Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File:                     21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier:          /28KLwm6gwz7NDt9+uKWsMNSt68dBlfytsGyuOZqXpg=
Subject key identifier:   DF:01:37:86:62:53:E2:09:C7:85:0E:B1:61:39:22:FD:CB:14:CE:98
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer:       /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial:       4F95647FD5238C6BD581D33411680813588A347C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number:          BA
Signing time:             Sat 23 Nov 2024 06:43:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:38:53 +0000
Manifest next update:     Sun 24 Nov 2024 09:40:53 +0000
Files and hashes:         1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: VZodv7b+VwABtNlM0S2LC28KxJT70VQsZ2TV9JCD/kQ=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:95:64:7f:d5:23:8c:6b:d5:81:d3:34:11:68:08:13:58:8a:34:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
        Validity
            Not Before: Nov 23 06:38:53 2024 GMT
            Not After : Nov 24 09:40:53 2024 GMT
        Subject: CN=DF0137866253E209C7850EB1613922FDCB14CE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:4a:64:a5:0d:7e:8a:03:99:d0:74:b9:04:
                    07:ba:43:23:f1:12:96:17:0d:28:88:cf:3d:c9:fd:
                    0c:4f:ae:60:94:a2:eb:c2:75:74:b6:ee:a1:07:27:
                    61:b6:44:ad:86:12:ce:cc:ca:a8:90:2e:b3:6b:03:
                    5c:24:2e:e4:9c:24:0d:ff:a0:43:f6:51:eb:c5:82:
                    cd:39:df:0e:98:aa:a6:69:9c:ec:99:dd:f6:f7:80:
                    24:fa:68:1c:87:df:06:74:50:57:12:aa:07:be:4d:
                    47:d4:16:bf:3e:9e:de:cf:0e:60:8f:9b:63:b9:10:
                    41:45:77:9b:b1:d3:70:32:b6:54:da:8e:da:89:cf:
                    2c:e9:f2:ca:df:01:a1:38:92:5c:e8:72:9e:fe:c1:
                    1a:50:63:e1:02:64:e6:13:a7:3f:de:ce:4a:2b:dd:
                    de:23:82:0b:9a:5c:6b:d0:9c:a8:e5:13:1e:c8:b3:
                    aa:17:4f:25:14:2d:84:a4:fe:64:c3:b4:18:55:81:
                    95:bf:3c:be:45:19:51:ce:b1:a7:eb:e1:c6:94:f6:
                    eb:6f:97:80:e6:cf:8e:99:9e:d1:4e:09:d0:96:7b:
                    c3:56:be:e5:89:ef:23:cd:51:74:7b:b3:53:a7:01:
                    cf:08:00:76:fe:a8:1a:e1:bf:8b:23:0a:ae:32:e0:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:01:37:86:62:53:E2:09:C7:85:0E:B1:61:39:22:FD:CB:14:CE:98
            X509v3 Authority Key Identifier:
                keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:c2:f1:e5:f2:10:8f:15:11:7f:f0:26:2c:34:65:eb:56:
         c3:5f:b0:e2:89:0c:b7:86:39:d3:91:0d:b1:a0:f0:c8:be:f5:
         57:e6:09:06:3e:2f:7d:ac:3d:ff:0b:86:d1:c7:08:ce:14:ee:
         17:66:3f:52:62:68:45:7b:d4:a6:bb:e0:64:fd:60:9a:07:38:
         4e:08:72:0d:00:b0:31:62:07:6a:a0:2e:e5:fd:e5:b0:f2:a0:
         df:58:ba:81:9f:44:97:ba:be:43:83:23:60:72:34:13:d9:21:
         6c:5e:2f:f4:07:70:b1:b1:7b:40:a2:05:32:11:37:74:a1:59:
         82:d5:8d:dd:6a:1b:7f:09:75:43:e8:57:9b:f4:ff:60:d5:6a:
         f7:cf:a7:90:2c:1d:d3:d9:1d:7d:f7:b7:77:d8:57:8c:fd:0a:
         eb:c6:b8:d0:cd:5f:f5:fe:68:c1:cc:a4:07:e8:8c:63:b1:41:
         2b:a5:c3:1c:41:6a:dd:fd:14:2f:70:2a:71:56:74:ba:eb:18:
         45:88:f6:d1:04:03:17:0f:f8:1e:01:51:2d:7a:21:4a:e8:b0:
         54:77:1a:27:74:70:f6:1a:f8:8a:7d:99:77:43:20:79:14:81:
         c3:f3:33:33:8f:af:ec:84:8c:12:ee:f5:33:c0:cf:ad:e2:54:
         cb:2d:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:55 2024 by rpki-client on console-fra.rpki-client.org