Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File:                     Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier:          Gta7yuYGLIGlPrOWFMpwvhA5Tgu4yJ4I6OKE2Bv4Em0=
Subject key identifier:   C0:A0:C8:A4:EB:9F:7A:55:47:E1:15:EA:FB:3D:75:2C:8E:DC:16:E2
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer:       /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial:       0193587713829E2F4A7EF1C489CA0B65CF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 10:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:18 +0000
Files and hashes:         1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: pri4UTj+Yvq/zr5AITrWHrKQCrf+puf/ViynhBy47do=)
                          2: ryKDRpywfiUUn-2d-BrdDXToim0.roa (hash: T5MPGIcQRPxSgN71WP3APW17KZIz3mPxWJGFk1UH2n4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:13:82:9e:2f:4a:7e:f1:c4:89:ca:0b:65:cf:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
        Validity
            Not Before: Nov 23 10:00:18 2024 GMT
            Not After : Nov 24 10:00:18 2024 GMT
        Subject: CN=c0a0c8a4eb9f7a5547e115eafb3d752c8edc16e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:fd:ed:95:aa:59:4f:90:2f:e8:dd:3d:3f:
                    80:bf:3d:82:11:b1:6e:c1:27:dd:b5:3b:03:8a:08:
                    92:9c:bd:76:0e:11:2d:57:3d:9c:56:59:53:ff:34:
                    87:4d:57:e9:61:da:a8:46:a6:7c:66:a6:bd:b0:e6:
                    81:4d:5a:d8:83:8c:a3:22:28:d5:87:1c:bf:55:b9:
                    56:0e:6e:eb:a0:f1:c3:a1:4e:be:82:a7:c9:9f:72:
                    b6:f4:2c:a7:5e:62:5b:12:eb:88:ab:52:5f:e7:d1:
                    29:e7:a5:18:98:79:09:93:b2:bf:4b:a3:3c:c2:13:
                    88:df:be:36:3e:ec:77:41:d7:82:e9:e5:6e:bb:91:
                    16:dc:52:1b:ed:42:4a:ff:f4:6f:48:b0:a1:73:d6:
                    4e:fe:09:cc:b5:9c:e0:f1:1f:59:19:10:a7:5d:54:
                    73:0a:0b:7c:2c:28:ae:f8:65:06:4e:f0:e1:94:f6:
                    e5:92:82:c7:7a:3f:40:71:7c:ce:f9:3b:b4:0f:13:
                    9f:43:53:13:9e:e3:83:0a:82:db:88:37:78:1a:9f:
                    80:30:11:ab:ce:e3:13:44:f9:bb:a0:2d:a1:04:ec:
                    7f:fe:4e:3f:39:7b:3c:65:94:78:10:65:8c:a9:ff:
                    37:1e:d0:f2:ef:d3:20:a9:0e:1d:d6:10:e3:e5:e6:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A0:C8:A4:EB:9F:7A:55:47:E1:15:EA:FB:3D:75:2C:8E:DC:16:E2
            X509v3 Authority Key Identifier:
                keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:85:ac:ec:f3:03:46:4e:33:eb:70:05:13:be:08:59:66:
         06:8a:3e:05:5a:4e:0a:21:50:4c:54:b7:50:c7:36:68:c3:81:
         4f:4f:ca:90:2d:21:a7:8d:b9:cf:67:ea:54:52:bf:f7:aa:58:
         15:b4:b2:53:20:d5:29:8a:e7:c8:8e:2e:b1:21:33:43:26:24:
         e7:77:ca:4c:52:51:df:21:80:f2:f7:9d:cb:ae:69:59:71:68:
         9e:90:0c:45:9b:f2:e7:9c:7b:34:03:3e:b1:a4:8e:07:b2:79:
         30:66:92:c4:7c:e2:51:9b:20:17:b2:19:2f:0d:83:1c:7d:d6:
         5d:11:aa:53:c3:86:4c:c3:f8:8a:9d:0f:45:4d:ef:83:76:e2:
         43:05:b0:00:0c:5e:bc:a4:69:7c:f1:e5:6c:19:10:76:7a:66:
         a2:55:cc:e0:1d:55:1d:c3:8a:7f:b5:1c:4a:e9:f9:15:9a:9c:
         b6:e3:33:95:ed:64:14:11:d1:dc:87:b7:73:ad:e4:73:be:71:
         89:e1:a5:d3:36:81:de:b6:82:c7:c6:8b:5d:8e:55:bb:08:3a:
         e3:bc:d3:00:92:91:91:73:4c:d9:ca:57:dc:3e:80:67:d6:80:
         68:3b:7a:a6:97:ee:9e:e1:9d:dd:ab:a7:96:bf:0f:f8:60:7a:
         cd:ce:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:03:16 2024 by rpki-client on console-fra.rpki-client.org