Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File:                     89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier:          hcDx0lyqSrdMGGHuEPte5X53+DRPeIoVjjoxpeB4oGs=
Subject key identifier:   B6:54:49:11:79:12:81:79:57:B2:37:03:FE:CB:DC:44:3B:05:92:63
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer:       /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial:       159224ED95D86DD1595E38D5627934ECAC02C2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number:          60
Signing time:             Mon 16 Sep 2024 12:10:45 +0000
Manifest this update:     Mon 16 Sep 2024 12:05:45 +0000
Manifest next update:     Tue 17 Sep 2024 16:08:45 +0000
Files and hashes:         1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: heB3I3W8C0ZGxze6s8eROJwdRwxvSiDGTx5jkVg3Krc=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:92:24:ed:95:d8:6d:d1:59:5e:38:d5:62:79:34:ec:ac:02:c2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
        Validity
            Not Before: Sep 16 12:05:45 2024 GMT
            Not After : Sep 17 16:08:45 2024 GMT
        Subject: CN=B65449117912817957B23703FECBDC443B059263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:88:81:3f:d4:fd:d6:44:d3:c0:45:14:a8:
                    29:ed:fc:d9:fb:46:7a:89:eb:d2:a7:36:66:ff:8a:
                    6e:85:77:be:89:06:df:8c:be:32:51:40:6a:e4:ed:
                    38:a0:68:da:93:94:e6:18:1d:7d:9a:12:95:21:91:
                    8d:6f:93:d1:64:71:61:83:e5:f5:fe:a6:86:e7:f9:
                    bf:33:d2:ca:ec:d2:f0:59:c7:6f:51:d3:01:fe:e1:
                    4f:1e:c6:2d:02:32:13:68:36:56:2a:db:73:57:65:
                    ec:be:96:3b:ca:da:56:52:a7:59:eb:f4:dd:46:37:
                    66:12:67:8e:2a:01:46:f0:fd:54:93:4e:cd:4f:b4:
                    cd:27:4c:e3:9e:5f:ad:e9:5e:fc:dd:73:7c:38:cf:
                    71:1e:37:60:21:51:9f:ba:03:48:37:78:73:0c:95:
                    e7:a1:52:a7:ac:31:9b:df:12:b6:0b:62:b9:0b:14:
                    42:c4:ac:8e:5b:72:86:2f:70:3f:16:22:d4:d1:1c:
                    04:57:c0:b6:2d:e9:34:8a:53:c1:f9:39:d3:30:c5:
                    d3:e6:1d:86:59:5b:2d:86:c4:cf:da:47:45:56:e9:
                    06:8f:a1:fc:8d:d2:b7:c6:a1:88:71:36:d5:06:23:
                    99:e8:7a:38:32:1f:f8:d9:80:e8:bb:6a:98:03:aa:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:54:49:11:79:12:81:79:57:B2:37:03:FE:CB:DC:44:3B:05:92:63
            X509v3 Authority Key Identifier:
                keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:07:18:e4:d1:ee:2e:bc:4b:c6:63:74:fa:e0:64:b9:a2:
         71:f6:6c:e1:0e:06:c4:36:58:8d:23:10:48:35:e1:0e:13:ec:
         3e:37:83:45:49:34:d0:8f:2f:d8:7a:0c:7b:58:29:fc:16:33:
         88:35:4d:5f:59:fa:fc:f2:8d:2e:b2:7a:cb:a2:13:3b:53:1a:
         1c:87:7f:75:54:f9:71:0a:e6:71:87:d4:2a:69:ec:30:93:b7:
         ef:18:55:3f:ab:2b:33:80:60:f9:ad:ce:e8:a3:c3:90:a9:9f:
         db:13:13:44:f9:96:a0:63:83:1b:11:f8:f4:50:9a:06:b0:2d:
         d3:73:3a:74:02:03:9e:d0:5f:eb:3d:ca:1e:e3:a2:70:a4:1c:
         fe:ce:db:70:f6:c5:68:cf:a9:1b:d0:3c:bf:92:26:a4:ea:4e:
         1b:1c:d4:95:b7:dc:90:ef:87:72:a7:ea:b0:1a:82:39:1c:26:
         20:38:53:fa:eb:bd:8b:b7:f9:db:72:5d:36:55:f7:90:7a:d1:
         11:75:2c:b9:76:02:04:71:46:b8:85:62:db:e6:b5:dc:21:3a:
         ef:fe:1c:41:f1:d2:c5:47:0d:40:39:37:2e:86:c7:47:af:fa:
         00:f6:01:4a:7c:eb:b2:25:f4:4f:88:94:72:94:34:ff:cf:11:
         ed:4c:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 14:32:46 2024 by rpki-client on console-fra.rpki-client.org