:02:7c:81:f7:fa:ee:d2:1a:6e:3c:45:6c:e0:d5:
         20:35:6a:6e:d6:09:e9:f5:f6:d0:39:a0:35:92:35:1b:83:e3:
         cc:8b:db:9f:5b:49:2d:20:3a:a2:45:4b:9e:69:66:d1:52:af:
         ac:95:fa:db:f3:ef:c9:6d:66:93:d3:bf:55:18:21:a0:1d:8f:
         00:2d:4d:8b:67:6e:ad:52:c7:8f:58:66:55:46:36:3b:46:2b:
         0c:02:c2:88:95:35:d2:e9:dd:9e:d1:0e:38:11:1e:04:eb:66:
         70:51:92:bf:a9:4d:b4:34:5d:c8:f2:f6:55:b2:33:0f:97:a0:
         4e:da:9b:e3:28:9e:bc:db:70:98:42:9a:9e:37:b2:1e:3c:31:
         99:93:7b:9b:62:8d:39:ae:9c:0b:53:f6:58:2c:3e:84:0d:09:
         5b:3e:35:19:83:63:39:29:8a:e8:07:15:3d:df:1f:08:6a:3d:
         59:eb:27:dd:96:c1:1a:09:bf:18:21:a8:35:79:d9:79:f6:39:
         28:88:03:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:10:12 2024 by rpki-client on console-fra.rpki-client.org