Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          a/CU3Zg+I09JTXDB5Z+uAxykgTz9CNBitudJjrs6Km8=
Subject key identifier:   1C:38:BA:61:05:06:DF:59:2F:1A:82:72:BE:18:D9:A1:BA:6C:E7:B1
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       019356F693AEFABA891ECD583CF7555AFDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 03:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:20 +0000
Files and hashes:         1: BQWPqt9jncSZokM-5sUWyJUDhDc.roa (hash: KQ/z7QeZYgLQQn1vELQ2I/HM4J8R9zakq3V1GCY6W9o=)
                          2: EoHuQB5gssXyb-g8ycqeh13VlvI.roa (hash: kByRKC+OzCn4HVekcm/oju/4DsOTZUxfVWUGuSwvekk=)
                          3: jr4FFGrkksYO_J1OpUbXxVZuAp0.roa (hash: nolf6IuTO5JACTNYWgrpWa6SZy4Il93m5SusKd61OBc=)
                          4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: 12Vh4HURrzYE8b/8uDDBkL6ozt7k38AC+/bfeCHmeYQ=)
                          5: meh2smIWjzLP4WYHO9J2COE9VgY.roa (hash: EENMViPCYPPFdMeFAisLS1Xd0dJQLylDIW2fCQVhU4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:93:ae:fa:ba:89:1e:cd:58:3c:f7:55:5a:fd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Nov 23 03:00:20 2024 GMT
            Not After : Nov 24 03:00:20 2024 GMT
        Subject: CN=1c38ba610506df592f1a8272be18d9a1ba6ce7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:99:b7:fe:fa:48:59:98:12:bd:90:21:a5:
                    2b:f9:c8:8e:10:f7:b6:af:dd:ce:ee:f3:9d:c2:b2:
                    b9:cd:01:bd:09:b6:71:7c:b3:42:37:24:18:67:ae:
                    07:5e:0b:1b:f8:ae:18:90:e3:95:00:8e:df:11:10:
                    be:26:4e:b1:5f:d4:64:39:af:c8:f2:34:ff:dc:26:
                    92:72:eb:82:d5:44:a7:47:18:2f:6d:d2:63:c9:46:
                    2b:9c:b6:6d:c7:2d:05:d0:16:df:46:12:a6:75:97:
                    96:a3:24:24:5c:4a:90:f0:bd:43:f4:f7:72:83:d9:
                    51:7a:4c:a0:43:2e:0e:e4:a0:f9:5a:e9:de:7b:f1:
                    c5:ee:53:23:f5:75:11:a2:0f:08:23:ac:4f:3a:39:
                    57:ab:62:b8:bb:d3:79:aa:75:d4:37:cc:c7:b9:85:
                    3b:c8:03:bc:26:5c:ad:de:17:71:49:d9:b1:94:27:
                    fa:5d:73:eb:17:9c:3b:36:8d:16:00:f4:33:d2:9c:
                    51:dc:3f:da:ea:df:27:60:c5:cd:44:39:45:7c:b1:
                    a4:12:69:cf:d0:07:0a:f0:df:41:d8:44:a4:72:16:
                    2c:90:78:2e:a8:d0:61:3f:ac:a7:b1:cf:5a:c5:fa:
                    6b:07:10:54:ae:a1:db:1f:d1:ee:b4:9d:79:07:cd:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:BA:61:05:06:DF:59:2F:1A:82:72:BE:18:D9:A1:BA:6C:E7:B1
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ab:f7:96:56:69:b1:3e:f6:5c:0d:a5:22:25:4e:58:36:8b:
         10:ac:15:bc:bd:87:53:5b:e6:ba:d3:a1:d0:1a:c2:46:dc:bd:
         bb:3f:78:90:c6:f3:be:10:d6:c4:e2:52:61:a4:87:4d:fe:da:
         78:ed:95:b4:3c:a8:54:87:6f:b1:20:20:4a:83:29:f8:33:eb:
         96:a5:a3:c0:35:49:0b:d4:1e:71:33:3b:a5:fe:bf:5b:54:96:
         9a:d7:c0:20:33:3d:71:94:f5:3d:d2:3f:53:ac:00:d2:f4:9e:
         9c:2f:d1:9c:e8:54:a2:c8:77:ca:14:05:1e:02:b9:43:11:c8:
         ac:5b:3a:85:74:39:8f:26:66:8b:37:c8:6c:9f:8d:01:6b:21:
         c8:82:75:a5:07:94:23:aa:c9:a2:7d:c9:ec:07:2e:06:0f:3d:
         be:5a:72:14:cf:1c:f6:2b:84:fa:95:a4:7c:dc:74:6d:0c:e4:
         1d:8b:7c:e5:7f:62:63:da:06:b2:24:26:2b:94:f6:d3:0f:88:
         af:fe:e3:68:92:ea:b6:27:0d:9f:2f:25:c7:a6:bd:44:9c:11:
         0f:d7:36:6b:3d:3c:b7:25:d6:42:e7:15:76:47:7d:f6:8e:19:
         a7:52:ed:7e:3d:a7:3e:3d:46:b0:2c:1b:75:fb:6f:5e:ac:e2:
         04:c5:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:03 2024 by rpki-client on console-fra.rpki-client.org