Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          I460PKMUSCZ4hw1IPimf+9NWYrypsZolygggjnxWRc4=
Subject key identifier:   8A:6C:65:D7:42:A5:7C:8C:ED:DF:9E:C6:A6:77:35:AF:30:55:C5:3D
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       019355083F5A07ED45EFC6C0735AECA4BEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          1286
Signing time:             Fri 22 Nov 2024 18:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:23 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: ak2yinGHhtAEanmOlxuCUqpOmZI1R/59hI75FdjRRq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:3f:5a:07:ed:45:ef:c6:c0:73:5a:ec:a4:be:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: Nov 22 18:00:23 2024 GMT
            Not After : Nov 23 18:00:23 2024 GMT
        Subject: CN=8a6c65d742a57c8ceddf9ec6a67735af3055c53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:a1:c1:a8:65:5c:e7:1d:5e:19:3e:d9:64:
                    74:ff:77:5f:7a:33:fa:88:4f:55:ec:41:ed:c0:cf:
                    6d:47:fb:20:1f:4b:af:df:58:75:c4:00:11:90:b2:
                    0b:d5:f0:e7:1f:db:b8:0e:82:46:d1:ac:e7:e4:58:
                    be:de:f5:2b:72:64:f5:8d:5d:eb:2e:d2:6e:58:64:
                    4c:85:c5:85:60:21:48:80:ba:ae:70:59:87:6b:2b:
                    73:96:f7:78:b9:18:ad:0b:ff:e7:5f:b6:52:0a:69:
                    47:10:1e:74:74:0f:f6:9f:44:47:ff:41:76:0d:89:
                    91:4c:17:02:a7:ac:83:49:52:40:47:51:63:af:f4:
                    a4:54:76:3c:fc:fd:4c:e3:a8:32:ac:a5:fe:c8:93:
                    c6:9e:23:93:4c:b1:de:33:d5:42:22:94:a8:d6:42:
                    78:af:33:31:50:3c:28:d4:05:68:bc:6d:c1:0a:d4:
                    54:82:50:92:1b:72:41:09:1b:8a:22:92:93:e9:ea:
                    60:b5:21:ea:99:54:d3:6f:ad:7d:23:38:05:0d:1e:
                    a4:71:69:82:95:64:23:c1:46:c3:0e:cd:79:c6:87:
                    70:32:04:14:0e:04:fc:48:bc:18:3d:9a:c6:d7:f7:
                    2d:6b:75:25:be:19:d4:9b:ec:f3:a7:58:dd:ea:16:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6C:65:D7:42:A5:7C:8C:ED:DF:9E:C6:A6:77:35:AF:30:55:C5:3D
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:28:b6:3a:89:94:5d:29:95:50:65:92:bd:8b:7a:97:d8:0a:
         f7:94:a0:4c:1f:ff:26:31:81:a7:4a:32:d4:03:51:70:3c:2c:
         64:3b:ad:1c:cd:77:38:d9:2c:9d:9b:10:42:b8:67:20:e3:17:
         08:1c:ef:b4:c3:18:84:dc:a4:fd:70:e2:69:a4:ad:c1:a2:2a:
         22:2e:72:d6:f2:94:61:7d:f4:e3:f2:d9:1f:98:81:53:83:14:
         54:ed:2e:b9:84:73:9c:26:79:bc:99:b9:c8:5e:da:04:46:62:
         27:44:fe:85:48:07:a0:af:43:f9:23:01:f1:7e:48:32:00:18:
         0e:47:a3:46:f1:44:ff:b9:2e:b4:04:fd:fd:c8:37:7e:5c:cf:
         1d:5f:68:58:f8:e5:df:30:2c:0f:74:e8:41:bc:d5:53:a4:1e:
         b2:79:00:54:47:df:a7:2b:df:56:fe:71:48:df:c1:b0:67:f6:
         a1:bc:b3:ff:f9:77:4a:ff:db:a5:90:89:c3:29:76:e8:9e:4d:
         9d:87:45:1d:c2:21:7a:7e:bb:65:6e:2c:ae:13:5d:24:91:60:
         7f:87:b1:a3:ad:47:d4:80:45:11:e2:69:ce:7f:31:1c:11:0c:
         ea:ad:82:e1:f4:08:d0:74:17:b0:9d:c2:45:2b:a5:f2:48:9f:
         79:ac:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:45 2024 by rpki-client on console-fra.rpki-client.org