Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File:                     SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier:          OR2mxDhSBBEXvPiaiyVvaft4NOeiDopQwXbhsnii7/Q=
Subject key identifier:   4D:94:F5:B3:7F:2D:5A:82:65:A4:FB:17:4E:B9:82:0C:39:F2:5D:85
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer:       /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial:       019369D9120F09E500DA36642DAEA28F8EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:00:53 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:53 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:53 +0000
Files and hashes:         1: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: rbcqLzZN5oJvO7ZIQpe70H6Y7V8/KfUjSp6MKBoW0WM=)
                          2: mOB-vH5P9l16XieJ9e6EAZlDH_Q.roa (hash: WFerFQXdO2cGddbnEIXF0+YxFqWS7wDyvIZiQKENpp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:12:0f:09:e5:00:da:36:64:2d:ae:a2:8f:8e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
        Validity
            Not Before: Nov 26 19:00:53 2024 GMT
            Not After : Nov 27 19:00:53 2024 GMT
        Subject: CN=4d94f5b37f2d5a8265a4fb174eb9820c39f25d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:b5:b0:6e:1c:b7:af:87:78:61:d4:c1:56:
                    d7:92:43:57:7d:7c:96:b1:92:ec:12:ae:5e:06:95:
                    4d:e0:ed:52:f6:b1:c0:66:87:65:66:da:c8:d7:fe:
                    11:e7:87:97:12:06:05:7d:7c:b6:03:f5:bb:12:14:
                    14:8f:bd:74:e3:8d:98:26:9a:26:6c:e6:f5:67:d9:
                    a1:1e:d2:c1:3f:90:94:4b:9c:eb:4e:b6:e9:53:90:
                    c3:be:7b:8f:fe:c7:2c:a5:3d:b2:63:e4:6b:66:f2:
                    0d:17:67:54:3e:54:48:2e:4f:16:da:a6:19:0c:12:
                    66:d8:60:d1:7b:34:e5:53:b4:d8:45:5a:98:87:ea:
                    5f:b7:02:a3:8c:c5:5a:73:17:df:86:48:bb:c7:bb:
                    32:36:8c:f1:79:2c:1b:c0:34:70:da:87:3d:4b:08:
                    ff:19:fd:02:27:a4:81:6b:a4:e0:3f:54:f4:a4:6e:
                    07:da:ee:b1:6c:7d:bc:2d:52:3f:59:cb:71:fa:f3:
                    d8:ed:88:63:6d:6f:9f:fc:0b:e3:e0:78:69:cd:7c:
                    e2:ab:a5:aa:fe:21:b1:ee:67:c0:56:17:e8:01:e4:
                    74:1d:09:47:38:89:ac:0e:66:57:68:13:35:7d:82:
                    53:62:18:7a:45:ec:51:60:97:d6:6d:ff:e3:8b:68:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:94:F5:B3:7F:2D:5A:82:65:A4:FB:17:4E:B9:82:0C:39:F2:5D:85
            X509v3 Authority Key Identifier:
                keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:a6:f3:45:93:fa:77:64:1c:94:c9:07:e8:4d:08:84:5b:
         47:85:c9:83:43:e8:04:e1:ad:fd:62:d3:ab:9d:1f:b8:10:a8:
         6a:16:89:b0:b0:b7:2f:62:1a:0f:c0:43:24:ca:3a:cb:82:93:
         fa:e8:bf:c9:43:53:03:a8:ea:e9:08:58:e3:49:84:34:ee:80:
         81:a7:20:11:3f:23:dc:f0:83:52:f0:ed:db:25:69:2e:86:20:
         f4:b8:71:17:c1:90:36:48:44:04:82:db:b5:24:f5:07:4a:00:
         77:bf:a8:56:98:13:78:c9:69:e0:3e:71:e4:92:57:18:59:67:
         43:44:90:ac:67:b7:52:12:ea:65:27:7b:f2:c8:a7:3b:04:8b:
         c5:11:34:0d:a5:a8:b4:33:a8:3f:0b:18:48:55:02:c3:25:50:
         8f:4e:78:5c:2f:8f:99:92:71:22:fb:e3:ae:1a:06:e1:43:52:
         31:68:38:b4:d3:8a:ae:69:51:1e:b6:43:92:04:e5:1c:fe:a6:
         4e:2b:69:cc:60:a6:cb:40:87:aa:35:64:41:f5:1c:aa:74:f0:
         ce:a7:86:80:09:49:48:a4:7d:b6:a1:12:bb:67:fe:d3:09:99:
         3f:31:fc:57:42:7c:2a:c3:30:11:8a:7f:e4:f6:47:d1:de:c4:
         a5:c0:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:22 2024 by rpki-client on console-fra.rpki-client.org