Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File:                     KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier:          P9IRGWSgo7UTTVpuDtvY5Vgss1TnJ3ZoX6MvdZB0vZk=
Subject key identifier:   F5:34:C4:B0:88:F3:E6:E6:99:CD:7C:3F:D6:DD:E3:69:1B:D0:EC:01
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer:       /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial:       019356F67695E384295C849AC08B6801CAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 03:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:12 +0000
Files and hashes:         1: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: AIoY3P2DkVasT1BrCGNZUKsP9zsBL3SvqFPVAzpE+g8=)
                          2: Pdbg2ogjIToKAatDl8eeOS3H9Zc.roa (hash: PjQHnMdnb9+5GxZS9OQI8exJo5flvAI/GlpSNwuLxg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:76:95:e3:84:29:5c:84:9a:c0:8b:68:01:ca:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
        Validity
            Not Before: Nov 23 03:00:12 2024 GMT
            Not After : Nov 24 03:00:12 2024 GMT
        Subject: CN=f534c4b088f3e6e699cd7c3fd6dde3691bd0ec01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:20:fa:a1:26:c4:5a:0d:1b:a0:f8:18:45:0d:
                    83:a9:7a:dc:47:f0:2e:bf:56:82:44:a2:c3:df:1d:
                    2b:cf:7b:f0:bd:ca:f3:dc:09:0f:22:fe:f5:71:97:
                    2f:7c:b5:91:30:01:2b:29:5a:a3:38:3d:f6:c1:14:
                    93:66:36:b2:be:39:6b:41:16:c7:5c:a3:45:91:f0:
                    8f:42:c0:ef:e0:bc:56:f9:b1:16:d7:c5:e1:94:25:
                    d6:82:a5:38:70:07:59:74:f6:34:5f:40:69:b9:53:
                    19:34:35:10:ed:23:df:2e:a7:f4:00:dd:71:83:2f:
                    cd:39:4a:d0:44:e6:a8:62:89:3e:ac:87:9a:07:25:
                    b8:23:39:35:df:53:6b:dc:67:fd:4e:29:cc:e5:b3:
                    50:52:92:de:dc:51:01:26:47:90:31:21:e2:bc:60:
                    81:29:f4:7e:6f:f1:4d:01:21:b2:ba:07:bf:93:7f:
                    0d:9c:39:73:eb:5e:c8:62:4b:f1:9b:6b:83:5c:6f:
                    2e:5c:2d:a7:9b:8c:23:2a:ec:29:5f:53:80:35:b4:
                    40:d1:34:81:44:f4:62:a9:6b:a5:a3:9d:4e:a7:5e:
                    57:36:67:c9:70:67:69:5b:39:f8:bd:f1:f1:dd:29:
                    cf:26:01:32:1b:80:5c:e5:db:f7:67:31:9b:ed:83:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:C4:B0:88:F3:E6:E6:99:CD:7C:3F:D6:DD:E3:69:1B:D0:EC:01
            X509v3 Authority Key Identifier:
                keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:fc:d3:85:45:43:ec:c9:a4:69:5c:a1:92:46:ea:fc:c2:
         57:80:ee:c7:84:48:cb:ae:4f:9c:e0:73:20:e9:40:f9:9c:10:
         e2:6d:2e:2d:32:68:ce:47:43:5a:32:20:fb:ef:8b:cd:3f:10:
         80:33:92:a8:df:a4:b0:68:66:06:62:d2:0c:66:86:03:f9:16:
         3d:ff:cc:9f:35:cd:2d:4e:48:b2:98:44:74:18:a2:b6:25:ae:
         63:83:6a:44:5c:97:78:a5:9a:2d:0f:6d:c6:53:ea:99:b0:bb:
         0c:90:38:ec:94:91:7f:35:8f:17:2c:70:85:57:4f:ff:cd:ab:
         06:37:4e:85:a5:37:ff:af:21:c8:c2:99:3a:e5:73:51:d1:1e:
         e4:48:3a:a0:c8:a0:e0:eb:10:c4:dc:42:8a:99:66:f8:28:ff:
         62:1a:01:89:95:bc:f0:d1:25:56:53:39:6c:b2:d8:c9:f8:eb:
         06:90:93:26:99:21:c5:6a:e1:56:ad:a3:56:07:e3:5c:a2:12:
         cd:af:aa:e6:4e:c3:91:4f:0c:bb:8d:06:18:cb:ee:24:80:1b:
         25:07:2b:79:ca:6b:0a:16:52:7c:95:ca:b1:4e:0a:00:1c:c7:
         65:87:2f:8a:87:b9:a5:3d:eb:ac:96:49:93:7a:31:b1:dd:d5:
         a5:07:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:09 2024 by rpki-client on console-fra.rpki-client.org