Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
File:                     k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft (raw, json)
Hash identifier:          6buXabDDW6LxvtYpXpacCnqa31yqlNxdYhY/BK78Z08=
Subject key identifier:   E3:8D:71:BE:A4:B0:E6:5F:46:BD:4A:45:22:C0:F9:6E:6D:35:7D:87
Authority key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Certificate issuer:       /CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Certificate serial:       0193568A290996D345E2FE4426DDCB05D220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
Manifest number:          0A51
Signing time:             Sat 23 Nov 2024 01:01:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:55 +0000
Files and hashes:         1: Yp7K2ZPpBa57sy538Fx_5qWJZDM.roa (hash: U+lJnsLPcmU8sqvTntpt/96BPqtIbv1dbRZj7qMXLkE=)
                          2: k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl (hash: ngsPZXZVwqBLULuDaxmZJENfuKyNmum54eV110v4lOg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:29:09:96:d3:45:e2:fe:44:26:dd:cb:05:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
        Validity
            Not Before: Nov 23 01:01:55 2024 GMT
            Not After : Nov 24 01:01:55 2024 GMT
        Subject: CN=e38d71bea4b0e65f46bd4a4522c0f96e6d357d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f5:d6:ab:41:15:f8:73:3c:0f:65:d8:7b:0e:
                    b3:ad:de:74:f1:de:39:eb:24:65:12:4e:f5:77:62:
                    9f:19:22:d8:bc:39:2e:e4:0c:76:35:a4:dc:47:c5:
                    2c:ec:10:0f:d4:97:58:39:34:4a:5d:94:dc:dc:02:
                    b8:41:16:2d:73:2f:0a:3e:c7:6e:53:9e:21:8f:6e:
                    8e:a4:c9:60:03:5b:5c:73:a1:29:ab:b3:ff:31:e3:
                    b0:f6:70:f4:91:b4:2a:39:7e:d1:53:2d:a0:e6:d0:
                    18:ab:37:c6:8a:d0:69:3c:e7:9c:26:2d:7b:f3:44:
                    49:6b:ad:be:c8:ee:e3:70:cf:ed:e2:c2:ed:fd:dc:
                    95:0f:21:4f:f5:ff:3c:8b:33:7d:25:11:51:69:3c:
                    a2:00:07:64:73:f5:71:1a:18:12:bb:41:84:63:69:
                    97:54:85:3e:f0:63:f1:e6:be:86:ea:35:9e:2d:89:
                    69:45:74:4a:14:d7:23:6b:da:ae:d3:4a:05:ef:4f:
                    aa:3b:7e:a5:b9:8c:33:0f:41:57:30:4a:88:80:d3:
                    bb:1a:85:bd:32:96:7a:22:04:e0:20:b8:cb:b9:89:
                    95:24:6c:65:b3:47:4a:e0:9b:a8:46:26:40:4a:0e:
                    14:3b:53:4c:4b:c8:42:69:c7:0a:a1:f9:4d:d6:ba:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8D:71:BE:A4:B0:E6:5F:46:BD:4A:45:22:C0:F9:6E:6D:35:7D:87
            X509v3 Authority Key Identifier:
                keyid:93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:31:42:8c:1a:f8:c5:ba:ee:b5:07:6a:9d:32:98:aa:2b:
         51:4b:09:66:ac:08:9a:90:d4:b3:bc:5d:f7:84:0d:f1:04:6c:
         2f:c1:e6:77:91:e5:81:6c:47:aa:5e:f6:27:d1:f8:36:66:5f:
         8e:63:cd:be:2a:50:6a:c2:ef:2e:b2:4c:24:01:f5:7e:20:28:
         c6:5d:f3:4b:e7:20:5e:3c:10:51:70:cd:64:f6:f9:72:a3:20:
         5b:09:4c:ff:77:38:e0:99:9b:94:1a:c3:9a:60:37:aa:1a:11:
         dc:8f:ac:53:23:c8:eb:c0:0a:81:51:24:df:6b:51:3f:9d:67:
         12:b6:9d:bb:79:04:db:59:55:70:1c:26:74:31:e4:34:af:f3:
         7f:53:1e:fe:ad:c3:55:35:ed:d9:c7:1d:8a:c4:84:c2:21:26:
         0c:c3:ae:c4:cb:97:0e:12:17:16:0f:e9:03:5b:4f:4e:b9:35:
         7c:c4:ae:bd:a2:da:a6:a6:21:6a:c1:ef:c4:78:96:cb:24:2a:
         39:30:13:d0:d3:d6:1b:e1:2a:99:bb:f8:8b:db:f8:b7:ab:0c:
         57:2c:aa:81:ba:54:78:fb:50:2b:2a:fa:18:7c:86:20:dd:dc:
         03:b4:be:a6:2b:f5:82:41:8b:90:3a:15:1e:7e:06:f6:1f:c1:
         e1:25:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:11 2024 by rpki-client on console-fra.rpki-client.org