Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File:                     kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier:          e1FXYhROx4C+tfhbivBcb3cLbLabsqj/ztpqVF0SQLg=
Subject key identifier:   7F:AB:FF:F9:55:3F:BE:87:F6:6D:A5:0E:AF:19:D2:0C:C7:A0:68:C0
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer:       /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial:       019369A1BA12EE0E32FE629EB00377369EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number:          0159
Signing time:             Tue 26 Nov 2024 18:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:26 +0000
Files and hashes:         1: BrtDA57HH6qOmR5qEAfcHjDXZy0.roa (hash: f7JGv6kEa80q2JCvvIxJT8ix958Kj6l7EKWXVYUXiUA=)
                          2: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: FowtenmdEuksmrM5o3mJ48aUMTbtkFfQxDOpI9b79wA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:ba:12:ee:0e:32:fe:62:9e:b0:03:77:36:9e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
        Validity
            Not Before: Nov 26 18:00:26 2024 GMT
            Not After : Nov 27 18:00:26 2024 GMT
        Subject: CN=7fabfff9553fbe87f66da50eaf19d20cc7a068c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:a3:db:df:c8:38:93:ed:d5:27:65:2c:26:
                    5f:1d:1e:7e:58:4a:e3:73:4a:8b:3d:a2:f3:57:0a:
                    45:dd:3f:fe:57:bb:31:b3:80:5c:c3:f7:db:48:20:
                    3b:02:d4:70:38:bc:c8:f4:e8:86:93:b5:55:63:d0:
                    3e:da:6e:a8:be:61:e0:24:f7:ef:92:c0:c4:64:a6:
                    57:7e:15:7e:b9:26:29:4d:ed:6d:f0:2e:94:4f:eb:
                    2b:7f:d3:1e:5d:2f:9b:47:5c:6f:93:e9:15:b0:fa:
                    20:5e:37:73:b1:af:11:73:97:a6:8b:e4:a9:a4:bf:
                    5b:9e:c4:12:5b:43:ca:15:b1:3d:3c:51:e0:d8:b7:
                    ec:8a:2e:1e:61:33:7a:c1:51:63:e0:04:18:73:fb:
                    a8:81:89:c7:e7:00:b3:46:02:c7:3a:95:ef:8b:25:
                    93:af:7c:a0:0d:31:26:8a:5b:36:4b:63:ad:77:ff:
                    47:04:93:49:eb:bc:87:5f:e7:38:ba:9b:2c:29:bc:
                    36:50:c8:f3:66:42:de:04:2b:9c:c0:bd:85:60:04:
                    16:ac:5b:f6:1d:31:af:a5:c8:a8:11:19:1e:50:05:
                    32:82:24:ce:28:cb:05:77:69:c6:79:68:9b:a2:1e:
                    36:78:96:dd:c9:1e:83:c3:7e:eb:d7:c5:36:4b:38:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AB:FF:F9:55:3F:BE:87:F6:6D:A5:0E:AF:19:D2:0C:C7:A0:68:C0
            X509v3 Authority Key Identifier:
                keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:58:d9:04:2a:5d:a3:0c:7c:f7:88:5c:fb:60:1f:5d:15:aa:
         6e:d2:20:6d:b9:6e:fa:61:1b:09:85:55:5e:73:07:34:34:f3:
         bb:f9:bc:b1:19:5e:c0:6e:f0:8c:40:7c:bd:39:97:af:20:60:
         81:df:15:6c:11:37:45:74:16:37:0b:e1:39:63:48:ee:11:5f:
         db:8e:d6:61:9f:97:e6:51:79:3b:63:68:bf:e2:5f:79:6d:41:
         86:9b:7c:90:51:c7:33:0e:28:1e:70:8c:1d:9c:84:d6:53:96:
         72:dc:97:a5:7c:86:a3:56:22:71:ed:e7:f0:26:44:2b:e4:48:
         c2:c7:31:ba:d5:ac:e6:cd:6a:97:b8:8f:a3:ce:5c:e0:f0:c6:
         84:29:cc:ca:4b:cd:13:7b:ba:7d:aa:d0:22:80:b2:b4:c3:4a:
         83:ed:11:35:9c:0e:68:63:32:d8:3f:ed:63:07:d5:29:2a:d9:
         48:6b:4c:15:9e:08:02:4b:7a:80:4f:07:39:2c:25:83:d5:4f:
         07:83:d2:0a:fb:fd:a9:97:67:8f:99:96:bc:e0:44:99:95:ef:
         97:d5:bf:5a:d6:31:48:b9:d1:0e:27:5d:11:c6:ca:bd:9b:86:
         2d:a6:e5:7d:d6:ac:5f:15:6f:36:e4:b4:3b:a1:dd:8e:45:ac:
         3d:88:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:49 2024 by rpki-client on console-fra.rpki-client.org