Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File:                     KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier:          bEnL9949v2RUc1KoBes9GrZZV/YwvP2d0xz1CmD5UAE=
Subject key identifier:   5A:30:F4:5A:69:91:1A:4B:47:2D:1F:02:F2:B3:16:93:93:0E:82:85
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer:       /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial:       019220B072004A9736D6A62C97BFB5AB4B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number:          080C
Signing time:             Mon 23 Sep 2024 21:01:27 +0000
Manifest this update:     Mon 23 Sep 2024 21:01:27 +0000
Manifest next update:     Tue 24 Sep 2024 21:01:27 +0000
Files and hashes:         1: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: UJyMfJewa7ewdIt2/3N4HJ68EOJGGm5znAShMrZoP6M=)
                          2: MJYeW4r5N_SerXfKtv7zvd9Gook.roa (hash: 1EfC1ZIRkLvuTWnjOuAjkdwWb+SZf8SrVQ9/U/01qXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Sep 2024 20:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:20:b0:72:00:4a:97:36:d6:a6:2c:97:bf:b5:ab:4b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
        Validity
            Not Before: Sep 23 21:01:27 2024 GMT
            Not After : Sep 24 21:01:27 2024 GMT
        Subject: CN=5a30f45a69911a4b472d1f02f2b31693930e8285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:98:28:88:fb:04:f5:16:c9:79:00:c9:0a:
                    0a:58:c3:89:c5:37:17:eb:c0:7f:6d:c5:12:ba:28:
                    0b:78:68:1e:1f:8d:37:c9:70:0e:4c:eb:6c:16:a8:
                    b1:1b:c8:d1:93:62:6a:f7:0d:8a:9e:01:6a:25:2c:
                    7e:0c:b3:e0:91:5a:58:af:db:60:8b:27:65:94:b0:
                    96:93:3b:22:41:a5:d0:8d:91:38:8d:54:ad:01:46:
                    85:33:a6:f3:53:86:88:8f:4c:b9:60:47:7a:b3:78:
                    98:f1:30:84:f4:00:a1:26:5d:9f:55:34:6c:7b:95:
                    75:bc:5c:94:f1:97:c5:03:7d:e4:e9:93:de:02:ed:
                    e8:4b:29:64:5f:57:81:8d:c5:da:76:4a:54:58:16:
                    ef:c1:a3:03:d5:be:e6:52:71:f7:30:11:b3:c3:07:
                    11:4c:5d:56:07:c2:3e:d6:42:0a:40:cd:39:74:1b:
                    df:1c:2b:dc:76:5b:20:e7:44:f5:d4:cc:00:b1:75:
                    06:f4:2e:b2:f5:07:41:50:b2:05:bf:7e:ad:f6:34:
                    22:c7:84:93:2c:3f:0b:30:bc:a0:f1:56:a3:93:1d:
                    17:15:99:8f:2d:f0:d2:8c:56:3e:f8:b8:ea:34:40:
                    d4:ff:dd:29:94:2b:50:61:08:bc:02:cc:d6:f8:41:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:F4:5A:69:91:1A:4B:47:2D:1F:02:F2:B3:16:93:93:0E:82:85
            X509v3 Authority Key Identifier:
                keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:92:67:64:60:de:80:24:2a:b7:49:b9:2a:15:58:1d:8b:46:
         c3:a9:f5:44:84:83:00:77:b7:a4:af:67:c8:df:f4:50:e6:58:
         68:ab:48:b3:26:d7:f3:e4:5c:18:1e:f8:5a:b0:58:58:57:b4:
         e3:8a:a3:3d:6d:c4:74:98:14:01:0f:58:39:a8:cf:9d:79:fe:
         35:a5:6c:64:0c:5e:83:b6:2d:2c:ef:fe:91:8c:77:11:f7:9f:
         da:52:c7:54:15:57:a5:8b:36:e0:ec:e2:1a:01:ba:6d:93:e0:
         4d:0f:da:0d:cd:fd:53:78:f4:88:86:5f:b7:7d:cf:b7:3e:00:
         01:73:da:83:0c:44:97:f0:2f:83:11:5a:86:a1:c8:dc:cd:a7:
         e1:38:37:9a:87:11:15:62:16:37:ca:c1:b7:22:87:70:3f:db:
         01:34:ad:be:11:dd:45:05:18:7f:7f:a4:6b:a8:da:23:a4:d8:
         52:79:59:f6:38:dd:38:2e:ca:34:e7:47:c2:7e:7d:73:c7:50:
         98:1f:09:55:59:87:6d:12:2e:8e:ae:d2:94:31:70:6f:dc:b8:
         0d:76:da:5c:3e:f9:17:aa:6e:fd:b4:d9:3f:0c:bc:a6:a6:97:
         06:cc:7a:f4:78:94:90:53:82:3c:04:cc:b0:cd:f1:d4:27:ab:
         aa:65:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 00:08:56 2024 by rpki-client on console-fra.rpki-client.org