Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File:                     XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier:          aPRdeIErTj7VfJGOD/Cp18E2VXuerL6e4uMoQrUYcMc=
Subject key identifier:   91:CF:B1:50:CE:61:93:8D:E6:F1:A8:11:9F:CF:05:62:C2:2D:BE:96
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer:       /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial:       019369D98984236C504739C4DF69474265AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number:          0E89
Signing time:             Tue 26 Nov 2024 19:01:24 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:24 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:24 +0000
Files and hashes:         1: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: 0x0IyHtw456GOE9RrdXaF7u/h/z1ib3wkdLCvXLyiXY=)
                          2: nCkKYFo8sR5tnKCHJGxNjymzD-I.roa (hash: YPSo7kPHQdaz2+VVR2O9J1Qo+ddSG7CxhSh9Tr2LsbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:89:84:23:6c:50:47:39:c4:df:69:47:42:65:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
        Validity
            Not Before: Nov 26 19:01:24 2024 GMT
            Not After : Nov 27 19:01:24 2024 GMT
        Subject: CN=91cfb150ce61938de6f1a8119fcf0562c22dbe96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:1f:16:08:94:ef:05:7b:27:cd:dd:89:bf:
                    f8:91:d0:d7:d1:be:3f:fa:9f:fc:db:70:66:fa:0c:
                    8b:20:49:a8:a0:aa:ab:3d:30:66:5f:18:0f:06:14:
                    b4:26:4d:ae:a1:bf:ba:7a:f8:83:bb:f4:30:dc:4d:
                    64:22:f7:b0:b6:6e:d1:d9:7d:db:b5:1f:0f:c9:02:
                    ac:c0:bb:a8:d9:71:f8:b0:e6:65:a6:41:8e:65:73:
                    b4:4d:db:01:79:d5:f1:6f:7c:98:9c:22:5e:a4:f5:
                    2c:3a:74:75:2f:fa:d7:f1:5d:d9:7d:b7:4e:f5:99:
                    e7:d8:e0:04:1b:f8:7a:85:9e:cb:3e:15:eb:a1:8f:
                    7a:5f:ec:f7:ac:ab:ae:67:a5:16:a7:d8:a0:d5:69:
                    ee:8f:da:33:ce:be:d0:cd:07:50:44:2e:3c:34:55:
                    fe:0c:bd:03:30:7d:91:55:e6:8c:ad:1e:7d:de:ae:
                    31:dc:44:20:4e:a8:d9:e4:bc:e6:f1:e0:2e:3c:e2:
                    8d:20:99:a7:15:98:17:e2:16:28:a9:9f:1f:d6:f7:
                    da:7f:23:d4:26:09:38:d2:39:b4:7c:15:43:a1:59:
                    b1:ec:04:a1:b4:b8:f0:80:cc:11:f5:37:9f:b5:a9:
                    50:5f:5c:24:44:3c:14:98:2c:28:47:69:bf:72:71:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CF:B1:50:CE:61:93:8D:E6:F1:A8:11:9F:CF:05:62:C2:2D:BE:96
            X509v3 Authority Key Identifier:
                keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:46:05:12:19:fe:db:ce:cd:43:fa:fd:08:8c:2f:89:86:
         01:a6:05:30:e0:60:80:8a:9c:b3:7b:62:9f:e5:eb:13:68:65:
         2c:80:b6:b8:35:6e:41:a7:4b:6d:4b:04:b6:6f:c9:eb:6f:c1:
         9d:c4:a4:59:78:a0:6c:72:97:0f:5c:64:bb:14:c8:9a:ad:fc:
         dd:ce:f9:a5:69:31:33:55:14:19:63:c9:02:1e:ea:ea:cd:54:
         7c:65:96:40:c7:93:de:60:e5:33:dd:64:f9:8c:74:0a:de:d7:
         ac:dc:d1:b7:0d:dc:6c:36:8c:0a:5f:86:44:27:04:36:56:e0:
         46:83:9c:1b:59:71:0a:dc:32:e1:a7:d2:a6:2c:d8:a4:06:0c:
         eb:65:af:cc:43:2e:b0:cf:be:7d:08:fc:79:b8:d9:4e:b5:fc:
         2f:e6:9f:1b:d5:66:62:8d:b9:53:42:64:67:fa:cc:ab:4d:81:
         0a:0e:a4:a6:a7:61:c6:26:81:2a:f6:6b:80:41:c3:8d:92:38:
         4d:40:92:e9:4f:07:dc:ba:ef:46:55:ab:70:4c:9f:61:21:2f:
         a4:e5:ae:59:8c:7e:33:35:6c:63:28:a1:32:01:10:ce:f4:d2:
         aa:be:5a:9e:6f:0d:1a:37:87:1e:6d:f2:54:d3:d0:dd:ec:c5:
         7f:ef:6c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:52 2024 by rpki-client on console-fra.rpki-client.org