Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
File:                     EekXH_gxPaZBvhPUkK1pjcFsNmo.mft (raw, json)
Hash identifier:          Bf26r6ZfvIarCHosRH2n4eNkGDmqxgp4hvccHkv8tyM=
Subject key identifier:   11:2E:C5:DF:81:BE:AD:FD:8A:87:E8:B3:0B:36:65:71:96:48:12:FE
Authority key identifier: 11:E9:17:1F:F8:31:3D:A6:41:BE:13:D4:90:AD:69:8D:C1:6C:36:6A
Certificate issuer:       /CN=11e9171ff8313da641be13d490ad698dc16c366a
Certificate serial:       019360678D57E73619288A2AD3BA6AB89D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EekXH_gxPaZBvhPUkK1pjcFsNmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
Manifest number:          02FE
Signing time:             Sun 24 Nov 2024 23:00:19 +0000
Manifest this update:     Sun 24 Nov 2024 23:00:19 +0000
Manifest next update:     Mon 25 Nov 2024 23:00:19 +0000
Files and hashes:         1: EekXH_gxPaZBvhPUkK1pjcFsNmo.crl (hash: ZE0xNI7xqwkk4ARHVvAvUYilrfbfc8hBPmUfIOr6tYs=)
                          2: wqeaFYGcht4Rdqiv6WanHaJ9V18.roa (hash: Jonp1e7X2Xu4Xye1s+Rbb895uhQ3xGGxW8tqs3ffzwM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EekXH_gxPaZBvhPUkK1pjcFsNmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:67:8d:57:e7:36:19:28:8a:2a:d3:ba:6a:b8:9d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e9171ff8313da641be13d490ad698dc16c366a
        Validity
            Not Before: Nov 24 23:00:19 2024 GMT
            Not After : Nov 25 23:00:19 2024 GMT
        Subject: CN=112ec5df81beadfd8a87e8b30b366571964812fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:30:34:6b:56:02:d6:c8:8a:32:61:85:a0:
                    ac:4f:f8:9e:ae:d2:98:20:8c:9d:cd:2c:d0:f0:d7:
                    a8:65:80:9c:b2:5e:97:a9:e9:d9:b9:98:4e:62:46:
                    52:4d:e1:eb:a8:c7:72:f3:8f:96:d0:ab:0b:59:b2:
                    a3:1d:15:c9:63:3e:b6:72:a6:56:43:b7:94:28:4a:
                    53:97:81:37:dc:3b:e5:59:96:d6:d0:6c:30:0d:43:
                    15:3d:4b:97:b7:9d:99:19:c2:9c:97:7c:15:e7:e7:
                    34:04:f1:a1:e9:02:5c:df:13:39:22:0f:e2:53:f9:
                    32:8a:34:a6:af:36:bc:40:50:1d:3c:79:3f:79:fa:
                    f4:ef:5f:15:e7:0d:cc:a6:d8:7b:e5:a5:fd:31:a9:
                    ec:48:ec:81:85:c3:76:77:29:ff:7f:bf:e9:0c:27:
                    18:7d:a2:57:81:50:d8:db:b7:b0:c7:d8:b1:b8:d4:
                    62:31:05:bb:ca:23:ea:7f:09:7c:7d:dd:6d:53:45:
                    e8:58:21:fc:d1:f6:9c:1a:5f:e6:8d:d0:4a:28:fb:
                    0d:7d:12:3d:3a:d6:e4:63:c1:3c:2a:84:48:e9:7f:
                    b9:37:5f:9d:10:2c:cd:c8:02:07:60:1e:6e:c7:30:
                    68:bf:a5:ac:30:7a:81:c3:cf:fd:c0:47:82:ca:66:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2E:C5:DF:81:BE:AD:FD:8A:87:E8:B3:0B:36:65:71:96:48:12:FE
            X509v3 Authority Key Identifier:
                keyid:11:E9:17:1F:F8:31:3D:A6:41:BE:13:D4:90:AD:69:8D:C1:6C:36:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EekXH_gxPaZBvhPUkK1pjcFsNmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a5b12e-d90e-44d4-b63a-95d105a70c94/1/EekXH_gxPaZBvhPUkK1pjcFsNmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:f3:f4:23:04:db:db:66:41:58:6e:10:2f:91:82:67:b2:
         a2:a6:9f:1d:e6:72:93:02:78:de:55:ab:16:d1:37:78:fa:22:
         db:57:00:51:70:e4:5b:be:d1:00:74:ed:36:73:83:0d:04:cd:
         5e:cb:69:86:5f:aa:c8:1a:40:b0:50:59:d7:60:d8:c4:c9:31:
         4c:44:f0:2f:05:16:0b:7d:47:62:39:f6:91:ce:eb:e0:60:a0:
         09:3b:f0:fc:f3:15:32:d7:9b:24:af:66:24:4e:bf:57:16:1a:
         a6:f7:6d:2b:93:aa:72:ef:14:b3:e1:d3:0a:c7:5d:79:60:84:
         69:db:43:36:34:b8:44:59:90:c4:cc:8e:e0:07:4e:97:ad:9e:
         72:46:55:f0:57:e4:70:e7:37:38:63:dd:8a:08:f7:dd:f3:b6:
         f8:0c:5f:72:8b:f7:81:8c:0b:8d:1e:32:f9:fe:b9:82:ce:79:
         b3:47:63:ec:7f:86:7e:32:16:6a:5b:1b:8a:a4:fd:32:0d:04:
         5b:16:b3:89:b3:c6:28:2f:8e:a1:2c:bd:5c:62:ab:74:1a:8a:
         ee:b1:df:51:30:e4:5c:c2:25:29:e5:75:33:a6:9c:93:20:3b:
         e9:fe:58:f1:08:f5:ba:eb:f7:d2:40:a3:8c:b0:15:08:91:ad:
         c4:77:a3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:46:48 2024 by rpki-client on console-ams.rpki-client.org