Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          lDjm64o6sazpEJdcCFMCyw7NVv3oCV2Qu5q/1HT6MlE=
Subject key identifier:   8E:EC:44:92:89:9B:1F:A0:4C:77:8D:49:79:4E:7C:59:26:AE:AB:7D
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       01936933E73A7A4FD99629C09342B6928571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 16:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:29 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: pPRKPxdmd0m8JqOStPEzD6r6eVcCERG7wrmVcgzF+uA=)
                          2: mob8UZ2SSQ7TqH6Ku4D7Z9qyrPU.roa (hash: w/ukyH9KLBhPF/t77HNpTV7/ZmprkwWr5+3MMytjvGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:33:e7:3a:7a:4f:d9:96:29:c0:93:42:b6:92:85:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Nov 26 16:00:29 2024 GMT
            Not After : Nov 27 16:00:29 2024 GMT
        Subject: CN=8eec4492899b1fa04c778d49794e7c5926aeab7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:02:8b:3f:97:fe:fb:d8:63:38:2f:fb:7a:
                    fb:b7:96:5f:35:8d:28:1f:ed:4b:51:01:3a:36:f6:
                    fa:33:64:b1:82:22:c1:08:a4:ae:24:06:08:8c:68:
                    65:b6:03:56:e1:90:9b:c0:3b:e8:7f:cc:8b:15:62:
                    29:f8:91:3b:ad:41:0e:f4:8e:5d:1c:c3:00:f8:0e:
                    1f:23:13:db:6b:2c:12:80:5b:c5:ef:87:e2:d7:c2:
                    5f:0d:17:0a:31:58:1d:f5:b3:d1:9f:a6:11:33:d5:
                    70:31:02:63:07:c0:91:78:63:c3:24:7f:10:fd:22:
                    2a:96:94:2d:a0:29:45:7f:2d:98:3f:d2:c8:11:f3:
                    4e:13:42:26:86:ce:ab:bb:c3:44:c7:a2:25:c6:c4:
                    3c:cf:2e:53:2c:aa:f2:8b:15:4a:d4:83:0f:9f:9f:
                    03:53:c0:79:26:f8:3c:a2:67:8f:be:5c:00:66:e1:
                    e6:34:c0:df:27:50:33:7e:4e:b7:14:b3:7c:5f:2b:
                    04:bc:36:0d:2d:62:9c:92:c5:05:03:13:3c:be:d3:
                    92:66:2e:9b:75:0a:1d:f0:b0:5a:83:0e:34:34:9a:
                    cc:52:d4:64:c2:5c:0d:e7:e7:a3:13:1c:77:69:ed:
                    28:d3:dc:ac:83:8b:6c:45:ff:fc:2d:a2:32:4b:d1:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EC:44:92:89:9B:1F:A0:4C:77:8D:49:79:4E:7C:59:26:AE:AB:7D
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:2f:25:39:c2:d7:a6:a6:62:ba:12:f6:9b:ab:3b:c9:67:61:
         38:b2:14:27:80:8d:ab:dd:09:3c:16:5a:b4:82:57:a5:49:c7:
         95:0f:c3:ab:4f:0d:0b:a6:cb:24:d3:70:71:ea:22:ba:42:2f:
         c5:c6:07:76:53:52:57:dc:79:30:e9:25:5a:3f:df:63:30:e8:
         25:ab:73:6a:27:f4:70:09:82:69:46:b3:47:b5:25:12:6d:05:
         af:d9:56:56:5e:4c:2e:53:64:51:43:95:6c:b6:6f:e3:47:aa:
         e0:16:16:93:c2:de:b9:f9:f1:c7:e0:8b:85:7b:f8:bf:07:2e:
         79:51:af:39:75:cb:1b:1a:da:98:99:5a:a6:d5:f1:4a:fd:8a:
         a8:c8:8f:3e:c4:81:9d:7b:63:0b:a5:5b:43:70:64:1e:6b:fb:
         46:02:b9:d9:fd:1a:c8:42:88:f2:25:84:55:f6:34:0e:d8:de:
         34:0a:fe:08:ad:58:8b:3d:c4:51:0c:64:d9:d0:72:0d:28:b5:
         24:c1:2d:34:a5:15:d3:d2:4b:3c:81:f9:f6:3a:61:6f:d6:bb:
         97:c1:5b:fa:c7:52:20:c0:95:b3:26:a8:65:15:67:78:ba:81:
         4b:81:26:98:46:1c:73:28:9b:84:ba:e9:5a:a1:df:29:bd:b6:
         aa:ea:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:30 2024 by rpki-client on console-fra.rpki-client.org