Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File:                     MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier:          XYNyLmsCj5uTFGVhn8AloyLT9w5C3iTCenmipdUJ5h0=
Subject key identifier:   2E:DD:BE:40:F4:62:B5:F1:CF:05:3E:9C:11:CD:A1:E1:E9:F9:AE:F4
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer:       /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial:       019369D93692D3D67C46B64A4F3F05EDC4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number:          137D
Signing time:             Tue 26 Nov 2024 19:01:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:02 +0000
Files and hashes:         1: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: BwB7DFiuy85oK8g0/utrWMEQF76mj+br0wrVKDyzwao=)
                          2: ovSO7D3rn3gd9g788oMzqMvmS5M.roa (hash: GWkKXOsgtrWwECuYhmbY7zILZCB5i1h/DKVANdMqwVg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:36:92:d3:d6:7c:46:b6:4a:4f:3f:05:ed:c4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
        Validity
            Not Before: Nov 26 19:01:02 2024 GMT
            Not After : Nov 27 19:01:02 2024 GMT
        Subject: CN=2eddbe40f462b5f1cf053e9c11cda1e1e9f9aef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:4b:ad:13:bc:6c:1f:64:fe:2a:b2:cc:72:
                    dd:17:63:bb:ab:ce:44:34:6c:b0:7e:90:2b:b7:93:
                    2f:0c:a8:98:98:43:c6:56:3b:21:80:f1:39:19:fc:
                    59:96:e9:11:43:5a:69:db:4d:8f:a5:d1:02:67:c8:
                    07:b5:e8:91:fa:4b:5e:7f:19:4f:19:2c:76:a3:65:
                    92:3b:82:2e:66:ee:f6:a1:87:2d:1f:7b:56:9c:2f:
                    e3:ee:cd:94:4e:9c:93:38:fc:99:30:df:4b:0b:fc:
                    ed:79:1a:23:18:f4:2d:f7:01:e7:84:9f:e8:a6:39:
                    e0:d8:6b:17:98:80:4f:29:6b:de:ff:90:73:c0:e0:
                    54:3a:8a:f5:19:d3:5b:c6:30:2b:b0:f4:38:70:d2:
                    93:76:14:db:35:97:19:d1:fc:d5:9d:83:08:d1:2a:
                    b3:e5:db:ff:4d:ed:d7:66:7c:8a:06:e3:f2:04:26:
                    0d:12:9b:4a:8f:85:ff:90:dc:f3:47:b0:cb:b2:32:
                    d0:c9:12:75:33:91:84:89:34:50:41:5f:c1:46:88:
                    a5:ff:69:2b:8e:b5:f3:8f:9f:45:62:1e:39:52:84:
                    0b:3c:e3:90:fe:bd:6b:84:0c:5f:3a:97:56:63:4f:
                    a3:28:ad:43:47:74:71:96:e5:de:ab:10:76:c4:04:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:BE:40:F4:62:B5:F1:CF:05:3E:9C:11:CD:A1:E1:E9:F9:AE:F4
            X509v3 Authority Key Identifier:
                keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:e4:f3:0a:0c:dc:21:76:b6:2a:66:06:11:0b:a6:47:09:
         50:ca:d6:b8:8b:3e:16:76:47:ec:16:a2:31:03:44:05:bd:36:
         07:4f:43:43:ab:89:49:78:59:a5:0b:32:16:ca:5c:90:dd:30:
         c1:aa:64:31:3b:f2:45:42:a4:57:a4:76:f2:d0:db:6c:81:78:
         e5:3d:b5:b7:df:5c:5d:2e:06:00:58:c2:4d:9b:b9:3f:2b:a9:
         57:75:af:ce:12:52:d1:7b:0f:6f:f9:8e:91:6a:da:a0:df:23:
         4c:97:9c:d4:3a:3e:a8:34:8f:77:1b:24:f6:f5:2c:9e:40:6c:
         12:ba:a0:53:07:47:19:2b:d7:2d:5c:11:f5:ba:81:18:47:7d:
         66:f6:be:e7:01:93:9f:8d:44:a8:be:c3:a9:25:95:e2:c6:80:
         d5:ce:c7:76:eb:4a:08:a7:25:ca:3a:0f:d5:44:cc:80:aa:45:
         c4:d3:93:4f:58:55:ae:19:95:24:bd:23:d9:eb:21:69:a4:33:
         11:81:20:db:3f:ac:5b:1a:4a:5a:2e:5d:a1:0f:c3:df:3c:b2:
         10:83:07:f2:f3:ff:ea:33:a7:0a:ac:c4:4c:1b:f3:dc:9d:20:
         a0:ff:1e:36:7a:ad:b7:2f:8a:7b:73:8d:d8:e0:4b:03:0e:ce:
         b9:c1:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:35 2024 by rpki-client on console-fra.rpki-client.org