Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File:                     KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier:          lrqMwXP/Bfw3OR4FhUaRwZhEBIr0ppjK/wsxcQP8has=
Subject key identifier:   8E:A0:24:77:06:AE:FC:38:50:51:38:34:B3:AD:93:8D:2A:A6:56:01
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer:       /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial:       019355E45ED32350EF375565D0BBD63C13E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number:          10B0
Signing time:             Fri 22 Nov 2024 22:00:49 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:49 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:49 +0000
Files and hashes:         1: 2Gwn02oXwH8oQR2zFfAwI330hOc.roa (hash: zO4+mJGBnNlJtttPa2oGHe1kGXI6C/Y7/QpJiPwyXUg=)
                          2: 3amFIw8dITdeiL7bsBGTSc9LFuI.roa (hash: mGJEwDMJx3SRLRhDBOlBu5bwt3Y736jM4D+oHkHCSYE=)
                          3: BfUMbkeX_gf_2qnUC62FjOWyAuk.roa (hash: 6LstKSNz05cGyByd9djYw9nWWmPQjKqLZUtRvj5S5mg=)
                          4: IPK6O1qQhVIBNV3jWkyKvPv8vzo.roa (hash: RBtTSXbAgp41bxyQNH/o56bGUTMcbArdsBtez05NkFY=)
                          5: IZf4xcZGYTUpcOLph8HZ6BqWOBQ.roa (hash: 26begBCigbDtHteMrgB+u5yVdKTnW9LYahuLq2uHFC0=)
                          6: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: HLdbDxOfyzwECyHzE2vINWFkxJWejtZ58CGtp2e3Cu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:5e:d3:23:50:ef:37:55:65:d0:bb:d6:3c:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
        Validity
            Not Before: Nov 22 22:00:49 2024 GMT
            Not After : Nov 23 22:00:49 2024 GMT
        Subject: CN=8ea0247706aefc3850513834b3ad938d2aa65601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:83:0f:08:77:1b:a8:90:8f:85:83:d2:e2:
                    6f:08:a6:97:69:22:83:1e:11:63:91:86:17:eb:0f:
                    7e:31:2a:99:8c:ab:99:ab:7f:4f:4c:85:2d:1e:c0:
                    22:66:52:cc:22:41:89:7e:f5:7d:4f:4c:a0:b3:bf:
                    25:66:58:dc:d3:36:c8:75:7d:62:cf:4f:60:87:84:
                    d6:e0:3f:5c:ee:e8:ff:3b:a0:1e:11:b5:ae:3a:4a:
                    57:cb:43:25:f1:26:6e:59:19:f8:ea:fb:e9:3a:5e:
                    de:f0:87:e6:86:b2:6d:5b:6c:e8:e7:6c:a4:6b:6f:
                    aa:45:15:26:40:a4:8a:27:29:c2:8c:32:0b:e7:1f:
                    c6:2c:3d:10:d2:02:40:38:d4:cb:89:26:7b:96:ae:
                    dd:2f:3a:6f:3d:37:a2:1f:c8:2f:30:a6:8e:0d:16:
                    e1:9e:d6:57:eb:9c:16:17:84:79:43:8f:52:68:63:
                    93:24:90:c2:b2:2a:b3:ab:1b:63:64:c5:38:ee:06:
                    b9:45:9d:0a:7f:0d:50:8b:f9:64:46:84:7a:47:a0:
                    89:87:28:15:45:85:ba:07:e6:6e:fc:d5:83:0c:58:
                    b4:37:47:49:5b:9e:a5:55:46:de:88:59:01:cc:bb:
                    49:b0:cc:cf:04:12:24:bb:0f:8b:29:b4:92:6f:84:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A0:24:77:06:AE:FC:38:50:51:38:34:B3:AD:93:8D:2A:A6:56:01
            X509v3 Authority Key Identifier:
                keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:71:a3:84:ac:72:06:b6:0f:ac:ac:a9:b9:65:87:98:85:11:
         03:c9:6b:e2:8c:a3:f5:d0:ca:68:6f:c8:9f:b0:09:43:63:ef:
         f6:cd:92:98:2c:ce:95:f2:36:d1:9a:19:a2:7d:d5:88:e3:1a:
         e6:c6:a6:c4:66:a5:99:45:72:68:10:a8:94:52:b8:55:fa:35:
         84:d1:16:67:e3:ce:4c:64:02:59:1a:d7:2e:c5:96:cf:1f:80:
         8c:43:8f:54:85:bf:42:cc:af:00:4c:e9:ed:ba:91:c9:d6:70:
         a5:57:43:b7:b5:2e:1a:12:2d:8d:dc:d8:fc:2b:25:76:eb:3e:
         67:e1:bf:08:6d:51:cd:0f:a1:45:06:54:76:d7:3f:72:3b:1c:
         07:16:25:9b:bb:4c:62:a5:57:1b:e9:f6:f9:7e:88:ef:8f:33:
         98:84:17:7b:c3:94:5b:e6:45:9b:09:99:68:9d:d6:8c:3b:bd:
         e2:90:8c:6b:a3:af:4a:56:c3:dd:d3:da:f5:aa:db:c7:ea:2e:
         93:f0:56:5f:6f:2b:bd:ed:1c:a3:6f:2a:c0:d4:c3:fb:30:d1:
         b6:18:d8:7e:fa:da:43:43:e0:d9:1d:7c:6f:28:b1:9a:28:54:
         95:dd:97:f1:e8:a1:18:dd:9f:6a:f6:8f:e2:65:26:bc:b5:7b:
         09:39:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:11 2024 by rpki-client on console-fra.rpki-client.org