Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File:                     K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier:          9x84gZnZQrw9YXSk2YJBlhrjE7akfqF7BALvNdXOyhg=
Subject key identifier:   B6:08:01:F4:7C:BD:91:C9:1A:8E:21:35:26:F4:68:4C:17:26:B5:1F
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       019355083D6F1B93D91B9C8D6AE4193710F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number:          052C
Signing time:             Fri 22 Nov 2024 18:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:23 +0000
Files and hashes:         1: 3pYKP1uAFy8ovWeXCvaSHsoi140.roa (hash: PxWF64u9mqXKPMJY4t6EaZ7I8kBPxGmNi0s9HcCQvRY=)
                          2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: mqMwgNwXy5K8slNj23tx7hI4HszH8d5X+3lroMdCRpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:3d:6f:1b:93:d9:1b:9c:8d:6a:e4:19:37:10:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Nov 22 18:00:23 2024 GMT
            Not After : Nov 23 18:00:23 2024 GMT
        Subject: CN=b60801f47cbd91c91a8e213526f4684c1726b51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:77:0d:71:81:85:8a:a2:c9:08:f8:c0:77:
                    34:de:40:00:9d:98:d8:fe:7c:19:fb:a8:69:a2:10:
                    a2:e8:bd:fb:36:31:e4:1d:a2:7c:09:f2:d6:b4:c5:
                    73:15:68:dd:38:7e:be:cd:3f:c0:ee:08:af:c0:ad:
                    bd:0f:96:93:76:cb:d3:1a:36:85:cd:26:72:84:5b:
                    6a:43:f3:b9:93:c8:84:9f:f6:2c:88:4c:1f:5a:bf:
                    d3:b8:da:7f:04:22:e7:c7:cf:9d:f3:26:f5:ac:9f:
                    bc:45:7a:6f:69:eb:2c:2f:5e:2e:87:d9:02:c2:f7:
                    ed:c1:95:32:e1:2c:43:f9:92:62:bf:5c:d3:04:aa:
                    a0:de:b4:26:be:6a:1d:85:fc:a0:fe:d1:69:fb:9b:
                    68:33:94:4f:d2:81:27:de:06:9c:e2:4f:33:00:2d:
                    db:43:5f:f1:cb:31:e0:43:78:bb:bd:eb:29:86:f9:
                    ab:ac:b5:39:9f:26:ee:57:d9:d3:0a:ed:5f:22:4e:
                    a1:23:c7:54:49:02:0a:95:94:99:ee:8e:54:6b:8c:
                    01:fd:68:67:0c:37:49:e6:c7:8f:20:5d:51:38:9c:
                    2c:a4:87:89:f6:30:00:0b:b2:11:99:81:bc:60:40:
                    58:35:5c:fe:53:35:96:de:6d:2d:05:b9:48:f8:3a:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:08:01:F4:7C:BD:91:C9:1A:8E:21:35:26:F4:68:4C:17:26:B5:1F
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:64:0d:81:ab:d1:a8:89:0b:33:2b:6d:6e:86:1a:d8:ef:
         4c:40:7f:70:3b:68:24:f8:3d:6b:5c:7d:c6:8c:ff:f6:7e:31:
         c8:88:fb:df:25:49:fb:ce:65:73:6e:8f:e5:0d:d2:79:59:7d:
         3a:ed:b2:1b:59:54:68:85:8d:d1:fe:84:8b:f7:68:be:1d:ac:
         98:ae:17:19:24:1d:9b:73:40:96:51:6e:e1:e5:14:fe:32:3e:
         d5:88:83:98:47:b6:81:a7:a2:65:2f:d3:e2:0d:e2:96:c8:8d:
         9f:12:64:42:b0:69:fd:95:fd:3e:0b:d4:b7:1e:49:bf:ad:b1:
         fc:51:62:2f:50:0f:c4:73:28:b4:5f:fd:ce:49:44:11:cd:b2:
         ff:e8:b9:69:53:83:c9:c7:90:c6:75:e8:73:71:32:a0:f3:83:
         71:f1:b6:43:91:e0:d9:77:7c:d1:01:56:4e:a3:2e:be:f5:09:
         4f:c4:45:cd:ac:b7:08:0e:3d:47:33:f7:66:03:27:d4:59:5c:
         90:0b:69:bd:23:ca:0f:b1:d8:0f:e9:2a:17:5f:11:8e:ee:ff:
         81:f7:94:2d:8d:18:37:df:74:26:8b:52:2d:c6:02:a3:96:9c:
         24:0d:f1:29:ec:24:3d:b2:df:80:67:99:4c:7f:93:0d:de:26:
         2c:ac:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:35 2024 by rpki-client on console-fra.rpki-client.org