Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File:                     kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier:          f6EGa9IQM42tmGmFsHX2WyHlgR96I0i0FBH6dv/u7ag=
Subject key identifier:   C3:B8:28:60:9E:AC:12:15:03:50:A5:F4:DD:87:36:CE:A6:0D:76:18
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer:       /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial:       019355AD5BA0192FE8EBB0440A324CE0BE42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 21:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:44 +0000
Files and hashes:         1: 2Qgx7oq4VD8_uihrhYGo5S_-d-w.roa (hash: v6DV21F0BPvstCYPM3OgqjUWCfxuP54LKWgIsqvBryA=)
                          2: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: UtWmV6rePEOqrPHWl07LD+jr0EGueRfPJAj0RkgpSNs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:5b:a0:19:2f:e8:eb:b0:44:0a:32:4c:e0:be:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92479cae284765d628044119009880d28a7560b1
        Validity
            Not Before: Nov 22 21:00:44 2024 GMT
            Not After : Nov 23 21:00:44 2024 GMT
        Subject: CN=c3b828609eac12150350a5f4dd8736cea60d7618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:9b:19:a7:b7:49:8f:a1:b0:de:67:08:ba:
                    e3:a7:ef:c0:31:e5:a2:70:73:90:d9:60:7f:0d:1a:
                    28:d0:92:ec:44:a5:c8:a5:55:09:62:4e:73:8e:a6:
                    77:51:87:55:19:74:98:34:71:e7:8f:72:2a:0e:37:
                    35:44:11:29:ba:a3:bb:2d:cb:e6:a4:69:d7:5a:f7:
                    fa:8e:4b:e7:8f:fa:88:b8:15:7b:c7:f0:d6:09:77:
                    5b:6c:59:dd:aa:79:bd:06:01:df:70:6f:89:ec:58:
                    de:3b:0d:a4:bf:29:34:3c:eb:d8:34:75:f1:47:4e:
                    ce:bf:34:a3:c0:ce:78:8e:44:44:57:96:03:df:e9:
                    71:15:8c:5f:0c:b2:c3:c5:59:ce:0a:81:41:0b:db:
                    38:29:ef:f0:34:99:58:9f:f6:e3:73:09:1a:61:81:
                    a0:ed:3d:d8:90:cd:52:aa:cf:c2:e1:90:48:c9:e5:
                    1a:7c:68:cf:a7:d3:90:f4:5c:d8:72:63:07:64:f2:
                    97:07:e1:04:78:5d:fe:79:c5:e2:09:df:96:d6:20:
                    c5:5e:d3:fc:a7:16:1d:d4:97:ca:0d:08:eb:03:d4:
                    47:3a:a7:96:79:07:d7:10:57:34:68:5c:21:ea:9a:
                    5e:85:3e:67:fe:14:be:4d:62:9a:a0:57:b8:9b:10:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:28:60:9E:AC:12:15:03:50:A5:F4:DD:87:36:CE:A6:0D:76:18
            X509v3 Authority Key Identifier:
                keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:74:26:b7:51:12:93:5a:24:9d:d8:d8:58:6d:50:97:fb:38:
         5c:fd:c7:92:73:e0:0c:ba:4d:40:7e:9e:57:20:f7:7e:21:3a:
         30:05:76:2f:d2:af:bd:74:4c:3e:96:d3:20:13:be:73:63:0d:
         cd:5f:33:d9:82:3c:9d:ff:43:20:e3:d6:c5:99:0b:11:68:16:
         31:31:9a:b1:52:37:95:a7:a9:25:ae:50:e8:fe:96:a9:52:d5:
         09:64:0d:eb:60:5c:88:a3:4e:a4:2c:a2:e7:7f:6c:51:9a:2d:
         f5:5c:46:c2:f9:e3:a3:1b:94:35:ad:ec:d2:2b:46:78:ae:b3:
         42:c0:d6:a6:34:96:c6:1d:60:f4:a8:61:ad:f8:e5:2e:a3:88:
         2e:e5:7c:ee:85:e6:90:77:01:24:67:9a:04:8b:2d:d5:2d:e6:
         af:61:7d:8c:cd:cd:1d:de:a7:8a:e6:2e:f5:33:78:1f:dd:fb:
         78:2a:52:84:4e:67:89:58:41:fe:2f:13:1c:06:a3:2c:3e:7f:
         65:34:f2:ca:93:fa:10:c5:96:6a:c6:30:63:b6:d2:0d:f5:47:
         72:14:97:50:fe:9a:90:f4:4c:1e:90:21:29:42:b4:43:f6:89:
         b2:fa:9f:f2:77:ed:6a:c9:59:e0:32:b1:e8:8e:bb:3d:70:ab:
         23:ea:77:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:26 2024 by rpki-client on console-ams.rpki-client.org