Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File:                     krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier:          LMetc/uVBkike5acYjfdhqhnNRjUfUCfrGENtc25DXs=
Subject key identifier:   4A:5F:F2:F0:77:12:6F:D1:76:B7:D2:BE:2F:10:90:C7:5C:A8:26:CF
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer:       /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial:       0193568B1D24B65C1296C627F43A9CA1B0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number:          1296
Signing time:             Sat 23 Nov 2024 01:02:57 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:57 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:57 +0000
Files and hashes:         1: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: xSXPZZ47LvdpPKe7kUPGXb5/jnby6zE1/iaKW0cdBi4=)
                          2: x1lKQAvVTSFT9Zyej6T8l-x4eSo.roa (hash: lPeOCpE6NstprESc4Xt27oX0w2jCeX9RGYDPWgnLzl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:1d:24:b6:5c:12:96:c6:27:f4:3a:9c:a1:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
        Validity
            Not Before: Nov 23 01:02:57 2024 GMT
            Not After : Nov 24 01:02:57 2024 GMT
        Subject: CN=4a5ff2f077126fd176b7d2be2f1090c75ca826cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:26:49:fb:74:4e:4d:05:51:e0:43:14:4e:
                    d5:82:d2:47:ca:66:12:15:43:4b:70:69:c7:ec:d9:
                    09:30:ae:0d:d1:ad:53:36:c9:d9:81:16:15:3f:50:
                    22:b1:bc:70:22:6a:c6:00:33:ee:18:07:37:00:7e:
                    8e:46:cc:a4:dd:5f:14:43:45:42:fa:04:d8:35:d4:
                    cf:6f:43:cc:fd:3c:95:b0:e3:2a:a1:cd:50:b0:76:
                    47:b4:4d:db:34:39:0c:83:9a:23:26:eb:50:8c:80:
                    e9:ce:dd:f9:c3:5a:0e:9f:d3:59:42:8e:68:e3:f5:
                    9c:b4:b2:9f:b2:79:f1:41:15:1e:f8:7c:1f:72:cb:
                    d5:d4:26:ed:7b:4f:c9:82:08:7e:7c:2a:0e:00:72:
                    6e:77:45:78:14:54:94:7e:1b:7a:a7:52:bc:2c:c8:
                    e6:60:22:24:fa:ba:29:b8:ff:5d:8b:f2:89:eb:b6:
                    49:5c:1f:c7:da:9d:fc:2d:82:19:38:88:95:e0:bd:
                    b2:a0:a1:02:ee:97:b0:6c:0c:fc:7a:64:7f:02:69:
                    97:e9:bf:bb:8e:74:50:81:c2:ab:9c:a6:37:37:f4:
                    c7:f0:b2:56:f8:6e:2c:86:2a:2d:c4:f3:88:88:d4:
                    cc:75:7b:12:04:a0:92:72:26:59:98:ae:c4:cd:fe:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:F2:F0:77:12:6F:D1:76:B7:D2:BE:2F:10:90:C7:5C:A8:26:CF
            X509v3 Authority Key Identifier:
                keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:e0:00:3d:60:c3:16:93:31:2b:dc:f1:2a:e3:a9:30:cf:
         c9:89:46:f7:34:22:4a:0f:fe:09:72:ea:7b:4b:02:b6:36:a1:
         7f:ff:ff:02:79:b6:ab:63:39:82:d3:35:a6:88:73:26:59:f2:
         7a:cf:8d:6e:98:ff:b4:2c:c8:6e:91:e0:92:ce:aa:e2:0f:3b:
         6d:1a:7a:e0:37:66:34:e7:f1:b0:29:b9:35:2f:fa:c3:37:9a:
         37:5b:ea:4b:93:32:43:bf:f2:6a:d6:65:ce:08:f2:a4:41:7a:
         7f:36:95:f4:5d:de:ae:32:54:0f:74:fb:62:98:a4:33:19:72:
         b6:0f:89:f8:48:8d:9c:2a:2e:1e:14:08:81:a3:43:9f:36:80:
         bc:29:72:64:3c:94:b0:71:18:cc:57:a3:f6:f3:86:3a:6d:56:
         0d:d3:f3:f0:35:cf:f5:15:4c:1b:6d:56:1b:14:f0:db:7b:9b:
         ea:0a:df:e4:f7:b3:85:68:1b:e0:2c:a2:48:f5:a9:26:fe:3f:
         45:89:53:67:6d:5d:e6:7d:33:6e:24:8b:17:d9:5b:6b:ee:2e:
         c6:3b:fc:f7:89:9b:86:e0:3f:b5:0f:e7:81:ab:7f:98:4a:4c:
         f8:36:86:ac:1a:06:2b:25:9d:38:5d:68:65:e4:4e:55:ac:2a:
         db:a8:02:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWix0ktlwSlsYn9DqcobDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjQxMTIzMDEwMjU3WhcNMjQxMTI0MDEwMjU3WjAzMTEwLwYDVQQD
Eyg0YTVmZjJmMDc3MTI2ZmQxNzZiN2QyYmUyZjEwOTBjNzVjYTgyNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux8mSft0Tk0FUeBDFE7VgtJHymYS
FUNLcGnH7NkJMK4N0a1TNsnZgRYVP1AisbxwImrGADPuGAc3AH6ORsyk3V8UQ0VC
+gTYNdTPb0PM/TyVsOMqoc1QsHZHtE3bNDkMg5ojJutQjIDpzt35w1oOn9NZQo5o
4/WctLKfsnnxQRUe+HwfcsvV1Cbte0/Jggh+fCoOAHJud0V4FFSUfht6p1K8LMjm
YCIk+ropuP9di/KJ67ZJXB/H2p38LYIZOIiV4L2yoKEC7pewbAz8emR/AmmX6b+7
jnRQgcKrnKY3N/TH8LJW+G4shiotxPOIiNTMdXsSBKCSciZZmK7Ezf4otwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpf8vB3Em/RdrfSvi8QkMdcqCbPMB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPPgAD1g
wxaTMSvc8SrjqTDPyYlG9zQiSg/+CXLqe0sCtjahf///Anm2q2M5gtM1pohzJlny
es+Nbpj/tCzIbpHgks6q4g87bRp64DdmNOfxsCm5NS/6wzeaN1vqS5MyQ7/yatZl
zgjypEF6fzaV9F3erjJUD3T7YpikMxlytg+J+EiNnCouHhQIgaNDnzaAvClyZDyU
sHEYzFej9vOGOm1WDdPz8DXP9RVMG21WGxTw23ub6grf5PezhWgb4CyiSPWpJv4/
RYlTZ21d5n0zbiSLF9lba+4uxjv894mbhuA/tQ/ngat/mEpM+DaGrBoGKyWdOF1o
ZeROVawq26gC0w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:34:47 2024 by rpki-client on console-fra.rpki-client.org