Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2544d1-9a52-420b-91a9-c6af7aaaecf3/1/d_iewV2QW-OPP9RC3vV_Cq23Db4.mft
File:                     d_iewV2QW-OPP9RC3vV_Cq23Db4.mft (raw, json)
Hash identifier:          gpYc9OtjqAzZGaLfMOxInnIgVoniPCsQltwIzBbyrcA=
Subject key identifier:   62:FE:02:AB:33:D7:05:7E:68:9E:79:6A:C3:8C:B6:42:E8:F1:4C:1B
Authority key identifier: 77:F8:9E:C1:5D:90:5B:E3:8F:3F:D4:42:DE:F5:7F:0A:AD:B7:0D:BE
Certificate issuer:       /CN=77f89ec15d905be38f3fd442def57f0aadb70dbe
Certificate serial:       019356F6F3A1F1BDB116963D9F33A10BB779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_iewV2QW-OPP9RC3vV_Cq23Db4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2544d1-9a52-420b-91a9-c6af7aaaecf3/1/d_iewV2QW-OPP9RC3vV_Cq23Db4.mft
Manifest number:          0983
Signing time:             Sat 23 Nov 2024 03:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:44 +0000
Files and hashes:         1: d_iewV2QW-OPP9RC3vV_Cq23Db4.crl (hash: ExhAKS95ocfhyUepXESszQx44M6BPHriBvWhmiU/4sI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2544d1-9a52-420b-91a9-c6af7aaaecf3/1/d_iewV2QW-OPP9RC3vV_Cq23Db4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2544d1-9a52-420b-91a9-c6af7aaaecf3/1/d_iewV2QW-OPP9RC3vV_Cq23Db4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_iewV2QW-OPP9RC3vV_Cq23Db4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f3:a1:f1:bd:b1:16:96:3d:9f:33:a1:0b:b7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f89ec15d905be38f3fd442def57f0aadb70dbe
        Validity
            Not Before: Nov 23 03:00:44 2024 GMT
            Not After : Nov 24 03:00:44 2024 GMT
        Subject: CN=62fe02ab33d7057e689e796ac38cb642e8f14c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:e2:15:50:7e:b3:61:66:5d:bd:c3:af:94:
                    8d:27:51:3c:28:56:d1:3d:72:87:6d:87:1a:11:ce:
                    54:0f:1c:c4:45:b7:cc:e1:9b:86:13:0a:4f:a5:8c:
                    be:11:40:60:28:d4:89:53:ea:b2:16:a5:11:86:db:
                    4f:bf:89:d2:c0:3f:6c:90:ee:1e:6c:ab:7d:3c:ec:
                    69:eb:fe:c5:09:86:11:c5:5e:1e:50:05:db:c2:35:
                    76:f6:7b:4a:75:66:32:23:21:9f:dc:91:a8:20:43:
                    db:45:e5:65:fd:ca:e2:95:42:a8:a0:ff:59:f4:5c:
                    ef:1a:78:1c:0e:57:ec:3b:b3:9c:03:cf:12:35:7a:
                    3d:da:e5:82:7d:85:79:50:1a:fd:d2:79:7d:d2:a2:
                    27:14:43:91:d6:ab:25:15:a6:dd:af:24:f1:44:14:
                    33:db:a6:35:66:23:99:0d:ec:06:4b:eb:8a:ef:7f:
                    ea:05:8c:56:8f:e5:6e:77:7a:10:33:a7:55:d4:4d:
                    3a:0d:c1:18:93:fa:61:82:67:90:71:84:1e:73:87:
                    96:54:6a:66:68:26:ea:cc:b6:08:4a:23:f9:e7:98:
                    fa:25:5c:6a:cd:94:31:79:2d:f8:5f:d8:89:13:d4:
                    2c:cb:a0:2c:d6:8c:20:5e:14:d1:20:9e:6a:ef:56:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FE:02:AB:33:D7:05:7E:68:9E:79:6A:C3:8C:B6:42:E8:F1:4C:1B
            X509v3 Authority Key Identifier:
                keyid:77:F8:9E:C1:5D:90:5B:E3:8F:3F:D4:42:DE:F5:7F:0A:AD:B7:0D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_iewV2QW-OPP9RC3vV_Cq23Db4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2544d1-9a52-420b-91a9-c6af7aaaecf3/1/d_iewV2QW-OPP9RC3vV_Cq23Db4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2544d1-9a52-420b-91a9-c6af7aaaecf3/1/d_iewV2QW-OPP9RC3vV_Cq23Db4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:28:e3:d9:40:59:5c:42:38:39:88:55:2f:2b:7e:9b:41:05:
         92:50:73:f0:a1:c4:2a:7a:00:b2:d1:c5:ee:66:35:55:a3:c9:
         c4:da:20:ee:d9:9a:da:9e:e9:82:aa:6c:9f:84:5f:3f:ad:9d:
         36:6e:34:65:96:9b:e8:10:30:b1:04:57:55:78:52:4c:b3:af:
         79:bd:3a:17:a5:5e:9d:44:77:b2:aa:54:6d:56:f3:6f:a2:3d:
         9c:a4:a7:ab:4a:67:5e:bb:fa:4e:b8:fd:31:15:a6:17:70:9f:
         7f:8c:02:5b:67:da:59:70:73:ae:6d:07:6a:07:bf:1f:f8:b0:
         73:09:f7:85:6b:bc:6a:93:4e:89:a0:f7:80:99:02:00:13:29:
         48:37:ab:e5:fc:b0:ed:fd:1f:65:04:bb:d9:6f:07:16:91:03:
         fe:95:0e:c3:10:21:af:d6:dc:bf:8d:15:e2:56:a4:85:43:7f:
         92:fe:1e:e2:42:94:22:b9:43:7b:4a:00:7b:ff:5e:b8:f5:0d:
         e6:ad:fa:4e:d8:ed:b3:57:8e:56:b3:37:19:e6:ab:21:37:b3:
         99:63:e1:fb:5e:76:4d:0a:a9:62:5b:ec:0e:4f:a9:bc:e9:5d:
         1d:27:8c:d7:14:0d:ee:cf:c2:f3:e8:3d:b9:74:b1:a2:22:53:
         5e:74:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:04 2024 by rpki-client on console-fra.rpki-client.org