Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File:                     K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier:          s1ISmjbfP7ScDCHRaiS0gtCG9eWnvVcbiX8GiBMln90=
Subject key identifier:   05:F5:36:AC:D9:48:91:91:0A:28:C1:0A:79:49:36:46:CC:A8:23:E3
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer:       /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial:       019355E433CA9E30AD6EF7EDF70371A35219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number:          0A56
Signing time:             Fri 22 Nov 2024 22:00:38 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:38 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:38 +0000
Files and hashes:         1: 8pIr2U9Avs68wGpbngAaWVnYaok.roa (hash: QVvTeduVniZFCzh7zynjtSJmLAqP+eYrRr7/gPErius=)
                          2: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: WIZQxQGXXRwfYxtz5oirij4oHWAnkcunt18P+w+N1X8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:33:ca:9e:30:ad:6e:f7:ed:f7:03:71:a3:52:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
        Validity
            Not Before: Nov 22 22:00:38 2024 GMT
            Not After : Nov 23 22:00:38 2024 GMT
        Subject: CN=05f536acd94891910a28c10a79493646cca823e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:7d:27:58:1d:0c:03:a1:eb:44:68:3f:ef:
                    24:56:cd:e7:62:28:9c:b3:c0:71:99:6f:8c:ca:a0:
                    e4:15:94:3d:0a:b8:b9:6c:f0:14:6d:34:98:b2:d4:
                    40:31:d2:ba:56:54:c5:d7:1b:53:07:f7:61:9a:09:
                    06:93:2a:e4:b3:86:ad:83:4e:5b:09:94:ad:1e:df:
                    65:34:65:3b:31:f7:b3:e2:27:1d:ec:fb:07:2c:33:
                    93:8f:c1:f9:03:d6:9a:6a:fe:45:37:6d:9b:98:31:
                    46:3b:5e:b4:b2:f3:fc:1b:1f:e5:f8:12:87:57:eb:
                    a0:d5:f1:2b:bd:07:fb:99:17:fb:e7:4b:27:fe:62:
                    c5:68:6d:b2:58:82:1f:98:a1:9f:f2:0d:d5:5f:19:
                    06:35:ea:54:22:1b:34:32:1b:3c:7c:39:a8:60:53:
                    f1:d4:54:34:7f:83:8c:46:58:4e:c8:93:40:f2:b6:
                    83:84:6f:a3:bd:56:e7:c7:74:b9:8c:82:1a:0f:ed:
                    54:3c:32:91:0e:4c:13:21:b7:02:91:20:33:fe:ff:
                    aa:06:5b:cb:dc:ee:e6:dc:67:8d:25:64:36:7f:80:
                    d4:22:f4:99:67:a2:af:7b:95:98:d8:71:9d:5a:db:
                    8e:cf:9f:3a:d3:9a:ad:59:df:49:91:e0:e9:be:44:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:36:AC:D9:48:91:91:0A:28:C1:0A:79:49:36:46:CC:A8:23:E3
            X509v3 Authority Key Identifier:
                keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:3c:3f:ca:2b:ef:13:4e:be:d4:bb:8c:e4:ad:4f:98:e1:
         3b:3d:44:5c:69:bd:a0:0e:f4:e3:b7:34:9d:82:0e:5c:e5:dd:
         8c:17:83:99:80:48:31:14:23:49:bd:b4:2f:6c:11:54:96:70:
         c8:96:93:bf:93:d3:76:f8:09:db:01:18:db:e8:99:fd:e7:9a:
         82:17:14:9a:50:79:5f:27:a9:40:14:d6:ef:37:c8:14:bb:93:
         ca:e8:dd:3d:2a:a9:ab:e4:b2:2f:1a:67:5b:fb:60:1f:4d:b0:
         47:e6:66:69:f0:ef:38:2b:93:f9:46:64:2b:af:fd:ff:4a:e9:
         a5:65:ec:8b:34:76:79:6d:43:85:6b:e7:1a:7e:73:ac:42:8f:
         9d:89:a0:85:5e:de:06:14:43:a4:50:29:c8:cc:54:02:d2:3b:
         f6:b7:95:38:ca:d4:44:50:05:be:3a:8f:d5:6a:80:b9:b7:9a:
         28:f1:1f:de:d9:02:2b:4e:15:ec:b6:81:53:23:bc:48:3c:18:
         14:fa:df:ee:15:f0:ab:93:cc:24:ee:d1:d2:51:cf:9f:2a:ed:
         2d:32:75:f2:0e:ce:6a:51:42:ac:62:ea:c7:50:42:ca:fd:06:
         ac:19:41:02:2f:ab:92:74:c6:c8:11:23:fc:8c:b7:4e:eb:18:
         c8:1c:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:42 2024 by rpki-client on console-fra.rpki-client.org