Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File:                     K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier:          dRotE5cMW8VxFzmUpuLJQEFDYcX0OyLAiJZqsid3NeY=
Subject key identifier:   C9:07:36:0D:45:7F:E9:EA:66:14:DF:7F:41:16:AF:C8:88:44:00:8D
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer:       /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial:       0193549ADB9D8258F72110461A5F9EA8EE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number:          0B4F
Signing time:             Fri 22 Nov 2024 16:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:55 +0000
Files and hashes:         1: DN3ecQDL_wDqjYyctywV8GMnmPc.roa (hash: Sba2vmMLjAdudedpAXgOE5log/eieSdseSgB+8M2ep0=)
                          2: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: S1R92+lzsE8aNigcJ+vi39Cee7iisSE9eJ8owGPuBkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:db:9d:82:58:f7:21:10:46:1a:5f:9e:a8:ee:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
        Validity
            Not Before: Nov 22 16:00:55 2024 GMT
            Not After : Nov 23 16:00:55 2024 GMT
        Subject: CN=c907360d457fe9ea6614df7f4116afc88844008d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:5d:f2:d6:0b:19:6a:6e:bb:a2:39:49:6a:
                    9e:08:10:27:dd:2b:eb:08:3c:89:df:0f:13:a4:6e:
                    14:09:06:e3:98:6f:12:f8:46:ad:8f:38:f8:3d:5c:
                    5d:a2:23:7c:d5:58:4d:51:74:4a:40:58:a5:2a:f4:
                    54:f4:8d:42:9e:33:2d:2d:5e:f8:c4:0e:dc:5e:e6:
                    19:a0:10:41:66:2d:d5:2a:ab:cd:1a:38:44:a5:76:
                    bd:3a:66:a6:ae:72:d4:85:29:d3:d2:9b:16:2c:e8:
                    73:95:a1:16:1f:84:9c:99:87:18:c6:11:7c:90:bf:
                    42:20:44:f3:e3:e9:cb:c2:a5:48:a5:d4:21:bd:f9:
                    0e:36:c6:72:28:8c:c4:01:be:de:60:3f:dc:6b:4d:
                    07:9b:db:59:b6:73:77:b7:71:f9:8d:77:9f:38:00:
                    e3:eb:b3:5c:cb:1f:40:37:86:7a:41:c9:e9:04:0e:
                    8b:91:f1:06:3f:88:93:c4:87:ab:57:6c:1a:0c:23:
                    a7:4b:8d:a2:f9:7e:2f:49:93:cc:e7:5c:9b:da:2b:
                    ab:a7:14:35:66:78:10:e2:82:5a:51:bd:b7:24:9a:
                    8e:23:01:a8:fb:ec:d9:2f:66:4f:97:14:9c:51:7d:
                    6d:71:c2:14:5b:cc:23:b1:e3:b4:1f:c8:40:37:34:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:36:0D:45:7F:E9:EA:66:14:DF:7F:41:16:AF:C8:88:44:00:8D
            X509v3 Authority Key Identifier:
                keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:04:b5:be:fd:02:15:4a:66:35:f1:35:7b:4c:05:4f:b0:47:
         e0:61:b8:99:63:63:90:ca:43:6a:bb:bc:45:65:16:45:b2:d5:
         3d:9a:0e:f5:d8:26:fd:b3:47:ea:2a:25:ab:05:f9:2c:4a:fe:
         33:72:dd:38:bf:c1:d6:0d:c8:33:fa:45:1d:64:39:61:69:5f:
         15:fb:df:eb:b5:44:83:34:62:ec:05:6d:97:99:18:f0:2a:64:
         f8:fa:0f:44:06:03:2b:75:9b:21:c1:04:0b:fe:9c:cf:0c:23:
         fe:26:20:97:ec:d2:d6:e6:69:1c:58:6e:42:63:9a:11:33:84:
         bb:3f:96:be:28:5d:2a:28:bc:6a:58:d9:a9:f4:f1:50:c1:22:
         4a:b1:30:df:3f:b9:77:7d:fe:23:75:f3:56:cd:8e:e6:b2:23:
         68:3b:69:56:70:2e:63:cb:6e:3e:87:62:2f:97:04:15:7f:8a:
         02:56:73:6e:3c:09:03:14:29:75:61:de:74:2e:9f:b9:86:46:
         a8:89:4c:e4:1b:9c:f8:02:a5:ea:c5:f3:fe:cb:c1:26:58:62:
         88:e0:2a:9b:d9:7f:b3:8c:76:04:a6:51:b1:97:fa:3b:1f:a9:
         cb:5a:32:94:a2:06:04:f9:ee:e8:5c:4b:e0:2d:1b:a1:69:f7:
         ba:0d:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:55 2024 by rpki-client on console-fra.rpki-client.org