Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File:                     tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier:          gqN9jNAEjRPvtpwBPTCIUNctQmM/qQtjFmMbfx/TIo0=
Subject key identifier:   09:89:0E:0D:59:04:40:48:D0:91:B3:8B:23:E5:F5:14:2B:EB:4B:D5
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer:       /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial:       01935878D5338D277F29D078C83D2524B4C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number:          0F31
Signing time:             Sat 23 Nov 2024 10:02:13 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:13 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:13 +0000
Files and hashes:         1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: sGrU0HnMtOmlzrmBdOFzyEQq6lKOeGeQDAUnjKecjSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:d5:33:8d:27:7f:29:d0:78:c8:3d:25:24:b4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
        Validity
            Not Before: Nov 23 10:02:13 2024 GMT
            Not After : Nov 24 10:02:13 2024 GMT
        Subject: CN=09890e0d59044048d091b38b23e5f5142beb4bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:80:dd:dd:c8:dd:b4:84:67:8c:97:6b:ff:ff:
                    ef:8e:7a:ab:2f:ed:2d:e4:cb:46:c6:ce:0d:f1:c5:
                    e8:36:fe:8d:53:fb:34:a1:e8:d3:a3:b0:f1:4a:93:
                    6c:bc:13:21:7a:26:91:df:5c:ca:57:e8:7c:be:c5:
                    51:82:1c:aa:6c:1c:e3:3f:9b:53:6e:d7:74:8e:ef:
                    89:7b:b6:03:4c:f8:ad:02:a6:3a:ec:ca:b3:b5:c0:
                    c2:9f:2c:27:01:bd:ed:1c:48:cc:5b:93:c3:18:5d:
                    50:fa:16:1d:45:97:ae:4d:c4:4f:4e:5b:0a:78:c5:
                    a5:e0:dc:77:03:1b:58:a4:cb:93:75:bb:e3:4e:43:
                    21:14:37:61:4b:7e:d1:5b:f1:d2:66:78:07:80:a2:
                    19:62:27:33:b9:b7:69:49:f7:37:57:f0:95:e4:7b:
                    8f:5a:b8:96:2d:06:e1:bc:7f:73:a5:47:41:56:6c:
                    70:d1:4c:90:19:7e:09:8d:79:79:9c:a9:50:77:a8:
                    d1:a3:ee:db:9b:d1:16:41:2a:f5:75:dd:6d:40:e1:
                    1d:87:e7:a7:f0:f4:8f:b3:b6:11:02:d5:3d:71:a1:
                    67:75:69:6d:ed:5b:71:dd:ae:2b:46:9a:e0:1c:d4:
                    cb:cc:28:c8:48:90:61:86:21:52:b5:b5:32:b6:4c:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:89:0E:0D:59:04:40:48:D0:91:B3:8B:23:E5:F5:14:2B:EB:4B:D5
            X509v3 Authority Key Identifier:
                keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:00:53:35:4d:70:58:82:77:b7:1b:81:88:34:63:f2:07:
         ea:4e:7c:7d:d7:46:71:37:84:b6:5c:34:6a:4c:c0:b1:e9:1f:
         fa:47:a9:c4:5f:8b:76:a7:e6:46:d3:9c:8f:d1:14:76:db:de:
         de:dc:30:11:6e:9d:85:0b:6b:f4:b4:f9:94:e9:ef:9a:51:97:
         04:e6:14:03:d8:03:13:98:f8:29:2e:c4:33:34:2b:3b:7c:72:
         09:fc:3a:1b:43:7c:ff:7b:4b:6c:17:21:33:be:44:85:51:51:
         31:03:71:bd:28:fe:92:05:02:31:93:48:bb:57:f1:b8:c5:a0:
         26:bc:52:e8:81:f7:9d:0c:53:26:82:53:f6:80:15:ee:b2:40:
         1e:45:72:ae:58:6d:47:dc:bd:68:02:53:43:90:c2:72:32:db:
         86:ad:3e:cd:33:08:43:a0:a7:f0:ba:66:66:08:b3:ab:67:64:
         84:77:64:59:b4:f5:10:81:d0:91:c1:a3:b7:92:db:1f:51:86:
         15:cf:f7:98:d5:c9:5a:91:fe:9f:f5:18:ed:43:c9:48:8e:0a:
         eb:f5:dc:82:1b:e4:6c:fd:39:3b:7e:da:d3:9e:04:12:e3:34:
         16:78:ab:8f:ad:5b:ff:09:b7:2f:3e:80:9f:8c:92:06:8b:9e:
         86:b2:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:57:52 2024 by rpki-client on console-fra.rpki-client.org