Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File:                     XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier:          w6BXdDONCkN1kpey3cbcjqHMEmE0w4DKZDJYhpTNsRY=
Subject key identifier:   7F:FD:BD:7B:6E:59:63:63:86:44:9A:AC:C2:76:6C:F7:70:00:0F:73
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer:       /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial:       0193568A4DE1AC07E8D7C4AECDFA88BC6502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number:          052D
Signing time:             Sat 23 Nov 2024 01:02:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:04 +0000
Files and hashes:         1: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: 7/cA+3+oWQxhCc0Lm0MsRnuaAqrahf87c4hmgnWyvq4=)
                          2: bez8CTOmfoy_WXzEkj5tLsUZ4Eo.roa (hash: s4ipbkjTCxCVmSNCZGW+jlJe1huzb3wcz+OURILjRUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:4d:e1:ac:07:e8:d7:c4:ae:cd:fa:88:bc:65:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
        Validity
            Not Before: Nov 23 01:02:04 2024 GMT
            Not After : Nov 24 01:02:04 2024 GMT
        Subject: CN=7ffdbd7b6e59636386449aacc2766cf770000f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:0a:ae:d9:5d:31:4c:ad:02:a6:10:22:54:
                    bc:22:39:13:6a:e9:6e:7d:c3:ea:cf:b7:0d:72:83:
                    3e:2c:73:e7:f9:a9:5c:3b:00:99:c4:ae:e3:5d:63:
                    03:8c:49:8d:20:ea:40:ef:20:c4:6d:34:45:c2:5c:
                    a0:66:65:53:a7:11:d3:b7:9c:22:a9:4e:7a:53:59:
                    95:54:ab:68:c3:51:39:29:c4:b0:68:15:51:c1:60:
                    d7:1b:48:e2:45:5b:ee:a2:20:fd:16:e2:27:a2:83:
                    b1:2e:c9:39:a6:f7:74:7b:de:53:d6:88:d5:66:80:
                    3c:6a:6e:ac:a0:36:6f:b9:b1:70:c8:d1:d5:03:9e:
                    15:a2:c4:3b:e8:92:4c:3f:95:0b:89:8f:c5:a0:2b:
                    9e:5a:70:f9:e4:b0:bd:c9:30:5e:9e:9b:62:ba:01:
                    07:0d:55:c6:a8:b5:6d:47:3e:b8:e2:66:0e:f8:23:
                    0a:a2:d9:fc:2f:b6:da:fa:3f:09:74:5e:b7:b4:0f:
                    d4:c1:07:36:c8:5c:f8:9d:4c:08:86:5e:d9:95:be:
                    23:b8:fd:a6:21:29:c9:de:e9:fb:dd:63:4f:46:b8:
                    93:fa:bf:73:5e:e3:01:6c:f7:24:ab:90:cd:50:f5:
                    97:e6:4c:10:fe:ff:28:15:3d:da:4c:de:c8:aa:84:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:BD:7B:6E:59:63:63:86:44:9A:AC:C2:76:6C:F7:70:00:0F:73
            X509v3 Authority Key Identifier:
                keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:91:51:72:2b:05:48:fb:45:a7:ed:bc:46:63:7d:6d:24:ee:
         d9:92:cd:79:8d:53:93:be:67:ed:a4:28:75:80:8d:0f:40:1a:
         7c:fc:4f:48:ef:8b:c2:77:dd:53:47:c9:70:83:37:2b:1a:ee:
         90:42:6c:3e:a6:1a:af:f1:ae:37:33:ff:e7:ea:8d:68:6d:2c:
         4e:47:78:2c:78:ce:50:1a:05:66:a5:26:9a:61:15:37:a8:1d:
         ba:a6:b9:d7:a9:df:a8:15:bd:97:0a:1c:43:d5:67:13:35:b1:
         12:02:90:bf:9e:bb:26:2d:bf:4d:e5:cd:7c:5a:30:ec:22:0b:
         48:fc:23:e2:df:b8:bc:4b:0f:45:64:95:f2:b2:84:6a:0a:df:
         ee:c7:32:69:2f:a4:35:2c:eb:a2:dc:84:b6:d3:22:44:66:14:
         a3:8c:34:8e:18:e7:6f:6f:2c:cd:b0:4c:ab:67:54:f4:d4:ff:
         96:64:b7:96:e0:ed:8f:e4:87:ba:b0:6f:22:ac:63:69:7c:0d:
         43:6c:ec:59:fb:4b:59:e3:c0:13:13:a7:1d:f4:e3:15:8c:4a:
         2f:42:98:e8:bd:aa:a1:af:30:b1:b2:bd:3b:db:86:1f:60:06:
         df:a6:e2:c7:11:26:71:9d:b7:46:6d:fb:dd:9d:19:50:a3:48:
         6f:e1:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:53 2024 by rpki-client on console-ams.rpki-client.org