Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File:                     pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier:          j3IatXx8zRxNdOsPfT9/d+/AtfmWEHiUuTKRzjnjGD4=
Subject key identifier:   78:82:C5:EB:88:7D:BE:54:AF:69:C0:FA:85:C8:3A:DE:4F:A9:93:50
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer:       /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial:       01936A7DC938C78F6993DED92051514BB52D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number:          0AB4
Signing time:             Tue 26 Nov 2024 22:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:48 +0000
Files and hashes:         1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: w0JAgi9s5LEAt1Ordv3Nyqa27NHY5ieLJhluxvccjDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:c9:38:c7:8f:69:93:de:d9:20:51:51:4b:b5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
        Validity
            Not Before: Nov 26 22:00:48 2024 GMT
            Not After : Nov 27 22:00:48 2024 GMT
        Subject: CN=7882c5eb887dbe54af69c0fa85c83ade4fa99350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:f9:b7:6c:e2:57:af:06:f5:c0:68:74:42:
                    7e:fe:12:d2:7a:a4:27:e5:9f:ce:dc:f3:ae:ef:81:
                    5c:67:83:f3:c8:4c:06:97:ea:1d:0e:17:b5:55:91:
                    ce:f9:ff:e8:e5:1d:d3:11:4c:a0:e4:43:8c:9a:1d:
                    0f:4f:5e:47:a7:3f:ac:e9:c6:34:43:90:55:a8:c0:
                    05:68:14:7e:07:cb:77:19:4e:31:98:61:2f:bd:d4:
                    73:7e:53:07:5d:58:e7:a0:0c:b8:e3:60:3b:86:bb:
                    0d:f2:1c:95:04:05:29:c8:eb:dd:3c:e1:68:4c:32:
                    ca:60:5f:3d:36:70:83:54:fd:13:37:7c:b9:17:8a:
                    e9:9c:26:17:25:b2:7e:c9:d3:32:e5:65:26:40:f3:
                    b4:e6:4f:55:fe:22:4c:db:0b:a8:50:ee:de:02:3d:
                    a1:69:f7:56:40:e6:5f:73:cf:d2:ed:b5:f4:49:14:
                    9e:8d:9d:e4:f3:cd:68:23:04:5d:55:e2:85:78:25:
                    86:ec:66:c8:de:bf:5e:53:14:da:66:bf:05:aa:56:
                    ab:af:54:78:dd:12:b5:7b:35:33:e8:ab:c2:d8:46:
                    9c:2d:6a:e6:b1:bf:3c:84:f3:7b:bf:fd:74:09:34:
                    87:44:b7:c6:c0:1b:d9:20:77:8b:f8:cb:b8:b7:01:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:82:C5:EB:88:7D:BE:54:AF:69:C0:FA:85:C8:3A:DE:4F:A9:93:50
            X509v3 Authority Key Identifier:
                keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:33:a0:35:fc:a4:0d:96:67:5e:e7:ad:10:ed:a3:b9:d6:
         99:48:ec:85:76:75:6e:80:9c:e6:04:4b:fa:80:a1:6e:85:a4:
         ac:d9:25:d7:3c:d9:7c:ee:96:75:e8:87:55:9e:d8:b6:25:82:
         ed:04:2c:10:93:c2:14:71:24:8e:21:7d:79:7f:68:1a:39:b1:
         67:58:85:34:81:ff:d7:f3:1d:fa:97:83:c8:84:41:cd:cc:a0:
         10:68:c4:26:4f:c0:17:df:c4:5c:dd:dc:35:42:e4:a6:81:56:
         09:45:99:ab:64:ad:02:d3:de:bd:51:36:4b:e9:e9:ea:8c:17:
         a0:f6:ff:f3:ff:17:e3:2d:f5:38:4d:a2:84:7f:aa:cd:e7:06:
         d9:a3:f4:a5:15:4a:38:80:ec:58:5d:20:28:9d:3e:e2:9d:d7:
         ed:af:ec:36:1e:ab:af:d9:bd:a3:27:da:08:99:4c:e4:fc:4a:
         6d:f8:b2:6b:da:00:f6:10:a1:80:e3:23:3b:10:be:19:87:66:
         9e:44:0d:34:b9:f1:76:ee:28:a9:99:75:03:bb:ab:6b:34:35:
         ff:dc:95:ab:b3:d1:46:d1:28:3e:5f:89:c0:32:84:b3:6b:41:
         f8:64:b6:42:33:46:31:13:e8:42:11:20:d6:87:39:cc:1d:1a:
         fd:50:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:16 2024 by rpki-client on console-fra.rpki-client.org