Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File:                     fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier:          auJgtb540LWaed9E5TMF4/DdlGDLVt5CjKsDD1DWaaM=
Subject key identifier:   5A:AC:0F:BE:5E:0C:B9:F1:9A:30:44:3C:4C:64:E9:99:7F:C8:8C:1A
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer:       /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial:       019355E42E19563BF22A6A29B2177DCAB90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number:          11C5
Signing time:             Fri 22 Nov 2024 22:00:37 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:37 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:37 +0000
Files and hashes:         1: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: W+ik0vaLHWnP/UNTXxaKSWziEyacfXKzvUAqpsaIGiE=)
                          2: iYRg4Kon-4YvHLJz7la9I8oITE8.roa (hash: +sKJZEdLz4uvnfYmlsht1oxgb7hA0tkkfwojbWk975k=)
                          3: v0-1WvqdPopOt_kaXYWVc4YsNvM.roa (hash: uemxayWVfnaNdPlHJJkugkWq+eY/BzTmbjqNFPv/S+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:2e:19:56:3b:f2:2a:6a:29:b2:17:7d:ca:b9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
        Validity
            Not Before: Nov 22 22:00:37 2024 GMT
            Not After : Nov 23 22:00:37 2024 GMT
        Subject: CN=5aac0fbe5e0cb9f19a30443c4c64e9997fc88c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:c0:76:68:a3:16:00:b5:72:61:3b:10:d0:
                    79:19:a1:f8:ec:b0:a1:49:e7:52:4b:b5:12:f6:23:
                    7a:cb:b3:23:b2:c2:ba:82:f2:d4:77:2a:d6:7d:1b:
                    d0:ae:84:7a:b5:40:74:e6:ec:6b:e3:f9:52:b1:f3:
                    0f:98:29:11:ce:7f:9f:5f:ea:06:8f:ee:27:db:01:
                    d7:93:b2:79:d2:92:1c:ca:55:91:53:d6:b5:a7:e3:
                    48:ab:5a:ba:28:3a:7e:1d:40:f7:d5:0c:2a:27:a5:
                    cf:34:27:89:59:7e:ee:4d:34:26:c6:8a:f6:70:51:
                    8e:ce:a7:09:9d:f9:7e:b2:66:bf:a0:15:03:c5:1a:
                    ce:56:70:3b:2b:6a:9d:71:63:e0:b5:38:09:56:56:
                    92:29:b2:64:4d:bb:8f:b5:4d:70:24:f8:80:05:9a:
                    9b:d8:2f:db:26:68:a3:d9:6b:c3:65:28:87:df:1e:
                    c9:d6:84:c3:b6:77:b1:b7:50:06:f3:62:87:8e:20:
                    2a:fe:bf:f6:b8:d3:0c:66:5c:e4:f7:1a:d7:1a:c1:
                    da:e3:1e:7b:c5:50:e4:ed:53:de:b1:0f:e4:05:de:
                    ab:2a:af:a5:46:fd:1a:3e:14:c7:91:ae:63:97:ec:
                    a6:bd:7a:c1:67:de:82:0c:a2:e6:02:7a:ef:59:3a:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:0F:BE:5E:0C:B9:F1:9A:30:44:3C:4C:64:E9:99:7F:C8:8C:1A
            X509v3 Authority Key Identifier:
                keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:19:06:67:31:7d:e9:fc:e6:c2:6e:09:f0:fd:93:21:d5:
         9e:ec:27:6b:02:8e:f9:dc:4c:33:2e:a7:0d:a8:a5:1e:c7:7d:
         d4:24:e2:76:44:1f:0a:9a:a5:83:4d:73:9a:1a:0f:c9:9c:af:
         52:b7:42:ff:d6:e0:39:68:73:a1:5a:94:a8:bf:4f:c8:6f:00:
         14:7a:cc:c5:54:af:67:5b:95:6b:05:4e:a3:a6:b2:65:6b:08:
         a6:34:cb:95:69:ca:2b:3c:dc:19:fb:b9:82:27:28:78:7b:59:
         fc:c5:ca:ab:91:e9:96:67:72:2d:b9:c7:f9:6a:b3:4b:2e:79:
         3f:f8:ac:4e:4d:21:1a:5b:32:1f:59:d4:d7:ef:e5:bc:33:25:
         73:3c:6f:9a:81:43:e5:c4:12:97:a5:15:b3:53:e0:33:31:0b:
         37:83:58:fb:e3:9a:0e:9d:9d:8a:e7:6c:b2:43:18:6d:13:d2:
         1e:4d:9c:df:13:59:40:4a:b9:43:d5:5b:14:85:eb:24:65:bb:
         ec:f4:cc:28:e8:36:38:22:8f:7c:7f:41:68:44:5c:b7:31:f4:
         d9:9f:42:e9:c3:42:9c:a9:9a:a3:fc:53:cd:d7:cb:ba:df:60:
         d5:09:d2:b0:6b:96:97:b4:78:85:41:bd:a6:f9:ad:29:a6:ef:
         89:b4:5b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:26 2024 by rpki-client on console-fra.rpki-client.org