Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          vF7ViTvy6mx4rZLEEUG5g/91du7lD31AtzR4rOAbvXE=
Subject key identifier:   02:92:BE:25:5E:75:DF:BB:6F:36:D3:93:9E:15:B7:D7:C0:EB:93:26
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       019356BFA5AE59997469FE117B76EAD52990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          44
Signing time:             Sat 23 Nov 2024 02:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:20 +0000
Files and hashes:         1: 24l6Op1CuHePBCuZy9Fr6KL083U.roa (hash: PSJQ/iPEh2j19CGvuWVJ8+qvgiX2c2wpv2THmoMyg8U=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: AaxRikqw8A2wMlAaIdQSPDPfBPBqtokp+hAaItMHPWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:a5:ae:59:99:74:69:fe:11:7b:76:ea:d5:29:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: Nov 23 02:00:20 2024 GMT
            Not After : Nov 24 02:00:20 2024 GMT
        Subject: CN=0292be255e75dfbb6f36d3939e15b7d7c0eb9326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:7d:9c:13:ca:ae:a5:2e:73:ba:14:7f:af:
                    98:21:6d:0a:fa:3f:ed:b4:1f:85:05:f0:52:1a:d9:
                    35:9d:4a:f4:e3:de:85:6d:4f:80:cc:4a:df:c2:54:
                    09:52:47:af:fc:68:67:f3:42:1f:77:e0:ee:99:39:
                    79:0a:aa:37:7f:6a:6f:7c:b1:9b:2e:b0:c0:be:71:
                    24:d3:9d:51:b1:8a:07:14:b2:b1:2e:95:e2:5d:c0:
                    f3:8c:85:e1:5e:44:7a:e7:8d:17:6a:a8:15:01:b6:
                    be:c5:d2:ea:9c:a6:6c:44:f7:e5:60:c3:99:5d:ad:
                    21:e3:c9:77:71:25:5c:48:0b:cb:f7:f3:99:4e:da:
                    5c:1c:e9:4c:4e:61:a5:23:6e:ed:25:f5:a0:15:71:
                    3c:54:6c:92:fa:58:d6:08:38:7e:8c:fb:bc:fb:68:
                    c7:2c:f4:95:b1:41:3a:52:e9:ab:c3:1e:bd:23:32:
                    14:43:00:83:e7:4e:eb:cb:44:90:52:83:7c:75:ef:
                    2e:be:f9:9f:b0:8e:d0:57:12:a6:6f:e3:dc:6f:e3:
                    49:e6:f0:2c:aa:43:d6:89:6e:b1:f4:33:c7:8b:65:
                    d7:52:08:1f:0f:be:02:1e:42:3c:dc:de:46:ab:5e:
                    f1:23:f2:7d:ed:8f:3a:4f:cd:8d:9e:4c:02:22:3c:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:BE:25:5E:75:DF:BB:6F:36:D3:93:9E:15:B7:D7:C0:EB:93:26
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:07:c7:62:d2:78:d7:18:16:ed:c6:30:28:45:cb:26:ea:
         9c:23:e4:30:e0:cf:53:ff:a6:b0:71:07:76:89:97:f2:85:17:
         a4:b0:00:fe:ac:92:f0:27:b8:70:01:8e:c0:d1:56:ed:fc:49:
         ff:35:d0:52:3c:f0:c4:af:4e:5d:85:e8:32:0a:7b:28:ed:fc:
         b2:81:d0:cb:5e:6b:34:9f:2d:0f:0e:b6:8a:9c:6e:a7:c4:98:
         9a:dc:c6:2b:bd:a3:ba:3f:a5:a5:1b:d0:5f:d4:a5:fa:a8:86:
         e8:f5:cc:00:44:bc:10:37:f9:48:35:76:62:2c:0e:81:0f:0a:
         8b:2a:5f:bd:a3:25:ad:74:46:89:43:a4:5c:88:da:49:b9:a8:
         5c:89:59:10:4e:3c:60:29:7c:d0:72:26:70:df:f8:c8:88:12:
         7a:eb:e7:99:6c:3b:fd:3d:86:fb:0d:10:7c:34:e2:b3:fd:c9:
         43:f7:eb:51:75:2d:0d:1f:10:d6:e6:3a:24:42:89:3e:4a:a5:
         87:22:cc:41:f2:9e:f1:f3:b2:fb:66:46:f3:ff:c8:1c:46:8e:
         e2:d6:34:d9:f7:ac:48:14:2e:b6:b0:8a:2c:e0:43:9f:0c:72:
         50:f2:ee:83:83:dd:27:a2:c3:2a:c9:1a:78:22:57:2d:7f:59:
         6a:b7:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:49 2024 by rpki-client on console-ams.rpki-client.org