Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File:                     KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier:          WV2Vr+8wPlFh49gRk1z6X65eT5aVr9EkAhywi0Llas4=
Subject key identifier:   2C:4B:60:9B:2B:62:F9:97:12:17:82:7B:7A:F5:7F:7D:83:1A:D0:0D
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer:       /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial:       01935162ECEB454FB4311DE4AB90B05DD7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 01:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:57 +0000
Files and hashes:         1: 1-A9oiCoerr-tGHf5Pb1ENTiswJc.roa (hash: uC7hCtJqKr99q5IEzRFWHN7uUyiBxXX+2NdbGeCsG4o=)
                          2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: x50veffyVXdQbFbB5xcsK1QmlCReHIOdP7EGcuCtHwU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:ec:eb:45:4f:b4:31:1d:e4:ab:90:b0:5d:d7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
        Validity
            Not Before: Nov 22 01:00:57 2024 GMT
            Not After : Nov 23 01:00:57 2024 GMT
        Subject: CN=2c4b609b2b62f9971217827b7af57f7d831ad00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:0c:f1:29:ba:5c:17:73:52:70:75:bb:9e:
                    d0:50:1f:eb:25:cd:4b:5f:67:0c:3a:f1:52:3b:cb:
                    fd:1c:63:b3:0a:46:64:e9:95:d9:a6:ef:b1:09:28:
                    47:01:53:a3:20:dd:de:96:7d:5b:94:dc:45:c6:95:
                    1e:41:c1:8e:e8:ba:1b:8b:6d:91:31:19:7e:67:d3:
                    f7:e6:bc:5b:26:a0:b0:91:53:bf:11:0c:3c:af:83:
                    99:8e:fd:43:21:13:4c:a6:1f:e1:6a:5b:50:a6:1e:
                    cf:34:e0:23:55:05:34:95:eb:3d:d7:ea:fd:9f:8c:
                    0b:22:8a:75:f7:a6:79:06:de:f4:6a:a6:ba:26:20:
                    bf:63:49:1a:5f:0a:bc:22:0d:3c:4c:89:4a:52:24:
                    5f:c9:12:07:3c:35:d3:75:86:0a:d9:06:a9:32:d1:
                    3d:72:5e:04:d1:f8:c1:2b:8b:0f:82:2f:25:17:46:
                    b0:60:ab:40:63:2e:d6:9a:56:56:19:48:5c:1b:90:
                    71:f4:c8:be:33:06:51:32:28:e2:68:43:bd:3e:d4:
                    9a:b6:2b:4d:d7:3e:24:63:cc:92:87:fd:bb:2e:2f:
                    1b:20:fe:6a:6c:7f:40:d7:00:a6:41:28:54:bc:60:
                    1c:47:7c:8e:38:87:6f:e0:8a:3d:1a:00:ee:d9:2f:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:60:9B:2B:62:F9:97:12:17:82:7B:7A:F5:7F:7D:83:1A:D0:0D
            X509v3 Authority Key Identifier:
                keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:0b:5a:b3:a0:5c:3c:8d:7c:84:be:15:b7:39:0b:86:a8:
         2f:65:63:3d:7f:1e:87:05:3e:7d:42:cf:1f:f0:68:5d:2d:a9:
         a6:59:c1:c1:52:71:2a:d1:e3:bc:32:38:bb:3b:73:95:e1:6f:
         95:1f:02:da:7a:59:4b:7a:be:a3:cb:be:29:0c:67:ca:91:49:
         9a:43:66:6a:3a:67:d6:19:9b:4c:5e:21:fa:ef:74:ef:e7:81:
         57:e0:74:9f:d9:9a:58:d4:c4:3a:2b:60:1f:dd:e2:a1:97:fd:
         5a:7a:e0:2f:2e:5e:57:50:74:84:ca:7d:81:6e:cb:b2:ea:7b:
         f6:e9:90:8b:53:c1:5c:31:fd:6f:8f:98:ba:8b:b8:0e:af:c6:
         05:10:1d:15:80:45:eb:63:7e:6c:21:c1:6c:33:59:ce:7f:4d:
         e6:10:ac:ca:1e:cf:88:f4:4a:08:0e:96:e3:0f:48:da:e7:a9:
         f8:56:9e:47:8d:e5:7c:4b:2a:69:3b:f4:da:de:f7:3c:2a:ca:
         f6:f5:d4:42:8a:40:86:71:ee:02:bf:2f:29:de:4b:10:2d:de:
         39:32:ff:3c:15:07:16:9c:30:64:d1:8f:82:65:a6:cc:62:79:
         91:4d:db:ea:4f:8b:da:eb:ee:0c:ae:db:48:77:23:38:d1:26:
         0c:64:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:27 2024 by rpki-client on console-fra.rpki-client.org