Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File:                     k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier:          TkJdrDk23kfn6gzEM+Czj9Z/Ss99aZy3vxWPfQovW1s=
Subject key identifier:   16:50:51:3C:C8:88:C5:70:45:DE:E5:F8:94:00:12:BC:70:AB:D5:E2
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer:       /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial:       0193549BE6F15E14B0D1134AFE51839B8071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number:          0280
Signing time:             Fri 22 Nov 2024 16:02:03 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:03 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:03 +0000
Files and hashes:         1: Y0tXZzS3tiiQuox59ybDNmhxLdI.roa (hash: mAQAyr9yB4+a4jklErZU7KVn6ybjyWwueAQ1XLHns0o=)
                          2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: 8+g4fYdpTso08+PcoRM42dCBmv3Ci4QnWQN6KfoiBh4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:e6:f1:5e:14:b0:d1:13:4a:fe:51:83:9b:80:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
        Validity
            Not Before: Nov 22 16:02:03 2024 GMT
            Not After : Nov 23 16:02:03 2024 GMT
        Subject: CN=1650513cc888c57045dee5f8940012bc70abd5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:09:72:3d:57:8f:9d:64:08:0e:70:93:47:
                    8a:ff:d1:d7:26:5c:6b:22:fb:3c:04:84:b1:7f:b3:
                    06:26:93:a1:d0:3a:2d:b6:a8:00:57:9b:d0:b4:9f:
                    68:67:44:e5:c2:24:ac:7d:05:cc:ab:a7:98:0c:69:
                    6c:b2:c7:ef:05:86:61:be:49:6a:d8:e9:82:b1:93:
                    b3:fc:fe:cb:1c:03:75:87:45:fd:17:c6:fa:d4:2f:
                    c8:77:4d:f6:a8:18:0f:f1:e1:0e:5b:30:b7:a5:1f:
                    4b:13:8e:96:cd:33:6f:d4:c2:a4:58:12:40:6e:e1:
                    a9:1e:f1:2c:d9:f8:94:20:ce:d4:82:f2:15:68:07:
                    24:82:97:46:92:28:0e:ef:bd:1c:74:b8:a2:a8:59:
                    18:1f:bb:15:0c:bd:11:5d:8e:54:99:6f:79:6e:0d:
                    4c:5d:89:76:d7:75:e9:0e:99:d5:8a:02:e7:80:80:
                    be:6e:10:14:58:48:8b:1a:66:dc:77:77:c8:df:79:
                    5f:cd:f3:7f:7f:fa:4a:8b:bb:a1:f7:0a:93:61:4d:
                    b2:e0:43:c4:4d:1c:16:75:d0:42:ad:32:38:70:fd:
                    c6:16:62:52:d3:55:57:30:c1:db:71:08:68:61:84:
                    8e:a6:f9:80:a9:d7:d5:17:e4:fa:ce:a6:5c:6e:f0:
                    ac:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:51:3C:C8:88:C5:70:45:DE:E5:F8:94:00:12:BC:70:AB:D5:E2
            X509v3 Authority Key Identifier:
                keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:7d:19:5a:b3:e1:91:72:b3:db:99:8b:8a:6c:8f:72:a3:
         eb:8e:6a:1b:2e:d2:59:d1:78:34:72:97:f2:c1:37:b3:ff:da:
         b6:d4:f3:ac:6f:16:27:49:fb:35:8a:7c:ca:7b:21:95:40:72:
         bc:58:cf:99:87:b2:6f:c6:e5:10:9e:3c:db:87:75:35:d4:5d:
         7d:7e:cf:90:7b:72:9f:72:bb:0c:84:a3:b9:7f:1d:9f:4f:a7:
         e0:ed:c9:67:da:6d:18:6c:eb:c2:c4:a4:54:67:57:1f:dc:fd:
         98:9b:d6:8a:15:ae:f9:97:b3:f6:58:3f:f2:3b:95:f1:db:1d:
         7a:0f:b5:6c:49:12:e4:d5:95:a7:2e:d9:ee:99:ae:c3:cf:4a:
         f7:bb:f0:06:5f:1d:ca:f3:b3:30:7f:ca:04:d5:4a:64:1f:bf:
         17:60:94:81:0d:ce:5c:58:c9:db:3c:c7:bd:34:7d:0a:ee:c4:
         36:33:bb:82:44:9c:a3:d3:4e:e4:c3:b0:83:96:78:8f:4e:bd:
         1e:88:d0:55:7e:1d:a7:9e:ac:ff:bf:a8:d3:eb:aa:eb:11:51:
         a6:79:37:ad:05:a1:87:52:9f:39:cc:65:55:5f:a0:e5:c6:30:
         40:f0:21:ae:4f:d4:72:ce:a6:98:c3:5b:02:94:e1:38:e6:81:
         a5:fc:4a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:36 2024 by rpki-client on console-ams.rpki-client.org