Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File:                     21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier:          gw52KIcxlMrAPXJKiLYwxq/CD75y3GaZNOyErWPdIPk=
Subject key identifier:   83:53:A7:44:8F:C3:B4:12:1E:CA:65:35:71:1F:C7:1D:9E:12:6A:83
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer:       /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial:       063B46DCAE62BEBF7386CC37C18D8ABAE9FC729E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number:          60
Signing time:             Mon 16 Sep 2024 02:20:44 +0000
Manifest this update:     Mon 16 Sep 2024 02:15:44 +0000
Manifest next update:     Tue 17 Sep 2024 04:05:44 +0000
Files and hashes:         1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: BOPkdlb226kQRlYvYUAUriMuFhx/Oia/pjl/9uZYfN4=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Sep 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3b:46:dc:ae:62:be:bf:73:86:cc:37:c1:8d:8a:ba:e9:fc:72:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
        Validity
            Not Before: Sep 16 02:15:44 2024 GMT
            Not After : Sep 17 04:05:44 2024 GMT
        Subject: CN=8353A7448FC3B4121ECA6535711FC71D9E126A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:8e:61:9e:54:46:7e:3b:97:f4:0d:a9:59:
                    8a:be:60:e8:03:20:2a:eb:32:9f:da:fa:0b:68:6b:
                    05:cb:25:6d:dd:51:32:46:63:82:2e:31:dc:8c:49:
                    8c:96:7b:81:cf:4a:da:3d:d6:8f:50:2f:25:8c:b9:
                    17:78:cb:29:47:d4:13:39:7b:01:1f:db:e3:38:d7:
                    65:92:cf:b2:a1:a2:d0:48:33:e9:84:0b:c6:9d:91:
                    1d:3e:b1:65:76:6e:49:e0:fc:53:ea:02:60:eb:24:
                    2a:b3:f9:71:a9:bb:80:8d:ef:02:b6:89:c3:0b:0b:
                    39:82:ba:53:59:13:c2:83:0b:3b:4a:ba:dc:75:3f:
                    60:0d:05:57:55:3c:12:41:3a:f0:ef:ec:a4:c6:5a:
                    46:22:19:05:41:ee:a5:54:ee:b1:5a:10:d9:f8:df:
                    ac:55:54:55:0e:ba:39:fe:26:4b:d7:2c:73:ca:64:
                    c3:d6:74:5c:8d:32:51:7a:e0:a0:8a:33:be:e5:b3:
                    b8:f7:ea:3d:c1:c0:1b:79:9b:91:9a:b0:a9:cc:80:
                    11:ae:0a:d7:52:87:29:0d:fc:54:11:12:72:ae:a8:
                    08:58:61:ca:4b:30:93:07:30:72:5d:e5:5f:33:38:
                    7c:22:44:f7:51:0e:5b:fb:12:63:73:97:ee:70:d1:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:53:A7:44:8F:C3:B4:12:1E:CA:65:35:71:1F:C7:1D:9E:12:6A:83
            X509v3 Authority Key Identifier:
                keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:e0:83:0d:e9:f6:1e:4b:52:1d:c8:01:4e:e0:90:51:7b:
         5d:a4:91:b7:54:6d:8e:73:56:f9:36:c9:02:08:a5:e4:ea:8e:
         7d:b9:12:15:4d:e2:15:a8:b2:0a:8c:dc:57:11:63:7f:31:bc:
         16:d4:c5:73:47:ad:21:fe:b7:53:7e:1b:6f:6d:38:f2:e7:8e:
         dc:51:92:64:f2:f0:0e:d1:d4:e2:0b:be:c4:01:8d:ba:c2:5e:
         1f:f1:19:77:35:d6:9e:39:58:79:c4:a3:da:25:c8:5e:e2:70:
         7a:7e:00:52:e5:63:30:76:d5:cb:9f:8f:f0:69:0f:37:35:b9:
         d0:88:79:46:27:9d:e4:2c:cc:25:70:0b:35:ea:10:09:5f:35:
         73:fe:47:13:9f:d8:4b:d8:cb:47:a6:42:10:a4:22:74:dc:65:
         6a:51:40:76:b5:f7:0a:4e:6b:1f:5c:6c:0e:7d:86:31:fa:e6:
         d6:57:65:a1:1b:0b:aa:2c:69:c5:83:e8:d9:66:0f:16:88:27:
         34:84:4a:c0:8b:72:c0:4f:33:0b:30:0e:46:a9:38:3e:e1:9b:
         98:a8:16:e9:e9:27:89:43:0a:ec:c8:95:4c:bd:b1:f3:e3:76:
         65:bd:ce:e4:9b:3e:f7:da:cd:bc:02:00:21:52:05:7b:c7:df:
         02:17:bd:19
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBjtG3K5ivr9zhsw3wY2Kuun8cp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4
ODM0ZTA5ZDAeFw0yNDA5MTYwMjE1NDRaFw0yNDA5MTcwNDA1NDRaMDMxMTAvBgNV
BAMTKDgzNTNBNzQ0OEZDM0I0MTIxRUNBNjUzNTcxMUZDNzFEOUUxMjZBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7Y5hnlRGfjuX9A2pWYq+YOgD
ICrrMp/a+gtoawXLJW3dUTJGY4IuMdyMSYyWe4HPSto91o9QLyWMuRd4yylH1BM5
ewEf2+M412WSz7KhotBIM+mEC8adkR0+sWV2bkng/FPqAmDrJCqz+XGpu4CN7wK2
icMLCzmCulNZE8KDCztKutx1P2ANBVdVPBJBOvDv7KTGWkYiGQVB7qVU7rFaENn4
36xVVFUOujn+JkvXLHPKZMPWdFyNMlF64KCKM77ls7j36j3BwBt5m5GasKnMgBGu
CtdShykN/FQREnKuqAhYYcpLMJMHMHJd5V8zOHwiRPdRDlv7EmNzl+5w0TFdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUg1OnRI/DtBIeymU1cR/HHZ4SaoMwHwYDVR0j
BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv
MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx
YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC
OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK6OCDDen2HktSHcgBTuCQUXtdpJG3VG2O
c1b5NskCCKXk6o59uRIVTeIVqLIKjNxXEWN/MbwW1MVzR60h/rdTfhtvbTjy547c
UZJk8vAO0dTiC77EAY26wl4f8Rl3NdaeOVh5xKPaJche4nB6fgBS5WMwdtXLn4/w
aQ83NbnQiHlGJ53kLMwlcAs16hAJXzVz/kcTn9hL2MtHpkIQpCJ03GVqUUB2tfcK
TmsfXGwOfYYx+ubWV2WhGwuqLGnFg+jZZg8WiCc0hErAi3LATzMLMA5GqTg+4ZuY
qBbp6SeJQwrsyJVMvbHz43Zlvc7kmz732s28AgAhUgV7x98CF70Z
-----END CERTIFICATE-----
Generated at Mon Sep 16 04:18:37 2024 by rpki-client on console-ams.rpki-client.org