Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File:                     k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier:          vXGw/yHDKu+Z6IDBZK/fsrpY9aL56eK5orBPuUFQwGc=
Subject key identifier:   5D:64:A9:6C:F2:26:D4:78:C1:34:D7:D5:8D:1E:7E:8D:31:FF:47:BC
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer:       /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial:       019355E3D0F55A902D423113E74EAC0066A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number:          07AD
Signing time:             Fri 22 Nov 2024 22:00:13 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:13 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:13 +0000
Files and hashes:         1: 3s068CnHUYE2tkWQ74XCwBZR8i8.roa (hash: 8FrH634pdrSGPaGc/OzS/S1N4Zfh3Jw+aCDaklLvM/k=)
                          2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: YIidEmfKxt5Qj4NN+H0kT46xucMR+VPPKcEaL9Xm5jc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:d0:f5:5a:90:2d:42:31:13:e7:4e:ac:00:66:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
        Validity
            Not Before: Nov 22 22:00:13 2024 GMT
            Not After : Nov 23 22:00:13 2024 GMT
        Subject: CN=5d64a96cf226d478c134d7d58d1e7e8d31ff47bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:9a:8f:c1:a3:18:67:65:9f:07:ac:2a:1b:
                    d4:11:39:f0:bd:09:30:ac:d6:c4:8e:77:1d:25:81:
                    a0:57:e0:09:3f:29:73:77:7d:c8:c1:75:d9:d4:93:
                    1d:b5:ba:c3:6b:6a:d3:2e:2a:47:5c:f9:37:b0:f2:
                    44:67:88:bb:ac:c5:43:77:91:2e:a1:4a:a0:81:79:
                    d1:93:c3:38:e4:f2:e7:fb:0f:07:5a:ee:e1:6c:1a:
                    f5:26:eb:b0:8a:68:d4:7d:63:02:fc:dd:ef:f3:65:
                    6a:5d:58:42:fc:a4:99:f2:26:41:da:b2:09:db:5c:
                    65:2f:26:54:4e:1a:4d:56:97:4d:a9:df:a8:c0:a6:
                    91:3c:6f:da:e7:63:72:fe:00:50:ab:ad:03:1f:c1:
                    15:88:60:00:4a:9d:0b:7d:ef:8d:41:ff:39:c6:d6:
                    c2:89:04:aa:a8:c3:39:0a:c1:cc:4d:4f:db:f8:d9:
                    79:82:ad:18:e6:60:ae:28:bc:85:33:fc:4b:7b:4e:
                    91:48:29:7e:fb:55:a2:bb:70:de:86:2c:31:06:ad:
                    72:6e:50:ec:28:c0:81:a2:a7:bc:1e:30:93:78:37:
                    80:5f:72:09:0e:7b:5f:72:c0:26:1c:cd:7d:f0:90:
                    ea:bb:79:75:36:13:e4:f0:40:b0:1b:59:06:6a:3d:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:64:A9:6C:F2:26:D4:78:C1:34:D7:D5:8D:1E:7E:8D:31:FF:47:BC
            X509v3 Authority Key Identifier:
                keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5b:a9:95:2d:a8:26:b0:74:6c:ba:09:d3:6c:29:8e:3d:c0:
         67:e0:9f:81:dd:22:41:40:a4:9c:e7:b5:84:e4:2a:90:62:2c:
         e0:ee:67:35:d1:c4:2f:7c:a7:9e:7c:67:65:51:57:77:e6:99:
         fc:42:ae:8c:bd:c5:2d:c6:97:c1:1c:62:19:4a:66:fe:a0:c2:
         53:20:6d:c3:8b:70:f5:97:16:50:b0:9b:69:e7:88:ab:a9:d3:
         68:ed:44:14:c4:67:b7:d4:b8:d4:4b:bc:17:4c:15:db:58:2c:
         a6:1f:b8:7b:29:4d:37:c9:be:2e:07:9c:f5:8d:50:a2:c1:df:
         cd:9c:6d:ec:3c:e9:4a:38:89:a8:aa:e2:3c:4d:94:af:f4:f5:
         54:13:c1:94:0c:0d:4d:2c:0e:11:bb:67:b0:8a:61:25:67:fb:
         02:34:cf:6c:c2:fa:d9:4f:a7:e2:f3:29:5c:ce:c2:7a:22:dd:
         2e:3f:72:b5:75:e5:55:66:a8:ed:cc:50:d7:2d:c9:1f:15:82:
         43:90:a4:5b:72:4d:8c:ec:b1:3e:2e:71:d3:24:2b:8b:71:11:
         9c:81:79:71:5a:58:34:07:1d:b7:e3:b5:1f:85:6b:9e:34:a7:
         94:ad:cb:0d:2d:b2:44:33:1f:82:c5:e7:18:b8:46:20:33:6b:
         c6:a1:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:24 2024 by rpki-client on console-fra.rpki-client.org