Manifest

$ rpki-client -vvf rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
File:                     CB2B40C722F645663A261D605D1C78BD1B720065.mft (raw, json)
Hash identifier:          l5xkLoKYbAybLfncoZoQvj2j8uvVKe36tWH+tHMdbxE=
Subject key identifier:   E2:A2:6D:A3:F9:5A:F7:F8:1C:D8:D2:53:D0:6F:4A:F4:D5:BC:17:D5
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Certificate issuer:       /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial:       68BF3E4FD95CB55D9B534A2CBD4DC9F88C32BB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access:      rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
Manifest number:          0330
Signing time:             Fri 22 Nov 2024 15:51:21 +0000
Manifest this update:     Fri 22 Nov 2024 15:46:21 +0000
Manifest next update:     Sat 23 Nov 2024 15:54:21 +0000
Files and hashes:         1: AS199514.asa (hash: z/iu5ZLu9SXKGBji4vZxPRtWFiHSeseJmOwWXknQw+M=)
                          2: CB2B40C722F645663A261D605D1C78BD1B720065.crl (hash: RyIk9/zjmUELhcnID4PLhZVrd986XryQnEziTRVWPSA=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
                          rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bf:3e:4f:d9:5c:b5:5d:9b:53:4a:2c:bd:4d:c9:f8:8c:32:bb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
        Validity
            Not Before: Nov 22 15:46:21 2024 GMT
            Not After : Nov 23 15:54:21 2024 GMT
        Subject: CN=E2A26DA3F95AF7F81CD8D253D06F4AF4D5BC17D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:2c:64:87:a9:1b:d4:f4:95:18:c0:6f:e0:
                    cd:35:c2:10:dd:f7:a7:fd:30:dc:86:af:f8:0a:cd:
                    e2:81:5f:0f:3f:d2:d4:08:25:eb:e3:8d:a4:2e:4f:
                    33:94:35:d1:94:e5:b9:ba:6e:0e:28:8b:df:b4:1e:
                    57:e2:a4:89:9d:89:81:31:56:95:50:38:08:8f:ea:
                    a2:72:86:9b:b0:51:31:b7:7a:f4:af:89:4d:b3:51:
                    86:55:ae:a6:e5:cd:a0:e8:e7:be:3d:1a:b1:af:2b:
                    71:df:f1:04:a4:a5:58:5d:db:ee:af:cc:d3:60:a8:
                    11:42:e8:15:fb:9e:09:72:fb:aa:c7:91:b3:f6:a8:
                    e9:2a:9c:57:82:65:05:49:d0:ff:d8:91:af:48:26:
                    7c:16:c8:d9:d5:f0:3b:f0:4a:65:ca:e1:45:12:47:
                    b5:a7:56:e7:33:84:ba:80:94:8c:7b:3e:f6:64:32:
                    ce:1e:00:cc:e7:83:cc:d1:9d:97:00:9a:e7:2c:0c:
                    63:41:3a:96:b2:82:b4:82:48:22:e2:30:9f:24:0e:
                    00:46:81:00:a0:c0:14:fe:04:aa:4d:e1:52:59:c3:
                    0d:90:54:0c:0a:b5:fb:48:71:0c:42:49:22:37:6a:
                    c1:2e:26:d4:9e:83:62:86:c8:c2:23:d3:1e:60:b3:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:6D:A3:F9:5A:F7:F8:1C:D8:D2:53:D0:6F:4A:F4:D5:BC:17:D5
            X509v3 Authority Key Identifier:
                keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:21:4c:ab:ca:a9:8e:a2:18:65:d2:76:d5:75:25:87:ba:
         20:c6:bf:d0:a0:02:31:c1:f5:4f:c8:69:ce:6c:c0:01:77:71:
         bd:2d:ba:a9:9d:8d:61:0b:34:39:c2:3a:f1:21:27:a1:91:0a:
         64:93:c8:2b:4a:2d:e6:15:2b:0c:6f:ad:3d:2d:46:33:02:3a:
         63:95:09:92:f3:c8:e3:8a:83:54:28:55:2e:8b:1c:6b:80:44:
         19:78:b2:da:55:b6:df:74:21:f2:bf:02:a3:a7:a1:d5:e1:8f:
         04:da:7f:35:1a:28:8e:1a:cd:9d:4a:6b:68:04:f5:bc:11:5f:
         a4:f1:44:02:b0:23:8f:88:63:e5:49:4b:6e:6b:0f:46:ed:22:
         61:c0:05:72:1a:36:07:ea:60:18:a9:fa:74:a2:c1:c4:a5:93:
         06:d1:b1:b0:74:d9:dc:cb:76:de:68:40:ec:ff:9b:26:fb:4a:
         b1:09:5b:c7:e4:3a:d4:4a:80:e6:27:76:8a:1e:44:4f:de:1d:
         96:67:e8:2a:95:cb:da:32:2e:35:e5:ac:bb:c5:66:e4:0d:64:
         c4:b9:fc:cc:d9:7a:71:87:a8:71:a3:64:5f:a3:5c:c8:ad:10:
         f5:d8:4a:41:f9:28:67:ce:f7:6a:49:cc:0f:a4:6f:a9:2d:2a:
         d6:ee:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:36:51 2024 by rpki-client on console-ams.rpki-client.org