Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
File:                     IL1wLdeAC2HJbFD0Kka2lJsijbs.mft (raw, json)
Hash identifier:          /IotLAZOa+Ky2Fnrb2UxhBvdMUhVUShRG0imKptuiSs=
Subject key identifier:   5D:7D:E0:74:84:53:6F:09:D9:30:A7:2E:BC:93:85:76:2A:0B:6F:AD
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Certificate issuer:       /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial:       01935689EBD6CCE464E253ED1664E5562EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
Manifest number:          08C8
Signing time:             Sat 23 Nov 2024 01:01:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:39 +0000
Files and hashes:         1: IL1wLdeAC2HJbFD0Kka2lJsijbs.crl (hash: kMkVQYPR0N1uNQHnT4Byg3OcJHSJ2rpDIYpM5ku6808=)
                          2: x0pXO_c3PyKW6Ov9xeTBZqjWaSc.roa (hash: DU/hf94jWFV9xBHc12rqbwHtthzJSj3EEaBU9pzqm0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:eb:d6:cc:e4:64:e2:53:ed:16:64:e5:56:2e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
        Validity
            Not Before: Nov 23 01:01:39 2024 GMT
            Not After : Nov 24 01:01:39 2024 GMT
        Subject: CN=5d7de07484536f09d930a72ebc9385762a0b6fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:93:f2:16:ae:2f:7a:ec:c3:c0:ac:19:25:
                    88:91:a4:f7:74:77:f5:91:8d:99:23:5b:59:fa:f1:
                    78:eb:66:87:25:e5:51:24:e6:03:fb:13:8c:16:65:
                    9a:76:37:d1:5c:fc:8f:3c:ab:fc:0f:4f:59:db:ec:
                    7e:c9:27:5c:03:af:65:fe:d4:63:8e:ad:da:6f:9b:
                    99:6d:30:d3:95:38:51:19:30:8a:81:b4:a3:6e:a8:
                    83:85:f5:a2:6e:7d:bf:6c:be:44:24:bd:8f:03:89:
                    c7:e4:26:72:96:0f:05:40:b3:29:7e:7c:2d:db:ad:
                    23:2a:e1:f6:6b:71:ab:68:18:8c:ab:1e:44:c6:19:
                    ee:b7:59:f0:09:24:45:87:a9:e8:15:81:83:af:a0:
                    48:7a:df:94:4f:71:ce:69:da:c3:cf:30:2e:0a:1e:
                    6e:59:3e:78:ef:56:6a:6c:b9:ea:4f:e3:f0:90:fe:
                    14:41:68:cd:db:14:02:b3:b5:92:f9:61:1e:82:77:
                    02:3c:9d:f6:e1:94:77:61:5a:37:d6:54:55:9c:ad:
                    5c:7e:5a:5a:41:f0:78:3a:66:55:9d:22:a9:34:63:
                    95:63:da:12:88:66:99:de:43:22:81:56:fb:67:1f:
                    03:d2:15:14:dc:44:61:e1:65:d4:2b:96:bd:ed:03:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7D:E0:74:84:53:6F:09:D9:30:A7:2E:BC:93:85:76:2A:0B:6F:AD
            X509v3 Authority Key Identifier:
                keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:1e:86:d2:0d:a1:df:75:31:37:94:df:65:b5:fb:ee:34:
         10:02:18:76:71:27:83:89:f5:05:9b:bb:6b:85:1d:1b:dd:df:
         2e:4c:02:f0:a6:69:07:ea:5e:ef:59:3d:35:22:28:1a:d5:2b:
         96:4e:03:12:95:21:34:8f:ca:1e:8f:80:ff:f9:16:9f:af:d0:
         27:e4:9e:9b:a6:be:bd:f7:ce:c2:d6:4f:d8:a1:90:b7:22:b7:
         6a:59:9f:fc:38:d3:80:c4:35:40:d7:46:96:e1:b8:ab:12:b8:
         ec:dc:2b:7a:1d:28:2d:a4:20:49:50:76:3d:86:94:c6:a8:de:
         b4:98:33:c8:89:a8:e2:0e:a4:ff:c1:97:bb:5e:5e:1e:28:b3:
         08:44:dd:26:ca:d5:d2:5e:ae:be:8d:04:22:50:a3:67:4b:37:
         8b:12:2a:ef:24:12:95:f1:91:2e:30:cb:c2:1c:9a:16:5b:63:
         99:5d:58:c3:e4:8f:44:8f:f1:2c:11:53:c1:a8:b3:79:9d:fe:
         88:69:3b:d0:50:e1:af:a5:85:77:df:08:4f:23:41:41:4a:05:
         83:f4:c7:36:75:fd:11:a5:2c:b4:e3:18:6d:5e:48:63:ee:cd:
         91:a7:79:24:34:57:67:ef:92:5c:55:4c:37:c8:44:39:4f:4b:
         79:73:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:32 2024 by rpki-client on console-fra.rpki-client.org