Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          Fz+r335j8kqAXtZslO8q/Xy5JK7kcT/MzqRLnU9ZNfY=
Subject key identifier:   29:68:54:2C:AF:EF:27:F2:A7:78:34:E8:FD:9F:4C:95:78:CE:62:16
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       019356F6C626EEEA3F848D71754574693FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:33 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: DCQp2X/umHEXE8twaq+m/0ONbzZ95sJfRGT42A9VbZk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c6:26:ee:ea:3f:84:8d:71:75:45:74:69:3f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Nov 23 03:00:33 2024 GMT
            Not After : Nov 24 03:00:33 2024 GMT
        Subject: CN=2968542cafef27f2a77834e8fd9f4c9578ce6216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:ea:cc:be:25:3c:80:51:47:cd:04:40:24:
                    4f:f9:f4:82:b2:c1:b2:14:fa:7d:3a:67:c6:1e:3a:
                    92:68:ff:8d:b3:61:6b:61:de:2e:1a:fd:ed:5d:e6:
                    c5:2d:38:92:df:a1:9e:00:ff:45:c8:1f:f1:4f:ff:
                    f6:f2:37:7e:17:72:71:49:ac:2f:08:e6:e3:f5:a7:
                    59:ab:88:fd:ea:3a:29:74:c5:93:e5:c0:88:87:3c:
                    23:a6:e4:c1:6f:04:33:8a:d1:81:8b:e8:82:c4:98:
                    40:54:91:fe:f3:e8:df:97:1c:8b:80:9a:48:d6:10:
                    ed:43:f3:f0:93:d0:13:3b:a3:64:39:15:ca:ad:18:
                    f7:d3:eb:55:29:8d:bf:d5:64:64:d4:5d:16:e4:6f:
                    00:e3:38:8d:58:80:ab:30:2c:24:f9:fe:57:93:17:
                    5b:ca:2b:4c:13:c2:68:1f:24:4e:33:fa:4c:9c:29:
                    0e:19:34:67:9c:30:3f:7d:dc:36:ad:72:7e:b3:20:
                    b9:17:c7:30:b0:a7:20:37:c4:88:63:0e:50:cf:3e:
                    ba:d4:4d:6c:78:43:a6:d7:c9:58:c9:d4:32:8d:e6:
                    4e:2d:9a:dc:4e:6c:76:0a:d7:38:07:4d:5e:4c:63:
                    d0:9f:3b:41:aa:95:09:1c:3a:7b:4a:0a:29:60:16:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:68:54:2C:AF:EF:27:F2:A7:78:34:E8:FD:9F:4C:95:78:CE:62:16
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:62:f4:e2:2d:39:54:53:42:6e:89:b1:e6:1e:95:c9:85:30:
         74:d1:5b:52:f6:03:a2:d9:b0:62:4b:ba:cc:98:39:88:42:d5:
         5e:c7:8a:6d:74:22:c7:e0:4a:5d:67:e8:e8:3e:31:ac:c8:36:
         9d:b4:39:d2:ff:a9:0b:0b:6c:a9:f5:37:56:44:42:71:78:c7:
         43:7a:3d:95:34:11:a5:3c:d6:7b:9c:d4:77:c2:d6:a4:d7:82:
         94:91:85:4e:46:3c:17:31:68:59:49:0d:80:5d:1b:39:fb:e1:
         cc:29:72:75:21:74:15:4a:f5:31:81:dd:4a:6f:79:05:5f:56:
         ed:f2:d6:9d:51:11:ae:f4:4a:bc:ab:90:58:4c:1a:58:3d:3a:
         13:b5:30:35:94:ad:81:8d:14:3a:01:05:d3:09:5d:3b:0c:a6:
         17:45:0f:a5:65:90:39:4a:31:43:14:8e:76:a5:ce:8a:a6:75:
         88:2f:c4:17:c1:09:0d:14:65:02:a6:f8:6a:cb:07:c5:7c:94:
         87:13:67:28:4f:c5:e6:6d:fd:84:00:eb:6f:b1:68:35:d1:b1:
         67:cf:55:07:4b:ed:4a:b4:14:09:44:03:6a:f5:42:e4:7d:47:
         98:bd:bf:37:6f:c8:dc:cb:8b:66:b1:ac:1d:23:20:84:88:f5:
         25:f3:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:08 2024 by rpki-client on console-ams.rpki-client.org