Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/dbdc2a-7438-4e39-9720-bbef0eb36cab/1/vUPdjzmA84iC7jRnoRWPR3dr25Y.mft
File:                     vUPdjzmA84iC7jRnoRWPR3dr25Y.mft (raw, json)
Hash identifier:          8+movCDbu0WHs2Ss4O3CSbK0hxg6aRKGw6AAJ5oR8So=
Subject key identifier:   49:64:98:34:C4:71:63:0B:5F:B4:E8:43:8A:30:BB:C4:2E:C5:EC:6A
Authority key identifier: BD:43:DD:8F:39:80:F3:88:82:EE:34:67:A1:15:8F:47:77:6B:DB:96
Certificate issuer:       /CN=bd43dd8f3980f38882ee3467a1158f47776bdb96
Certificate serial:       019239CB5D454C48DAF8DC11A5FDA9E65124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUPdjzmA84iC7jRnoRWPR3dr25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/dbdc2a-7438-4e39-9720-bbef0eb36cab/1/vUPdjzmA84iC7jRnoRWPR3dr25Y.mft
Manifest number:          18
Signing time:             Sat 28 Sep 2024 18:01:21 +0000
Manifest this update:     Sat 28 Sep 2024 18:01:21 +0000
Manifest next update:     Sun 29 Sep 2024 18:01:21 +0000
Files and hashes:         1: vUPdjzmA84iC7jRnoRWPR3dr25Y.crl (hash: LdzlS7CbPlBRtxVg92Ry6N91MWKBCwkJ+okvg+kHdhI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/dbdc2a-7438-4e39-9720-bbef0eb36cab/1/vUPdjzmA84iC7jRnoRWPR3dr25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/dbdc2a-7438-4e39-9720-bbef0eb36cab/1/vUPdjzmA84iC7jRnoRWPR3dr25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUPdjzmA84iC7jRnoRWPR3dr25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:cb:5d:45:4c:48:da:f8:dc:11:a5:fd:a9:e6:51:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd43dd8f3980f38882ee3467a1158f47776bdb96
        Validity
            Not Before: Sep 28 18:01:21 2024 GMT
            Not After : Sep 29 18:01:21 2024 GMT
        Subject: CN=49649834c471630b5fb4e8438a30bbc42ec5ec6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:9c:a8:5b:44:80:33:de:07:b9:13:9a:8e:
                    93:a4:88:b5:38:4c:5a:5a:5d:59:cb:f3:a4:eb:97:
                    56:22:89:7f:18:65:ba:a3:d1:a1:a4:fc:62:c7:28:
                    9c:73:e6:97:6b:26:95:96:43:b7:09:e1:1c:b5:ed:
                    ca:ee:ec:ac:19:61:d1:6d:ef:95:b2:ac:49:f9:1a:
                    79:4f:d0:56:ef:32:df:74:a9:d6:0d:8e:64:34:62:
                    81:c2:ab:c0:1d:be:1e:8c:31:3d:1f:98:65:34:02:
                    75:5b:79:e2:30:54:36:ed:56:e5:ac:60:97:96:60:
                    6b:c7:b4:1a:87:bc:4b:0d:fd:03:5e:fc:31:18:77:
                    44:a9:81:b4:70:4e:95:4a:5a:66:a3:6e:8f:87:b0:
                    c4:86:5e:ba:a3:10:9b:21:ce:25:22:76:ce:b2:12:
                    8f:9e:f8:1f:dc:ce:27:93:1e:2b:a3:b3:4f:65:63:
                    67:f7:be:b1:ab:8c:12:f3:19:3f:a0:a9:c8:58:cd:
                    ba:2a:ab:bc:3c:6d:5d:5b:04:a1:7f:23:29:8a:0b:
                    1e:e1:7d:5b:cb:10:59:ca:61:62:5d:b6:4f:5d:35:
                    7c:97:05:f8:6e:68:d0:3a:ba:03:9f:a3:00:7f:0b:
                    72:bf:c9:38:cb:4d:2b:ca:33:78:75:c5:07:22:d6:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:64:98:34:C4:71:63:0B:5F:B4:E8:43:8A:30:BB:C4:2E:C5:EC:6A
            X509v3 Authority Key Identifier:
                keyid:BD:43:DD:8F:39:80:F3:88:82:EE:34:67:A1:15:8F:47:77:6B:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUPdjzmA84iC7jRnoRWPR3dr25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dbdc2a-7438-4e39-9720-bbef0eb36cab/1/vUPdjzmA84iC7jRnoRWPR3dr25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dbdc2a-7438-4e39-9720-bbef0eb36cab/1/vUPdjzmA84iC7jRnoRWPR3dr25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:65:89:ba:c5:27:e5:22:c9:88:65:22:59:71:5b:4a:15:
         32:be:79:2c:d4:14:b2:e5:ee:bb:32:e1:11:96:d6:fa:c7:28:
         f5:40:7a:f2:e0:22:fe:9c:82:69:53:23:f0:13:95:81:ab:22:
         4d:e8:18:f0:09:cc:49:52:f2:1c:ee:33:ad:03:fc:1f:a2:56:
         cc:86:7d:02:a4:89:09:81:c1:f4:e8:47:3d:a8:7b:a3:0d:04:
         9a:85:1d:7d:f6:61:34:6f:06:a9:b5:04:dd:84:10:14:ae:82:
         11:49:4f:cd:6a:66:ce:0f:74:33:62:2e:0e:2b:ec:a5:8e:31:
         b3:7e:8c:5f:87:48:84:97:17:00:8a:ea:b5:32:a4:fa:e5:e7:
         60:df:d1:b1:68:43:7a:3e:34:14:fd:5b:a3:0f:a4:72:31:c3:
         e6:df:02:f2:f6:f6:0a:a1:09:55:04:e2:26:71:7b:55:97:79:
         da:25:1b:3d:a7:08:89:55:e9:ef:c6:7e:72:2f:46:08:cd:bc:
         13:9d:c4:55:e6:7e:aa:61:3d:d6:6e:d1:df:a5:a7:51:80:5b:
         3c:00:0d:54:51:cf:e4:f5:c9:83:31:e3:45:de:2f:27:2e:09:
         f3:53:1a:59:77:46:0f:ea:91:98:2d:43:8e:03:15:fd:a3:11:
         04:cd:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:05 2024 by rpki-client on console-fra.rpki-client.org