Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File:                     sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier:          KKcnnxQ2R57VThRWKvtq8n8ba+u59gkD+OcATqCuXso=
Subject key identifier:   60:47:AA:2A:11:D7:E0:64:3D:23:48:59:8A:7E:CC:B5:FD:4C:7B:E8
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer:       /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial:       019356F6736DD117DB9EA703485B2C1406B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 03:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:12 +0000
Files and hashes:         1: PO7QwC8NEyRzGtWJsLGzjkZn1js.roa (hash: 0sEzGMlfMuT4DPKEG9PSQX93WFjekihItPGHvGpPTMI=)
                          2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: YYMeiHbhEO9q4DkcLN1NwO/X40wti0Hgofjr9TRfjeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:73:6d:d1:17:db:9e:a7:03:48:5b:2c:14:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
        Validity
            Not Before: Nov 23 03:00:12 2024 GMT
            Not After : Nov 24 03:00:12 2024 GMT
        Subject: CN=6047aa2a11d7e0643d2348598a7eccb5fd4c7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:6b:24:78:6c:17:03:dd:18:46:54:b5:e4:
                    a6:a1:8a:ba:62:80:96:e6:ba:6a:7d:53:af:c1:bd:
                    10:3a:bf:2c:b3:fe:9b:17:90:f5:11:c0:85:6b:28:
                    cb:db:b6:91:3c:d0:ce:ed:52:93:b5:28:24:81:fa:
                    1f:10:2b:67:30:36:f0:5e:f7:17:48:8a:fc:51:ce:
                    bf:5c:f1:3c:9c:15:31:e5:f7:74:74:16:38:f5:19:
                    99:b3:e2:69:f3:cc:53:65:bb:97:10:49:e7:81:74:
                    28:34:f2:a1:38:e9:13:91:cb:c6:83:b7:a9:35:27:
                    13:93:7f:39:fe:c2:cd:4f:01:cb:29:22:1a:84:9a:
                    3f:f8:5a:79:af:9d:74:e7:a2:e6:33:ba:5f:3e:07:
                    15:dc:7f:dd:5e:29:d7:24:95:2f:11:01:e8:b9:be:
                    b2:9d:bd:a8:e2:da:54:50:44:8a:90:50:c1:e7:0a:
                    d1:c4:4c:bd:94:2a:76:bc:ba:48:ef:2d:70:2c:25:
                    72:ae:9f:b5:ec:cd:c8:e6:29:5b:a2:42:b3:cc:c2:
                    0b:d5:df:1d:8e:cb:8b:a3:23:ba:d4:2e:ec:23:27:
                    af:59:61:6b:36:f7:0e:97:ac:02:e5:92:3d:d9:39:
                    ad:6f:c8:da:46:62:5d:a6:a5:81:84:f4:0b:aa:f8:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:AA:2A:11:D7:E0:64:3D:23:48:59:8A:7E:CC:B5:FD:4C:7B:E8
            X509v3 Authority Key Identifier:
                keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:eb:b8:57:b5:c7:55:f3:d5:63:b1:16:b9:54:c6:92:3e:6a:
         3f:ec:ff:fd:8a:a8:1c:61:fa:f7:92:64:18:61:80:aa:d1:d2:
         5d:9e:6a:a7:94:da:32:79:fd:07:f3:fa:c0:20:84:fe:93:58:
         9b:f1:72:9c:46:08:1e:31:8f:69:3e:c0:54:2b:3e:de:58:df:
         94:a4:71:ac:02:f2:62:2f:63:00:68:d0:ca:68:09:2c:d8:fe:
         1d:94:8d:36:73:23:44:cf:36:f3:2d:4d:14:cd:93:c7:3d:83:
         43:1c:6c:3b:a0:9c:8d:de:52:d7:f8:4f:4b:4d:17:f9:60:ed:
         75:a5:32:3c:39:7a:9d:a5:5a:cc:b4:e1:9f:ba:6e:ce:68:b2:
         b2:b0:5f:9a:b8:c6:99:e9:d2:1a:62:6a:47:5a:6a:ef:96:be:
         40:05:94:be:cc:09:0e:ff:fe:e8:b4:ac:74:a5:6a:b4:72:11:
         3b:c2:4d:96:87:56:d9:27:76:ad:e7:16:36:1f:d0:06:7c:c6:
         36:c7:45:d3:ea:eb:53:b7:56:fc:f0:c9:2d:84:5a:d0:ab:65:
         33:97:88:9d:10:83:78:fa:02:1e:5f:d4:db:c9:2c:d7:a7:7a:
         b8:07:02:aa:17:e9:80:97:b3:00:cc:25:3b:c4:f8:d3:0b:ea:
         2c:fa:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:32 2024 by rpki-client on console-ams.rpki-client.org