Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File:                     Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier:          sl+WMd6MNDEPxYf1TEPtNWC4BBTuWYnDVuK100htu4Q=
Subject key identifier:   62:C0:5F:0A:AC:4E:8D:69:DD:9F:5E:E3:C3:7F:D2:8E:03:CA:4F:DE
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer:       /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial:       019369D9C3FB53E90BBE6321D22A054C4C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number:          041B
Signing time:             Tue 26 Nov 2024 19:01:39 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:39 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:39 +0000
Files and hashes:         1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: 1zDSiTnVs4cqctCb4kX8GPbUxYLpddn0k6dxEk79xog=)
                          2: Uj_14N-lY3D5PtScJ9x5vWeUls0.roa (hash: vs0vP/kWCnfPpZpKUb9cH/Vt5Tk8I78FllNN3gDQgoA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:c3:fb:53:e9:0b:be:63:21:d2:2a:05:4c:4c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
        Validity
            Not Before: Nov 26 19:01:39 2024 GMT
            Not After : Nov 27 19:01:39 2024 GMT
        Subject: CN=62c05f0aac4e8d69dd9f5ee3c37fd28e03ca4fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:55:8c:46:8c:a1:52:1b:13:cf:ef:b3:f0:
                    bf:a5:ef:2f:8c:5c:0f:70:31:c8:6a:65:05:7d:35:
                    55:e4:da:97:28:98:1d:06:c8:41:65:e4:a9:bb:45:
                    01:b9:e0:ff:ea:66:9e:b4:49:db:62:4c:a8:37:03:
                    e1:92:fd:9d:42:74:8a:3c:44:af:ee:84:55:53:59:
                    b8:66:d3:1d:cb:63:b1:c9:eb:31:20:0d:79:e0:17:
                    ac:cb:85:62:0d:8c:f4:f9:14:c9:36:44:08:15:24:
                    4e:e9:e1:57:ce:43:ed:31:2e:da:ca:23:b8:c0:3c:
                    50:d0:f1:fe:f4:3a:71:f4:f7:44:ea:55:46:1f:17:
                    bf:b0:00:ba:c3:3f:f1:0d:dd:0c:e4:c0:d9:04:48:
                    aa:87:52:58:5c:51:3d:57:05:06:a8:ae:58:c3:64:
                    23:97:04:ae:fc:ff:42:6f:4d:e3:34:d2:96:14:69:
                    5b:b1:c2:8a:0f:8a:e6:bf:03:fa:11:e9:69:11:24:
                    d8:ab:00:08:14:61:87:49:32:33:79:b8:82:ad:cd:
                    16:0a:0c:fc:6c:5b:f1:89:0b:26:36:84:7f:28:1a:
                    01:18:3c:c1:9f:3d:0d:ea:58:b6:ce:fc:65:fb:ff:
                    b6:16:fc:9f:73:66:c1:0c:4b:22:9b:4d:65:2e:c1:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C0:5F:0A:AC:4E:8D:69:DD:9F:5E:E3:C3:7F:D2:8E:03:CA:4F:DE
            X509v3 Authority Key Identifier:
                keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:82:0b:58:68:b9:0a:49:96:24:b3:d9:c3:03:44:a6:12:
         3a:2f:3c:b3:c6:48:68:93:c0:18:e8:f8:2f:78:d4:24:2b:51:
         6e:89:b7:a0:85:b4:91:6e:9c:48:95:26:a5:6e:8d:ff:f5:80:
         67:c4:44:9c:83:68:5d:00:56:7d:11:99:b2:19:d5:f9:ae:44:
         80:f5:af:b1:c1:3b:ab:4d:b4:30:a1:bb:60:a3:1b:4a:ad:1b:
         6f:7d:fd:7c:4a:5f:e6:90:dd:8e:ec:1f:7d:df:e5:29:df:ca:
         54:1d:c4:c0:4b:82:10:dc:15:e0:7f:22:62:5f:5b:ea:49:9e:
         99:1a:87:7d:d1:af:14:a7:f2:48:f3:b1:4d:04:62:2e:c2:03:
         57:bd:f9:1c:a1:70:fd:fe:b9:c4:b0:02:43:ea:74:62:76:24:
         2f:ca:44:5a:6d:7c:f7:2a:87:c5:8b:88:ac:01:42:82:e3:02:
         16:cf:1b:11:ac:4c:8f:69:2b:c4:5c:24:9b:b0:88:2a:5d:41:
         c1:55:48:2a:64:fe:bd:a0:e5:4f:51:9a:f4:68:22:e7:35:bb:
         ca:af:54:29:77:e8:ac:bb:f7:31:b0:4f:57:f4:b4:ac:98:e8:
         45:86:fd:8f:f2:d5:02:45:84:ec:0b:eb:5d:95:09:b1:f1:46:
         21:f3:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:54 2024 by rpki-client on console-fra.rpki-client.org