Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File:                     fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier:          qB3CoBM/2ieZElZKSDQkZBhsVWOWf/gBP8K8l3e6ZZk=
Subject key identifier:   65:38:D9:0C:D0:1C:1E:0B:08:DA:CD:DC:8E:28:72:4C:39:A1:1E:30
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer:       /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial:       019357D28B9B8EA700327D20A40F474EA761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number:          0181
Signing time:             Sat 23 Nov 2024 07:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:36 +0000
Files and hashes:         1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: 0cj8DUxKdMFJbOeJrzZndviUgVrIc9vs0gRoJ7VHmyc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:8b:9b:8e:a7:00:32:7d:20:a4:0f:47:4e:a7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
        Validity
            Not Before: Nov 23 07:00:36 2024 GMT
            Not After : Nov 24 07:00:36 2024 GMT
        Subject: CN=6538d90cd01c1e0b08dacddc8e28724c39a11e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:c6:b5:51:0c:17:b0:c3:42:48:19:bd:30:
                    d2:2f:ab:d6:a2:b3:5d:0f:d4:9a:3a:7d:9c:f5:7e:
                    71:19:41:b3:6b:14:b3:ff:7c:ca:6c:c1:4b:6b:c8:
                    33:eb:23:32:15:de:29:a9:59:9e:d3:68:2f:4c:66:
                    43:b1:93:cc:c1:b3:95:7e:31:31:46:d5:17:16:5e:
                    32:8f:4a:a0:1d:0b:b5:9d:9d:3d:19:8b:f2:01:d0:
                    1e:dd:3c:1a:c1:03:a1:b1:18:46:53:c0:88:89:8b:
                    df:1e:a9:f6:c0:81:89:ff:e4:02:e8:28:d0:44:99:
                    cf:7a:85:f8:48:80:be:38:8a:ff:22:14:ff:90:85:
                    d1:60:86:2b:90:91:2c:2c:08:d9:ad:5d:7a:65:6a:
                    ba:7b:bf:9d:8b:f7:fc:40:30:ad:d9:51:8c:64:70:
                    72:48:b1:c0:26:94:21:10:a9:cb:4f:c1:7e:47:3a:
                    8b:91:3e:8b:a1:5c:e5:d1:57:eb:32:62:18:47:e9:
                    77:e6:1c:22:42:13:9b:4a:32:af:fc:14:52:fe:64:
                    20:fd:a9:53:ed:d5:41:85:4c:fe:4b:f3:b6:78:09:
                    6d:7b:58:80:70:f5:ea:7c:9f:56:76:91:a5:b0:c6:
                    71:6a:f2:11:6b:9f:87:f5:3e:a7:a8:c9:d2:d5:fd:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:D9:0C:D0:1C:1E:0B:08:DA:CD:DC:8E:28:72:4C:39:A1:1E:30
            X509v3 Authority Key Identifier:
                keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:ab:0a:68:6c:ab:16:40:e2:c3:43:4f:ec:b7:74:c3:fd:
         28:09:82:ed:8e:3d:a6:d4:84:6b:1c:99:cb:32:74:ef:c3:d3:
         7b:73:31:31:e3:72:75:81:5e:1d:40:01:7f:11:06:8c:8c:5b:
         8f:90:d4:37:ee:58:3b:25:41:4d:c6:48:a3:6e:28:f5:d8:51:
         24:11:c9:79:5f:fc:dc:07:2f:3b:d3:9a:30:ad:1d:88:dd:3f:
         da:48:99:41:a7:0b:c5:d0:8d:1b:0c:35:13:9f:80:0f:9e:ae:
         7c:90:da:13:ab:90:78:eb:f1:8c:07:c6:8b:80:60:30:50:38:
         51:24:08:c7:26:38:26:8b:a6:58:83:b7:b1:dc:8f:04:5f:ae:
         e0:9f:70:e7:b7:9e:70:a2:ee:6c:77:86:23:f0:37:df:1a:75:
         a3:91:d2:ac:9c:92:8b:b3:b6:a8:ff:f6:65:5f:70:37:03:21:
         bd:39:61:7d:e7:e8:02:81:4f:f5:10:2d:6a:85:53:7c:8a:8a:
         19:f5:1d:11:43:ff:ae:fc:c0:ba:79:14:1e:04:e5:b9:e7:f4:
         5f:bd:9b:c6:ca:f0:a7:26:53:08:74:22:c1:a4:fd:07:49:a5:
         64:d0:e8:c3:d0:f6:49:be:b7:01:3e:63:62:e0:7a:8f:fc:d8:
         ee:cc:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:23 2024 by rpki-client on console-fra.rpki-client.org