Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          ZCmbKZIHKkhFuFUJIWEUGl3NwyBxBTSUJdQ3NDs1AbU=
Subject key identifier:   52:C1:C5:CF:DB:BC:35:95:9A:12:3C:A7:B3:80:5E:2E:8F:0F:6B:43
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       019357D299CB0E380C8D4912961968333E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0998
Signing time:             Sat 23 Nov 2024 07:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:39 +0000
Files and hashes:         1: AShzzu461aMsgDfr0d-dFeDLURA.roa (hash: SUSyoLfXQCgJ8O+trz5WO6abOaTO+aAuCWk8yxFaNXc=)
                          2: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: q7zsh3+FN+Jv7MV3AV6pNqwAb/iSWKtGiZeL4GGXdC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:99:cb:0e:38:0c:8d:49:12:96:19:68:33:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Nov 23 07:00:39 2024 GMT
            Not After : Nov 24 07:00:39 2024 GMT
        Subject: CN=52c1c5cfdbbc35959a123ca7b3805e2e8f0f6b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:04:a9:4c:1e:42:9d:d7:33:5a:74:e7:79:
                    04:da:40:29:b2:94:55:48:0e:15:9b:9d:da:46:1e:
                    82:f0:b3:9e:64:e7:77:89:ed:0e:da:c5:48:65:20:
                    cd:4b:af:51:0f:bc:67:45:29:8f:2c:ee:9b:06:a8:
                    b7:4c:7c:09:be:d2:82:6b:13:66:b2:b8:ae:db:b3:
                    2b:19:18:b3:07:3e:fd:64:2b:92:0f:20:d0:2f:94:
                    c3:c1:dd:7d:7c:00:eb:84:b9:9c:a0:ae:c3:92:2c:
                    06:f7:0f:bb:f3:64:13:00:40:e8:bc:02:41:ce:15:
                    f6:e7:47:bd:3d:56:82:59:2a:b2:75:e0:69:a5:ed:
                    ca:c7:3d:3e:d9:15:7f:a8:59:c7:9a:1e:c1:4d:f9:
                    bb:75:9b:31:61:df:8c:5b:37:ac:3e:50:fc:f9:5b:
                    62:df:ab:72:fd:89:e7:89:97:53:b2:db:19:aa:43:
                    0c:4b:fe:61:59:44:43:00:23:b7:3a:17:4c:86:3a:
                    3d:1f:8c:7c:de:56:57:e1:b2:04:4f:c0:d8:ff:a7:
                    ed:ec:87:3e:3a:44:84:59:a4:3a:1a:84:b1:65:0d:
                    83:50:de:b0:d3:8b:bd:f6:80:88:d0:85:2b:e0:68:
                    78:42:6e:7b:26:d5:0f:fb:01:01:84:3d:5b:6f:85:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C1:C5:CF:DB:BC:35:95:9A:12:3C:A7:B3:80:5E:2E:8F:0F:6B:43
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:18:4b:a8:8f:18:74:68:a0:52:fb:60:63:c4:df:11:94:ae:
         bc:eb:6c:3a:f9:2a:ae:28:63:df:5b:f4:b3:78:92:f6:3e:c3:
         78:e4:7d:6a:31:18:eb:26:35:e9:a2:3e:80:30:58:89:64:54:
         45:e1:47:01:da:69:2c:c4:07:77:ee:c8:fa:4d:11:da:21:ed:
         2f:26:dd:7c:d4:e8:4b:f9:a2:4e:9b:88:33:45:17:1b:11:cc:
         4f:ac:53:63:e5:6c:c4:f9:57:a1:7f:7d:2c:3e:c6:cb:62:07:
         87:28:9d:2e:c7:63:ef:ac:c0:ef:47:f3:1c:cf:ee:35:63:96:
         70:3f:c6:ac:14:1d:11:a6:a2:b9:f0:ad:78:52:b2:7d:bd:ee:
         41:b0:30:dc:51:f7:5a:e3:ac:36:64:6e:a2:20:df:b7:ad:02:
         1b:70:50:8f:0d:9b:9c:63:01:52:b2:03:e8:2b:42:c1:75:5d:
         8a:b2:44:ac:a4:1e:94:66:72:cd:ed:ed:e1:1e:8e:42:a0:4a:
         e4:c7:69:f4:7a:5d:4b:ed:d0:3b:79:d0:99:4e:0e:a9:84:a8:
         c4:72:a9:c0:36:1a:0c:be:8a:3a:cc:3b:5f:c4:22:56:0b:d3:
         e3:40:c9:c5:a1:b9:0e:d3:9b:3f:6e:17:ac:32:b5:9a:0d:49:
         c1:a7:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:35 2024 by rpki-client on console-fra.rpki-client.org