Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
File:                     skTScYj-UmvXJjZzgZXR639gYzU.mft (raw, json)
Hash identifier:          uqSVyGLYgwWWl55nuWZr1PozQAYP2t7hoCLubL0leRM=
Subject key identifier:   DB:8A:9E:4F:06:6C:FB:D0:1B:A9:AA:6C:1F:F3:BA:0B:A7:63:B2:D0
Authority key identifier: B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35
Certificate issuer:       /CN=b244d27188fe526bd72636738195d1eb7f606335
Certificate serial:       0193568912D403625C9EB173EF3554503CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:44 +0000
Files and hashes:         1: sMfyarJxsPXbx1K7f3ed-c6ZkHc.roa (hash: QZvxFDM9IBp1mlJCkqCssOQkKDFvliXkVTRvP9Qe3cs=)
                          2: skTScYj-UmvXJjZzgZXR639gYzU.crl (hash: kiK/i8wLhIF57SLrNCntZJC3Vomwrog53OTJOjDQEZI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:12:d4:03:62:5c:9e:b1:73:ef:35:54:50:3c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b244d27188fe526bd72636738195d1eb7f606335
        Validity
            Not Before: Nov 23 01:00:44 2024 GMT
            Not After : Nov 24 01:00:44 2024 GMT
        Subject: CN=db8a9e4f066cfbd01ba9aa6c1ff3ba0ba763b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:67:b0:af:ec:10:68:b2:74:35:e1:c3:93:
                    9e:8b:af:e7:33:4e:94:a8:8c:e4:db:7f:5b:15:03:
                    10:c8:01:bb:ed:61:f0:e5:69:22:40:a0:d7:d0:59:
                    ed:21:7d:84:90:e8:80:e1:29:a3:bf:bd:46:ad:71:
                    2b:da:ef:67:1f:ba:f6:df:d5:ce:cf:65:10:c1:fa:
                    90:e3:97:51:ba:ad:7c:e6:b7:1d:cb:60:56:c2:9e:
                    77:45:bc:ac:33:ff:ad:ec:4c:74:ea:4a:c4:1a:b6:
                    f1:57:fb:fb:ef:96:25:c6:a6:61:f9:22:86:04:b1:
                    57:6c:44:eb:7e:c8:91:cb:a6:76:37:b2:c2:0b:5c:
                    e0:b7:e7:95:00:25:e5:ee:4d:55:10:83:00:b2:5b:
                    17:26:29:6b:21:88:22:95:69:85:3f:36:8f:30:5a:
                    01:63:b3:ef:22:c9:c7:3b:2b:6d:d6:5a:63:ea:c0:
                    26:65:8a:c2:43:aa:c8:8b:c9:e2:a5:3e:1c:45:ba:
                    71:e1:af:2e:c5:79:dd:74:84:96:b8:27:39:c4:9d:
                    4e:ef:6a:d7:f0:1d:6e:ae:e9:a4:fb:39:2d:d0:f5:
                    a7:d1:42:fc:59:75:0f:fb:0c:f7:ef:d4:be:c2:88:
                    3b:c2:d4:05:ef:15:86:12:7a:48:73:fb:01:04:1d:
                    f8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:9E:4F:06:6C:FB:D0:1B:A9:AA:6C:1F:F3:BA:0B:A7:63:B2:D0
            X509v3 Authority Key Identifier:
                keyid:B2:44:D2:71:88:FE:52:6B:D7:26:36:73:81:95:D1:EB:7F:60:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skTScYj-UmvXJjZzgZXR639gYzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2a727b-a745-4339-925a-4d00d6032afe/1/skTScYj-UmvXJjZzgZXR639gYzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:66:aa:32:75:13:e4:b4:db:eb:97:f2:ab:77:7b:9c:e6:
         7d:58:c0:65:25:b0:ba:35:0a:e2:1c:9e:99:a4:98:54:c2:9b:
         e8:da:fa:d3:a6:e4:42:22:b9:46:93:7c:00:7d:54:7a:d7:04:
         40:0f:5e:43:cf:4c:bc:00:ca:12:0c:3f:c1:5b:f1:5b:04:44:
         2a:d4:b5:53:df:94:07:f3:79:41:7a:2e:7c:05:a4:c3:cd:2c:
         01:79:be:d9:de:0e:2a:57:0a:36:d5:f8:ec:43:d9:3f:cd:98:
         c0:4f:29:4f:dc:93:d6:ff:40:e1:9b:26:3d:78:04:7d:1a:d2:
         fe:9b:69:da:e4:7c:ac:dd:95:ea:b2:a9:1a:67:f1:e9:40:9d:
         7b:47:ab:5b:3a:1f:c0:94:02:be:ae:d2:87:23:7a:dc:a7:5a:
         61:6a:a7:c1:1a:5f:f1:73:54:82:62:4d:d6:35:ae:61:08:0f:
         32:18:0d:08:c6:ce:92:fb:b0:28:43:c3:6e:2e:4d:06:65:d3:
         60:5f:bf:22:0a:60:a2:a4:ff:96:a3:04:8c:85:1d:3a:36:44:
         9d:85:a9:00:53:0c:89:89:31:e1:d5:f2:5d:98:ec:7d:d3:4f:
         e9:f1:9a:e5:1c:8f:e5:3c:e6:cb:d3:a7:8c:7f:bc:0e:01:de:
         a1:a1:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:02 2024 by rpki-client on console-fra.rpki-client.org