Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File:                     kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier:          Z2KUOQ+621UBUepWu2Ir52CzqlQLr4IxZL6L58fdpLU=
Subject key identifier:   34:17:CA:0F:97:50:F5:78:D6:61:23:D0:3D:4E:AC:17:91:4E:C6:EB
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer:       /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial:       019356F72B7A5A22C57B1FCA21406A5F23BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number:          066D
Signing time:             Sat 23 Nov 2024 03:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:59 +0000
Files and hashes:         1: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: FNq1IP3lChbGkz5f1iaFXB02G4c0tIfZYQ0gJ6zTTN4=)
                          2: mf6dwsxbupC39tQZK8vRczeJ7f8.roa (hash: ps5sweSjmsf9iw4anJnj4NAcUOETap0p4X4RcuDNw3o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:2b:7a:5a:22:c5:7b:1f:ca:21:40:6a:5f:23:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
        Validity
            Not Before: Nov 23 03:00:59 2024 GMT
            Not After : Nov 24 03:00:59 2024 GMT
        Subject: CN=3417ca0f9750f578d66123d03d4eac17914ec6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:5c:38:2c:e4:2a:21:11:c2:0c:5f:d3:69:
                    0a:6d:ff:e6:dd:be:3f:7d:a6:6f:45:b8:91:bd:95:
                    42:f3:da:e8:85:9d:3b:80:e2:99:42:f6:d8:67:f1:
                    ec:d7:e6:28:c9:35:f3:6a:92:4e:be:1e:9d:c4:1b:
                    cc:6e:9b:9c:4f:31:34:49:e9:e9:a2:20:52:c7:a6:
                    2d:56:44:12:92:96:04:7e:81:c8:99:dc:75:ad:91:
                    3b:86:fd:c0:14:aa:62:65:d3:74:ce:c3:9e:d5:ca:
                    04:e0:d5:19:da:9b:6a:42:7b:82:36:fd:20:4a:86:
                    ce:b9:6a:49:c5:94:89:31:69:35:25:f1:08:70:61:
                    b4:73:97:1f:b6:b5:c1:ff:3d:f7:42:47:42:80:7f:
                    ff:e2:f1:5a:7e:cb:ba:2c:3b:d9:e6:7a:30:1e:05:
                    a3:1e:f9:22:4c:ce:f6:6d:1b:53:f9:17:e5:88:6b:
                    f9:15:78:a3:ef:23:29:2c:11:4d:59:99:d4:27:00:
                    59:31:04:61:67:ba:2a:ca:74:75:bd:37:6b:1d:81:
                    88:15:7c:ed:27:6f:a2:c0:4b:30:d4:1d:16:23:88:
                    b5:95:72:ca:2b:4f:56:d0:b0:bc:4d:dc:c7:4b:51:
                    c7:21:2a:36:ad:01:90:88:75:66:3a:ed:ff:ca:55:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:17:CA:0F:97:50:F5:78:D6:61:23:D0:3D:4E:AC:17:91:4E:C6:EB
            X509v3 Authority Key Identifier:
                keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5d:d8:15:dd:a8:59:eb:c4:1c:be:6e:48:e4:6b:82:1c:15:
         61:40:d1:0d:a2:4b:4a:5c:2e:17:06:2c:0b:b2:15:2b:21:70:
         69:29:e5:7f:fe:cb:2d:31:c4:4c:73:42:a4:88:5c:4d:b5:de:
         f5:74:a2:d9:05:cd:86:9c:8c:16:fc:a9:fe:08:17:0f:7f:b6:
         17:42:db:c5:1b:aa:50:b5:96:2a:3c:27:d1:81:88:2f:2d:96:
         fd:1c:46:66:6b:26:9a:6b:ba:f7:39:ec:8e:f3:60:d5:52:f2:
         d4:39:4d:d5:75:4b:42:4f:24:6e:88:6b:0e:68:87:86:ec:55:
         20:bd:0d:02:44:fd:a3:76:59:f1:1a:d7:9e:38:32:74:2d:e5:
         ee:b2:2b:00:f4:60:ec:3f:42:e7:fe:88:fc:63:73:61:43:e5:
         13:8d:48:c7:06:84:42:4d:49:51:ca:a4:2d:72:de:ef:81:63:
         2e:48:29:bc:e5:00:0c:ff:9f:04:61:7a:2b:62:3b:1d:df:b4:
         48:20:9d:93:0a:a2:cf:a8:04:0f:1b:9c:06:af:2b:69:11:29:
         31:d9:e9:4e:0e:6f:f8:32:dc:2e:e7:4f:37:02:68:17:02:67:
         51:9b:b8:56:26:64:cf:29:12:29:ea:eb:47:77:86:ff:d8:c8:
         9d:28:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:26 2024 by rpki-client on console-ams.rpki-client.org