Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File:                     kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier:          Eboo9yPVRhwreuy5lwZmIYVR3iA20PMWhmPUEZDw6p0=
Subject key identifier:   4C:E0:4D:03:79:96:BA:B0:34:C0:3C:C5:C7:B6:4E:63:A2:E5:CA:E8
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer:       /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial:       019369D977BFF3463B205335ABD0E0517E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number:          11C0
Signing time:             Tue 26 Nov 2024 19:01:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:19 +0000
Files and hashes:         1: DcrO2QnbyGAncnZhxbQE6uW_REA.roa (hash: olZwRytyl0MYj/rFrl5v1HcF+mKlcLit3NBNtwz0ous=)
                          2: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: qI3e0PKWLmq+dDDAH/zLrMbgD8obAtyxxiFwEHtN1V8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:77:bf:f3:46:3b:20:53:35:ab:d0:e0:51:7e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
        Validity
            Not Before: Nov 26 19:01:19 2024 GMT
            Not After : Nov 27 19:01:19 2024 GMT
        Subject: CN=4ce04d037996bab034c03cc5c7b64e63a2e5cae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:71:5b:e7:52:e2:52:89:03:da:56:64:e1:
                    cb:e5:4d:6f:5e:40:ba:fc:4a:3a:ba:3a:c4:9c:51:
                    bf:94:14:f1:a0:71:37:71:d0:04:24:4f:16:5d:6a:
                    1c:10:50:12:0f:8c:c0:be:97:0e:ea:7c:68:cc:2e:
                    70:4b:84:02:b5:d6:f5:ff:2f:64:ec:8f:6b:64:e1:
                    35:9c:ce:ad:75:43:5c:bd:4b:42:bc:07:52:74:10:
                    b1:80:4f:89:b2:d7:2b:0c:9c:18:75:ce:de:2c:43:
                    db:2a:bb:21:9e:be:df:7c:3c:e4:94:d0:74:40:76:
                    74:e3:32:e6:55:31:61:74:28:92:d5:a5:b8:fe:b0:
                    c4:cb:36:3f:08:75:2f:ad:76:8a:fc:fb:46:cc:2b:
                    21:8a:34:a6:3a:b2:84:f9:fb:54:ff:b7:b8:90:f9:
                    f8:b4:9f:41:71:cb:51:61:83:52:35:2c:46:ff:69:
                    53:4f:9d:60:d9:13:72:6d:0c:7e:3c:ad:7b:6c:ad:
                    05:0f:02:73:5c:38:9b:35:5a:61:3c:54:f1:d4:0c:
                    2e:07:c6:6c:f9:88:8e:d0:68:3a:4a:c7:a1:ad:5d:
                    97:95:8c:d5:25:2f:ce:19:df:db:e6:78:d0:77:dc:
                    76:d6:58:dc:f7:33:ee:65:6d:d6:8b:a0:ce:f2:77:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E0:4D:03:79:96:BA:B0:34:C0:3C:C5:C7:B6:4E:63:A2:E5:CA:E8
            X509v3 Authority Key Identifier:
                keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:c6:cc:21:90:74:92:ce:00:c5:03:db:f8:c5:cb:7a:98:
         88:4a:4c:49:10:ab:87:d6:c0:88:04:df:05:20:93:c2:6b:35:
         5e:d8:02:8e:20:8f:c8:3e:45:d0:e6:ba:23:8a:4f:2e:86:1d:
         c3:2e:69:de:e6:a0:8e:cf:bd:f0:83:c5:be:cc:90:e9:38:e0:
         b5:df:69:5c:85:9d:8e:0b:67:67:80:60:ed:d2:cb:8f:23:e9:
         fe:b3:92:1a:81:ea:f5:4c:46:a4:4a:9b:71:ee:f5:34:40:a7:
         18:39:2d:45:3b:be:ca:4d:8a:39:ca:09:34:7f:a6:01:49:0d:
         d8:d1:16:aa:83:1c:bb:98:75:1e:3d:7f:d1:ea:4d:89:8f:84:
         4a:45:b4:21:a5:de:16:81:94:41:1e:8b:e0:b9:d0:63:20:4a:
         04:38:25:a7:5f:4a:49:27:de:e7:3c:96:6f:e0:8b:1e:e4:ce:
         12:6e:77:ef:3e:08:a7:9d:11:ce:52:8a:a6:5f:f2:dc:60:48:
         b0:bc:22:9a:06:92:57:11:4d:0e:fb:51:0c:c4:eb:92:e3:ff:
         bf:f7:7c:8c:79:86:14:d6:10:2b:40:96:26:7d:02:37:5b:70:
         f5:2b:e4:84:4f:93:d4:1d:a4:0a:95:bb:11:0c:7e:eb:b7:3c:
         d6:74:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:25 2024 by rpki-client on console-fra.rpki-client.org