Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File:                     4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier:          /OhQ42odMopVQFHiR7ut4Fx6a+0kb71StjltMEjFNxM=
Subject key identifier:   8E:BF:B6:8C:54:B4:6D:CD:36:E4:E2:79:9E:E8:FA:83:08:10:A1:2A
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer:       /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial:       019369DA6EEEC6DD71C9CCFF283CFE32BD24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number:          120E
Signing time:             Tue 26 Nov 2024 19:02:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:23 +0000
Files and hashes:         1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: 7c/DLRJ1HXh3ssdqTMNMX6u7TDmCZUF1Zkz3V/s35Qw=)
                          2: YlpFPniypybkZM1ZBw-C8KWUyp8.roa (hash: iooXjvxy+Bk3zY7Voy8fVswxtcpUJRnsGCsiV3Ns50M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:6e:ee:c6:dd:71:c9:cc:ff:28:3c:fe:32:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
        Validity
            Not Before: Nov 26 19:02:23 2024 GMT
            Not After : Nov 27 19:02:23 2024 GMT
        Subject: CN=8ebfb68c54b46dcd36e4e2799ee8fa830810a12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:9c:31:a2:4f:d9:05:69:51:4e:fe:68:97:
                    5b:50:02:10:94:75:97:aa:e1:40:ad:f3:44:18:b1:
                    76:5d:b2:07:b4:a4:91:36:e8:b3:fb:27:b8:19:08:
                    81:30:30:f1:da:64:3b:93:43:81:d1:3e:bc:77:13:
                    01:08:d2:9d:fc:11:9c:78:37:a3:31:06:22:1d:c3:
                    b3:25:32:38:df:c0:26:df:91:e3:b6:fc:7c:59:60:
                    c5:46:fa:99:71:25:de:f1:96:c1:cd:70:88:aa:94:
                    61:af:af:dd:25:3c:43:71:a5:b9:73:99:b8:56:1c:
                    b8:c2:ca:cf:7d:9c:24:fb:0e:f2:b1:45:62:a7:10:
                    93:b4:1f:40:b8:96:b1:58:8b:65:dc:ae:46:cb:cc:
                    8b:79:91:88:ee:62:b1:c1:27:18:04:77:94:f0:d8:
                    fe:0a:b6:72:a4:1f:ef:6b:b6:fc:2e:c8:33:5c:df:
                    0f:e9:dd:11:e0:90:d7:70:24:34:d5:c9:94:45:fc:
                    3c:f4:fa:9f:f8:6a:45:54:b8:15:9f:ec:ce:1c:0d:
                    c6:c5:70:8f:7d:b0:f7:4e:9a:c7:55:c8:44:79:cd:
                    54:5b:00:5a:79:48:1b:e8:cf:22:d8:41:cc:11:25:
                    89:40:89:bf:58:e0:b1:0e:ab:dc:d5:aa:1f:dd:4f:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:B6:8C:54:B4:6D:CD:36:E4:E2:79:9E:E8:FA:83:08:10:A1:2A
            X509v3 Authority Key Identifier:
                keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:92:f9:e2:e0:40:2f:e2:65:e7:62:1e:34:9e:3d:bc:98:
         54:0e:f5:81:e3:02:97:4c:d3:c4:47:2c:9a:a9:e8:a3:07:6c:
         ff:a0:1b:be:d6:be:8d:d0:34:62:54:22:4f:8f:18:9f:cf:cb:
         32:77:22:ed:ef:11:f3:9c:1b:d5:3e:22:02:88:d1:f2:58:22:
         cb:d9:63:a3:96:bf:64:35:1f:41:3e:57:cf:0f:12:ce:8a:ea:
         e2:44:88:f5:68:fc:14:de:f2:e0:72:35:a5:af:a1:a6:39:02:
         fd:2d:e7:43:bc:ea:22:b4:bf:e9:47:01:dc:83:b8:a9:b5:8a:
         81:b9:46:18:0f:b0:d7:8b:a0:cd:dd:01:f7:4d:a8:9a:c9:34:
         50:de:74:dd:6f:a6:00:50:f3:62:b8:bd:fe:9d:93:35:d3:cd:
         e3:ed:75:7f:26:05:eb:0a:67:54:54:99:b3:c5:39:d1:42:ec:
         3d:4a:e1:2b:62:3d:e7:b5:08:48:78:a4:45:32:47:0e:36:74:
         d6:e5:d5:f8:b0:3c:d9:0c:8a:2d:37:9f:9d:73:51:06:61:7a:
         b9:04:b9:a3:91:ae:52:1d:0a:04:b8:ff:74:a3:8a:73:09:7f:
         16:3f:60:16:e6:5b:17:60:e9:8d:b1:f3:3c:b3:0b:9c:bf:f7:
         bc:1d:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:01 2024 by rpki-client on console-ams.rpki-client.org