Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File:                     4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier:          X+PnCxZPowgIJkZ6sDd/kX3fSeZWcbbfzdKg1oNDRVg=
Subject key identifier:   D3:6F:A0:93:18:B4:F4:B0:95:94:48:B4:73:1E:25:43:09:35:02:9B
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer:       /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial:       01935508420BC7636DD482303E54E321A11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number:          05D7
Signing time:             Fri 22 Nov 2024 18:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:24 +0000
Files and hashes:         1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: hK2/85CjsbAwVupLwaAMHXgIXe73y0tX6ASncWES8rc=)
                          2: BGG7KTRMxBjpw3JBHlfwsft8Xy8.roa (hash: 83qc4KluA8oQhp4VuQfW0BTn8gDqJlW3kEVoNCCs/KU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:42:0b:c7:63:6d:d4:82:30:3e:54:e3:21:a1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
        Validity
            Not Before: Nov 22 18:00:24 2024 GMT
            Not After : Nov 23 18:00:24 2024 GMT
        Subject: CN=d36fa09318b4f4b0959448b4731e25430935029b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:01:39:95:de:25:81:40:7c:8a:11:5b:77:
                    7f:80:ea:1f:e9:ce:b2:02:9e:c2:02:30:15:7e:f9:
                    cd:f2:66:fd:39:38:3c:c8:8d:3c:7b:5a:e4:37:9a:
                    fc:9b:3c:d9:dd:31:76:fb:ff:2d:a3:24:08:e8:12:
                    f6:2a:1e:a2:d8:f1:a7:5d:7b:43:3a:e1:d5:c2:46:
                    47:98:3c:2c:c1:e5:e6:33:49:fb:d3:26:89:86:7a:
                    71:df:32:b7:3c:48:a2:0d:c5:cc:dc:97:57:af:db:
                    b8:48:87:4d:32:c8:41:59:20:d2:79:12:00:e3:5b:
                    54:6c:24:18:a2:4f:7f:dc:67:c8:69:4f:61:79:6e:
                    c9:f6:da:7e:5b:6d:54:65:cf:8e:e1:f1:ca:46:b8:
                    1d:a7:38:c6:6a:34:ec:76:ba:80:16:56:5a:33:7b:
                    46:b9:f6:7f:83:b0:04:5d:a1:6b:6d:0f:a3:c4:17:
                    62:5d:6c:84:47:42:f0:1e:ef:55:58:0d:28:d9:12:
                    d0:ea:54:a8:d7:57:b8:97:bb:7e:aa:39:3f:07:ae:
                    e9:d9:39:90:fa:a7:71:19:7d:ad:b5:d9:b9:91:9b:
                    9a:cb:f6:68:a9:62:00:64:d9:49:4e:7d:ef:bc:22:
                    aa:3f:88:62:49:3b:17:06:fd:ab:2d:73:ab:6c:70:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:A0:93:18:B4:F4:B0:95:94:48:B4:73:1E:25:43:09:35:02:9B
            X509v3 Authority Key Identifier:
                keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:4a:1f:34:68:52:87:a4:bc:c0:68:b4:5e:cc:58:88:a1:
         a7:e8:f8:6a:60:2a:f9:71:da:2a:03:2f:36:ae:61:92:0c:44:
         4a:4f:3e:c6:f2:32:f0:01:00:06:b2:91:f5:a0:91:93:3d:73:
         c6:ed:88:77:2a:07:73:69:4b:5c:94:ac:64:cb:90:15:99:9f:
         13:a3:82:f1:69:22:31:60:4b:ee:f9:56:18:8e:57:43:a8:d4:
         38:b2:8a:8d:19:f8:6c:20:a9:be:a7:ac:fd:db:c3:25:1b:f4:
         35:89:e4:1c:37:17:27:0f:97:a5:40:cd:1e:93:e6:9c:0f:58:
         8b:d4:f7:6d:9e:14:88:54:35:1e:17:b1:26:c1:7b:6c:81:f1:
         5c:d3:47:ee:70:e5:25:43:38:c7:c5:2c:00:43:59:a6:2f:2b:
         21:91:1a:6d:91:bb:44:30:f4:1f:10:70:8d:73:8b:07:a6:f7:
         b2:df:41:13:9f:24:5e:d8:cf:79:a8:88:20:e8:4b:32:15:0f:
         1e:b8:c7:c5:3b:e5:86:c4:31:52:5f:3a:22:27:c0:48:3c:4c:
         11:c9:6a:d9:77:d7:dd:f7:c9:dc:35:2d:63:db:4c:2d:ca:73:
         4b:67:74:1b:89:4a:b6:bc:98:fe:42:1d:03:76:2d:bb:cc:66:
         cc:38:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:25 2024 by rpki-client on console-ams.rpki-client.org