Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File:                     xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier:          +aX9EvlGs8U3x9u4BpcFpDEZTpZ7knKziQXxqAUGItI=
Subject key identifier:   AB:4E:C8:30:48:B1:CF:67:84:87:12:F7:38:F3:16:8B:8A:34:02:66
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer:       /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial:       019369D8BD70E22EB3C3CD23146EDC6E7980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number:          10DD
Signing time:             Tue 26 Nov 2024 19:00:32 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:32 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:32 +0000
Files and hashes:         1: 7a77qpwJeeHMoGMx7H4Hltr43LM.roa (hash: 6lPWBqhGLKeKKMwcxRPlAd4DVLSSiCY4VtkMvpuCgiY=)
                          2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: OvChapWVapFISOouD81TbXNtoIDhhzRCWFBmPSvxnl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:bd:70:e2:2e:b3:c3:cd:23:14:6e:dc:6e:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
        Validity
            Not Before: Nov 26 19:00:32 2024 GMT
            Not After : Nov 27 19:00:32 2024 GMT
        Subject: CN=ab4ec83048b1cf67848712f738f3168b8a340266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:a3:f2:63:7c:68:16:15:a8:0a:a8:34:0a:
                    bc:24:4f:de:a2:13:b5:b2:16:84:92:95:e5:6a:ec:
                    92:17:4e:b3:8f:51:ce:be:65:b9:10:2c:44:2f:07:
                    60:43:d2:02:d0:88:1e:8c:b9:dd:5a:a0:6b:8f:1b:
                    2e:b1:4d:7d:bc:21:38:57:e8:99:59:d9:2e:a1:44:
                    03:c5:ce:75:93:96:c1:30:63:ff:bb:8b:fe:c8:25:
                    ca:a5:68:6d:32:a6:31:0c:93:09:47:f8:1c:31:99:
                    ff:1c:77:d9:d8:f3:1b:05:b8:30:42:f6:6d:96:cf:
                    39:dc:42:ea:8a:b3:43:d2:7d:4c:7b:ca:1b:8b:b9:
                    50:b1:43:f1:4d:15:70:94:76:9a:58:bf:54:08:6f:
                    59:5c:cf:c7:d0:e4:8e:ef:d5:18:9a:b2:6c:98:76:
                    04:1f:ee:be:51:1b:b4:eb:31:cd:c5:85:58:c0:9b:
                    8e:7c:5a:bd:50:28:66:7c:1a:b5:bb:3e:1c:f8:a9:
                    ba:9c:f1:91:27:28:5b:8e:a0:ee:61:09:82:c4:00:
                    c4:b2:9c:8b:68:69:75:04:fb:30:8d:b0:3a:75:45:
                    87:01:9a:b8:06:a9:ce:a1:fa:ea:64:8f:65:58:54:
                    00:97:1b:98:b5:95:c3:ca:49:fe:d4:ed:f4:f5:16:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4E:C8:30:48:B1:CF:67:84:87:12:F7:38:F3:16:8B:8A:34:02:66
            X509v3 Authority Key Identifier:
                keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:df:97:d6:f3:5d:ae:e0:5e:f9:4d:51:1c:fc:ab:af:e4:f7:
         8f:d7:d0:66:30:e6:3e:19:7a:9f:a4:39:80:03:8e:c8:77:3d:
         70:33:f7:d8:d2:b2:fb:67:5b:4f:1c:34:5f:f3:7c:5b:23:d5:
         fc:7c:b1:bd:a8:ed:6a:81:29:04:c8:c0:af:da:17:f2:7c:82:
         63:f7:36:d7:50:52:f9:17:6d:d7:8a:61:79:fc:58:ec:32:39:
         16:04:8e:e4:1e:6c:a6:80:7f:da:83:36:ff:5b:5e:8b:ad:78:
         d6:28:a3:f1:3d:34:29:a3:17:6e:df:84:b1:f4:ae:9c:02:1c:
         d4:94:1f:01:33:28:ec:5c:e9:67:c9:fb:e2:40:62:93:22:70:
         08:26:79:63:1e:b6:b4:1d:23:f0:03:66:be:bf:5d:bc:32:d9:
         bb:f5:5b:da:a3:ee:3f:33:96:1c:77:5a:04:6c:43:93:6c:38:
         32:e1:56:1c:5d:3b:9a:47:fd:16:aa:3a:60:f9:ca:ea:be:cc:
         eb:f9:d6:b1:91:ab:b6:7c:9b:e2:21:45:7f:b9:d0:fe:37:04:
         e0:67:c6:cf:0c:cd:22:39:e1:d8:0f:4e:8d:b3:86:be:ec:66:
         5a:8d:10:a3:2d:e8:89:5e:42:a4:b4:60:6f:d9:f8:09:bf:45:
         45:22:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:47 2024 by rpki-client on console-fra.rpki-client.org