Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
File:                     oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft (raw, json)
Hash identifier:          9RFktK0N7hNSMw+HzfhTmiAgFej5NKOihIgHC25L38w=
Subject key identifier:   E6:7E:6A:6C:B5:2B:C5:4C:F8:62:AB:4B:91:D7:09:2B:94:A3:62:F9
Authority key identifier: A3:2B:6A:FB:18:B7:2F:2B:FF:27:A6:D6:2C:A7:7D:DE:F7:53:7D:0D
Certificate issuer:       /CN=a32b6afb18b72f2bff27a6d62ca77ddef7537d0d
Certificate serial:       01937613F678BA42D931DAE90F3D89C59CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
Manifest number:          0E07
Signing time:             Fri 29 Nov 2024 04:00:39 +0000
Manifest this update:     Fri 29 Nov 2024 04:00:39 +0000
Manifest next update:     Sat 30 Nov 2024 04:00:39 +0000
Files and hashes:         1: oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl (hash: dF4EFVA9xS7JFMx7tY0BGlytRlsVvwEB4pAMOwBccEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Nov 2024 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:76:13:f6:78:ba:42:d9:31:da:e9:0f:3d:89:c5:9c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32b6afb18b72f2bff27a6d62ca77ddef7537d0d
        Validity
            Not Before: Nov 29 04:00:39 2024 GMT
            Not After : Nov 30 04:00:39 2024 GMT
        Subject: CN=e67e6a6cb52bc54cf862ab4b91d7092b94a362f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:b7:a6:72:50:90:00:5f:e9:e7:bc:c8:8a:
                    57:5c:31:07:e0:31:ab:2f:40:dd:a6:18:49:4b:12:
                    1c:53:5b:5f:69:36:ab:8a:2c:41:f0:43:30:21:80:
                    b1:9b:42:4f:9f:09:6c:f8:da:b5:c8:c3:81:8a:09:
                    3a:5e:18:90:f4:ea:20:ef:8e:08:24:2d:e4:19:2e:
                    92:dd:98:25:07:1c:1e:ed:35:0c:57:a7:5c:49:0b:
                    ff:50:92:d5:ce:78:9f:9c:c7:e6:39:5f:b5:79:a2:
                    cf:d1:3a:d1:04:45:0b:b0:be:4a:2f:21:a2:f1:2b:
                    bd:69:70:3a:41:34:27:49:51:34:2f:c3:24:25:1a:
                    2b:90:aa:dd:ae:a0:68:13:26:92:e0:52:ef:0d:08:
                    93:f2:b7:76:88:31:ad:80:d1:3b:e1:72:6b:44:ec:
                    87:9a:20:6e:d0:71:b0:f0:50:dd:6c:15:8f:23:3a:
                    01:83:9c:fa:06:5c:9c:7a:27:fa:ea:2e:5c:12:a2:
                    4e:1e:c5:82:a1:81:73:5a:29:b7:36:53:34:3b:97:
                    e6:51:e2:77:ac:21:36:11:59:f5:47:1b:a8:ff:1a:
                    43:6c:00:01:a3:88:cb:49:77:50:91:49:d1:1e:58:
                    53:fb:3c:21:9e:de:e3:89:f9:6b:55:3b:f5:0c:f5:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:6A:6C:B5:2B:C5:4C:F8:62:AB:4B:91:D7:09:2B:94:A3:62:F9
            X509v3 Authority Key Identifier:
                keyid:A3:2B:6A:FB:18:B7:2F:2B:FF:27:A6:D6:2C:A7:7D:DE:F7:53:7D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:fd:41:5e:b2:53:53:f8:d6:7d:06:07:88:5a:74:94:3d:
         18:16:bc:5a:31:11:e2:33:83:e1:1f:82:ea:23:a3:1c:f1:5d:
         89:66:36:55:09:7e:49:09:aa:e0:b8:4b:b1:b7:cc:c1:3a:f8:
         82:33:4d:60:04:50:29:62:7c:85:25:d1:b5:67:19:02:ab:b5:
         bb:d5:6e:50:70:d3:9d:f6:4f:2c:a1:69:59:18:38:6e:fb:96:
         49:b3:ed:8d:9a:88:2a:2a:70:ab:61:1d:d1:8a:c0:9d:ba:6e:
         3a:38:3f:70:a4:00:a5:c4:d2:9f:08:d7:9d:90:dc:30:39:17:
         37:c8:20:13:dc:e9:22:a7:41:dd:b7:3e:19:59:e6:c6:1c:94:
         c4:45:10:96:a5:ae:51:c6:37:9d:4c:92:9e:4a:5d:46:c4:69:
         4f:6b:5a:40:81:b9:9d:22:b1:d8:26:5a:c0:fa:12:1f:b9:52:
         4d:12:51:9a:e0:72:d4:40:29:df:e2:ff:a2:21:a4:0c:20:26:
         dc:f1:e9:92:1c:df:dc:38:71:fc:b7:4c:48:24:44:98:c1:1e:
         2f:1e:78:52:c6:a1:cb:be:53:39:90:04:0c:d7:73:10:59:f5:
         e9:68:44:c2:4a:dd:20:3e:a2:32:0e:64:de:87:1d:e8:8e:fb:
         46:9b:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:15:07 2024 by rpki-client on console-fra.rpki-client.org