Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
File:                     KkVY4mVr-JczOJWU3xRNIdHcAxM.mft (raw, json)
Hash identifier:          QvogSpdHaq+6fdNRuMQ3V0ABhv0KN6KMTJ/0OQAjpZo=
Subject key identifier:   7E:46:DC:CA:BC:EE:8E:B9:E3:EF:74:AB:EA:E0:9C:40:76:35:ED:56
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Certificate issuer:       /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial:       01935689A9DBD70A1669E504D54E1619CEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
Manifest number:          0309
Signing time:             Sat 23 Nov 2024 01:01:22 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:22 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:22 +0000
Files and hashes:         1: IDWCNBQQFEnbye7uGg_fkl-BR20.roa (hash: dSFRXZ0ZiNA8FLCAgC5blFKKzz7II9TRZXP+5twNJaU=)
                          2: KkVY4mVr-JczOJWU3xRNIdHcAxM.crl (hash: fFFrKw42+MiERLLpwTA4/KnTfGP7Hx0KVMV8RSLuznI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a9:db:d7:0a:16:69:e5:04:d5:4e:16:19:ce:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
        Validity
            Not Before: Nov 23 01:01:22 2024 GMT
            Not After : Nov 24 01:01:22 2024 GMT
        Subject: CN=7e46dccabcee8eb9e3ef74abeae09c407635ed56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:2f:25:84:47:78:8e:93:90:6a:ca:f5:99:
                    c5:3e:57:36:d3:4b:e7:54:51:9f:dd:17:84:ad:55:
                    fd:c1:d3:9d:58:60:31:40:12:5d:90:1f:05:72:ed:
                    e5:02:a8:f6:72:48:e2:62:c5:c5:41:19:f9:a1:42:
                    91:31:0a:86:ab:2a:b3:bb:46:24:01:2a:34:21:8a:
                    1a:89:06:c0:27:cf:b6:4e:a7:46:52:ea:d1:d5:0e:
                    28:bf:2d:de:bc:c8:76:80:7b:6e:74:a3:f8:f2:61:
                    34:0e:db:4b:3c:f1:66:01:85:44:18:ae:ac:62:86:
                    49:0c:c3:c4:dd:1c:f3:00:71:87:ae:b7:d4:d6:4b:
                    45:45:f5:02:60:ac:2b:ad:ad:a5:9a:25:69:2f:a7:
                    f8:77:b4:b6:2d:bf:f5:3d:b4:dd:10:c5:7a:0f:c5:
                    a1:fa:8b:b1:00:57:3c:88:cf:ff:4e:34:a9:88:bc:
                    9a:bd:8f:8d:54:38:3d:cc:41:be:07:0d:24:da:26:
                    a9:6c:31:cf:d0:85:84:e3:de:12:11:76:f8:93:ef:
                    e2:87:9a:1e:a2:75:a5:93:28:8a:69:6f:50:62:bf:
                    dd:e6:17:2d:b0:bf:e5:1b:22:49:fe:df:9f:db:b0:
                    13:53:79:b2:eb:2c:50:d8:f7:dd:b4:02:7a:8c:1e:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:46:DC:CA:BC:EE:8E:B9:E3:EF:74:AB:EA:E0:9C:40:76:35:ED:56
            X509v3 Authority Key Identifier:
                keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:93:a5:11:f8:b6:2d:9e:0e:40:bf:46:ff:c3:2a:fa:df:df:
         be:fa:7f:01:07:94:77:74:00:15:08:61:67:00:61:e8:62:ad:
         f1:aa:41:93:35:15:36:99:92:d4:37:74:5e:2c:2f:29:0b:d2:
         a5:1e:f9:01:6c:20:3b:40:b7:ae:d3:43:7a:4b:8f:75:c0:87:
         4f:4c:69:76:a8:ea:9d:b2:10:ac:13:2f:83:24:00:15:9a:9b:
         b6:05:d3:4f:31:ae:7d:bb:8c:ff:ad:d8:6e:5f:fe:03:48:77:
         2e:81:78:03:60:36:9c:eb:fe:0d:14:bb:a1:50:3d:a9:33:81:
         47:e8:39:6f:80:01:b8:24:4f:b0:90:72:71:c6:a5:f4:09:18:
         02:5b:f4:0c:10:d7:eb:1a:c9:1d:df:65:48:36:42:71:d3:d8:
         bd:e7:e6:a6:36:f5:e7:4a:53:15:a6:6b:0f:b2:cd:70:48:44:
         7e:82:90:f5:e4:5e:5e:f4:ed:db:e5:29:59:14:86:63:e5:32:
         91:24:c1:bb:e4:ea:57:50:5f:1a:7e:47:b9:c8:c2:c2:98:66:
         89:0d:25:39:46:f2:d3:2e:96:aa:10:f6:5c:cd:53:c6:98:67:
         08:78:8b:c5:23:7c:4d:87:f1:22:c9:57:91:cf:74:40:29:15:
         23:72:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:56 2024 by rpki-client on console-ams.rpki-client.org