Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File:                     xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier:          QxSoy4n4/+26nLmkwQ7OfTb4U/vUL8F05l5mrFog5NU=
Subject key identifier:   19:A8:D7:79:C1:2B:B0:54:44:FE:16:EB:41:AA:BF:27:C8:61:49:60
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       01935989EA6A48445DD57D51C4A77F3E0AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number:          0B63
Signing time:             Sat 23 Nov 2024 15:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:30 +0000
Files and hashes:         1: ABYhrgYblAzzNP2i7d_edfvqDgQ.roa (hash: 2LW2uBOzh+3fiZu2lPsd3/sW+8Au6DyKrNMDcpvtXRU=)
                          2: EoKTuzMfXMdLbdYlE5peoqq_aBY.roa (hash: 2WR2HoTy2dtqG5vdTvpfMnWWPz7mUQteY+6iD3sCamo=)
                          3: HRVgef9wNvFyVnGlw_up2uU0ltU.roa (hash: IJ84BsDH1J2B9lwHxwyvMBs+SmQRIo1wjjnh5OS+LmY=)
                          4: mLxf1O8ylCsupJ74wJM-9y9IxH8.roa (hash: pZTEZgicYMV5ir1ijyVAV1nTspS1ONCdQzVu9B0r1p0=)
                          5: nZCbq98MlHrgjTuHW9ggPCz4cIQ.roa (hash: cGxafpUBEgZE/ooU9SRBvx9mvfh5I/C7g8YSNzrUJrY=)
                          6: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: ghphddMth8V/9v3OBb81T4lfcWh73YhuKK1kifZtHNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:ea:6a:48:44:5d:d5:7d:51:c4:a7:7f:3e:0a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: Nov 23 15:00:30 2024 GMT
            Not After : Nov 24 15:00:30 2024 GMT
        Subject: CN=19a8d779c12bb05444fe16eb41aabf27c8614960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:73:8a:f3:40:89:c1:75:20:ab:ec:b4:52:
                    3b:42:da:6a:20:8a:b5:3f:c2:94:87:51:cb:96:b0:
                    ab:8d:0e:0b:df:ec:5e:fd:d6:0f:64:81:b8:7c:03:
                    a0:18:10:3d:4b:39:7e:4c:0d:13:33:6f:0d:5a:a3:
                    fe:54:fe:8a:fe:87:8c:01:69:d1:3f:8b:86:3e:a9:
                    16:0a:be:a9:b7:95:91:43:11:db:a2:0c:4b:35:50:
                    4d:44:f9:4f:f8:b3:e0:9d:de:ea:75:1f:1f:7a:ae:
                    c0:89:4c:28:56:06:78:c1:e7:dd:0e:af:42:3c:3d:
                    a7:e1:90:8a:45:de:5e:05:be:32:d8:2b:42:54:12:
                    a0:7d:79:a1:b3:fa:f9:e7:ee:77:19:b7:26:f3:bc:
                    82:f7:84:60:e1:e0:3a:14:e2:cc:d8:27:87:3c:f1:
                    33:cf:c6:3b:97:6b:f8:3c:24:63:88:37:f6:4e:50:
                    13:5a:dc:2e:ab:0d:da:7b:1a:44:b8:10:dc:2e:3b:
                    23:57:af:4d:ea:8c:2e:df:82:55:d3:80:77:9f:7a:
                    97:88:b7:05:6a:01:67:bb:36:b5:b1:04:20:9f:80:
                    3d:85:8d:dc:93:6e:c0:b8:94:15:38:3a:64:19:24:
                    1d:2e:1b:a1:f7:78:8f:f0:73:e4:54:55:61:c9:92:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A8:D7:79:C1:2B:B0:54:44:FE:16:EB:41:AA:BF:27:C8:61:49:60
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:dc:04:c5:94:a1:ab:64:46:45:a3:86:cb:ac:d1:a5:34:
         32:97:c7:aa:bd:6b:44:5f:77:1b:2b:d1:b8:a4:a6:e0:35:d5:
         35:e2:77:82:32:0b:cc:ba:83:c4:65:ad:e8:9f:34:3e:68:e6:
         4b:ca:11:9e:19:ea:c1:da:ab:66:e2:5d:35:8c:18:b9:f3:9b:
         06:1d:0e:06:10:78:36:ad:02:27:b4:31:d4:25:97:33:c1:2a:
         ab:61:d7:7e:ef:ed:7e:26:35:10:54:8e:07:69:39:1d:ef:28:
         c5:1f:4e:ec:7a:80:f9:9d:96:18:ff:42:b9:74:cc:35:b5:76:
         a2:71:35:f7:20:5d:b0:78:cb:82:21:ac:89:3b:7f:a3:00:54:
         16:d8:44:7e:76:55:4d:35:aa:76:be:e3:e8:00:9c:2f:3f:cb:
         3d:2a:7f:c7:58:11:a2:05:2d:11:f3:a2:62:d1:ba:9d:46:67:
         12:90:09:5f:2d:a3:c4:e5:e6:e3:4c:6f:8e:60:ea:e5:23:35:
         1f:a7:39:5f:50:24:6a:45:4e:4b:55:fb:49:54:20:a4:87:47:
         75:e5:b3:84:88:11:71:63:97:e6:62:b3:f0:ae:2c:63:7e:c9:
         b4:6f:04:ec:b2:b3:8f:40:7b:e9:5d:f7:80:8a:20:d5:74:dd:
         c1:4b:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:59:22 2024 by rpki-client on console-fra.rpki-client.org