Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File:                     EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier:          D7Rc2ZHu/DrlDjZzCe4Rjt11bCLcXgYvNL99eV416Eo=
Subject key identifier:   D4:28:C7:9C:33:44:4B:00:F3:2C:8C:BA:60:A9:63:F0:0F:D8:37:C6
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer:       /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial:       019355AD5A563F6FC89CFAD6ED52D09CB5DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number:          10AB
Signing time:             Fri 22 Nov 2024 21:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:44 +0000
Files and hashes:         1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: H71Etcn6+wwWICibUbAtsueGhgTfFcPO557SBs5pnJE=)
                          2: aAR8LBeel36AvKyXAX2cZd_1KBc.roa (hash: ciZkfh9cEMkSxhr4al1V4wlKznpshyJBuktiqkhhCKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:5a:56:3f:6f:c8:9c:fa:d6:ed:52:d0:9c:b5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
        Validity
            Not Before: Nov 22 21:00:44 2024 GMT
            Not After : Nov 23 21:00:44 2024 GMT
        Subject: CN=d428c79c33444b00f32c8cba60a963f00fd837c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:97:9b:3c:ff:f8:f4:0c:19:9f:46:af:ea:
                    75:3c:1a:79:98:22:0c:31:b3:4b:2f:ec:88:18:da:
                    28:f6:58:eb:7c:23:7c:fa:af:1b:76:d2:bd:b5:1a:
                    40:da:db:a5:f8:e7:50:40:ce:cf:01:e7:c9:47:84:
                    64:d3:51:28:12:b3:97:d3:23:18:07:c0:3a:79:d7:
                    73:cb:8a:cc:95:45:02:44:e1:8c:c6:17:a8:59:37:
                    be:99:e4:13:b6:87:c1:ec:78:be:07:56:8c:b6:60:
                    c8:28:18:e4:60:9a:b0:64:68:ec:3c:40:58:22:77:
                    4c:07:3a:ea:b2:6c:19:49:f2:38:df:1c:90:2a:6b:
                    af:3b:fd:db:8a:a5:95:ba:56:9b:84:02:13:46:54:
                    25:55:2a:64:8d:07:d5:ee:d3:5d:30:c9:cc:0a:0a:
                    0d:65:63:64:f3:55:a8:62:d3:89:90:12:cc:28:02:
                    74:e5:dc:42:92:d5:fe:01:20:63:7c:a3:5a:26:0d:
                    18:1e:89:17:4f:f1:93:61:e5:a2:29:70:e6:d3:78:
                    b6:91:12:51:f4:f5:8f:49:d6:67:2b:57:bc:08:44:
                    78:2c:5b:f8:d1:15:95:21:2d:8e:89:e5:20:d2:7f:
                    5b:08:16:75:e5:1f:0e:38:c1:9e:45:5c:c4:71:0a:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:C7:9C:33:44:4B:00:F3:2C:8C:BA:60:A9:63:F0:0F:D8:37:C6
            X509v3 Authority Key Identifier:
                keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:5a:eb:45:ac:fa:41:c9:70:24:50:18:84:0e:1d:ed:57:
         f6:8e:7e:b0:59:8c:c2:f6:e1:88:8e:cd:c9:e5:b2:75:3d:b5:
         89:05:61:a4:00:9a:50:43:0c:ac:3c:f8:fa:9a:bd:c2:c3:89:
         a7:d9:8a:96:63:82:34:d7:df:9a:0c:96:73:57:9b:d5:c3:f9:
         14:fe:e1:42:54:21:c5:60:b9:21:ab:b0:98:42:4d:77:25:8f:
         fb:3b:b7:b7:ca:85:cf:aa:bc:57:8c:14:3c:b9:bb:9d:6d:3e:
         32:08:af:fc:93:31:5f:1f:40:6f:48:55:19:eb:6e:af:a0:b1:
         25:d4:19:50:b6:49:b1:37:b1:4d:8b:70:86:a5:35:35:01:41:
         17:fc:d7:c0:a0:1d:f0:93:cf:4c:1c:50:06:d4:7f:61:f1:4f:
         89:21:73:a5:81:d2:e6:d5:b6:a3:bb:d4:c4:67:58:d4:84:d0:
         e7:ea:dd:69:80:cf:a3:25:0e:65:80:b1:d9:d8:12:20:22:dd:
         26:c1:76:0b:40:39:f5:4a:e7:3e:56:b0:6e:9c:b4:2d:3b:ad:
         87:92:ea:c6:47:32:29:bb:4a:51:e3:e7:3b:ff:26:55:e6:d7:
         39:d0:97:b2:e7:3e:1b:fc:7d:25:0e:24:cc:ea:87:9b:e1:62:
         21:31:ab:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:02:18 2024 by rpki-client on console-ams.rpki-client.org