Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
File:                     NWlXUM1GUx3eil-yZyzcgw09DG4.mft (raw, json)
Hash identifier:          tM6HQ3J48AlFcobBJ6MnpkLn2SWMvQqmADgNHFQ6MH4=
Subject key identifier:   EB:4D:35:AA:84:2B:80:73:DB:6E:4B:01:39:A3:3C:29:73:28:99:DC
Authority key identifier: 35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E
Certificate issuer:       /CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
Certificate serial:       019355ACFFF4BA9618A07C9C4E9CAC6B33F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
Manifest number:          018D
Signing time:             Fri 22 Nov 2024 21:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:21 +0000
Files and hashes:         1: NWlXUM1GUx3eil-yZyzcgw09DG4.crl (hash: b1IMZNr67Sz6FqG1HK3uvdtg6lEVnI4WEKKrypg9hHQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ac:ff:f4:ba:96:18:a0:7c:9c:4e:9c:ac:6b:33:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35695750cd46531dde8a5fb2672cdc830d3d0c6e
        Validity
            Not Before: Nov 22 21:00:21 2024 GMT
            Not After : Nov 23 21:00:21 2024 GMT
        Subject: CN=eb4d35aa842b8073db6e4b0139a33c29732899dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:21:a1:18:87:5e:1d:1d:94:0d:22:40:3b:
                    30:23:fb:76:8d:a5:40:c0:79:b5:0b:24:e8:95:98:
                    56:90:91:f6:62:ca:43:61:ed:78:3b:db:b9:99:c2:
                    ed:11:3c:46:ce:06:4e:ea:4e:f8:48:9a:40:ef:32:
                    17:89:cb:c7:d5:40:15:35:2c:19:f2:ce:f8:22:14:
                    a0:58:b5:a7:5b:1e:55:a3:0b:9f:71:75:cd:f8:04:
                    1b:f0:14:4b:be:ae:93:40:8d:fa:0c:05:08:8d:b4:
                    a1:45:8e:50:82:c5:fc:26:78:1f:33:a0:09:93:2d:
                    bb:54:e0:d9:93:60:82:00:13:dc:2b:7a:ae:3c:59:
                    9b:af:38:07:0b:95:c7:5b:94:13:36:82:76:80:2f:
                    2a:8d:3f:57:bf:4a:67:b1:fa:50:c4:e3:3d:58:e8:
                    c1:56:53:16:aa:b9:74:94:3a:a9:7d:03:99:c8:6f:
                    0d:df:40:aa:8c:df:14:fb:bf:c7:df:32:9f:46:52:
                    3a:b7:c2:c1:3e:b0:e5:49:ee:ab:73:ae:91:71:81:
                    34:00:fa:c2:de:aa:b4:26:2f:1e:e6:bb:10:81:25:
                    ca:96:b8:32:37:c9:04:d4:1c:b5:45:a9:4d:ff:e1:
                    96:28:b4:3b:89:d9:33:a1:0d:c7:05:4a:0f:09:fc:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:35:AA:84:2B:80:73:DB:6E:4B:01:39:A3:3C:29:73:28:99:DC
            X509v3 Authority Key Identifier:
                keyid:35:69:57:50:CD:46:53:1D:DE:8A:5F:B2:67:2C:DC:83:0D:3D:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWlXUM1GUx3eil-yZyzcgw09DG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/615617-092d-4228-a407-77bfa37fa071/1/NWlXUM1GUx3eil-yZyzcgw09DG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:51:b5:05:5c:6d:8f:a5:e1:d5:d7:c9:a3:f2:54:36:84:
         c5:e6:8e:c9:22:36:85:ae:6e:16:19:f7:49:28:38:20:34:32:
         45:cd:5d:4b:f4:fc:23:36:98:f6:88:b0:28:c6:fe:86:2d:70:
         6c:af:1d:0f:52:d7:f9:db:91:92:8d:13:d2:25:f6:f9:d9:13:
         9d:61:a1:33:25:c8:e6:b7:00:ab:c9:69:ab:97:19:90:3c:fe:
         a1:9a:da:26:90:e5:28:6e:63:24:fb:95:19:7b:ae:be:6a:f6:
         bf:07:85:6b:75:74:7a:93:10:c5:6c:a9:a3:9c:73:b0:0b:f7:
         4b:0a:50:28:be:37:aa:7f:43:dc:de:13:2f:3b:14:ff:e5:96:
         b9:a7:4d:7c:96:5b:2f:57:e0:ae:ca:db:b3:01:25:18:44:6a:
         1c:8f:37:5f:40:db:7a:77:03:86:2e:c8:f8:29:ca:dc:ce:9c:
         78:39:c7:30:d1:ca:aa:dc:05:51:b6:a0:22:f9:4e:db:dd:7d:
         60:6c:25:a7:e8:d7:c2:f2:d4:13:31:fc:65:ef:b5:3c:de:06:
         17:ac:9e:1a:6f:b0:8b:e2:5f:ed:73:3f:c6:4b:82:10:d7:b2:
         be:a3:12:3d:e6:46:a8:64:21:7e:2e:1d:44:7f:16:5a:67:38:
         a9:fe:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:09 2024 by rpki-client on console-fra.rpki-client.org