Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File:                     PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier:          Mak12YZHZjzcl3ZuH7hiDNmho5UtsIDOsV9aqtGe7jU=
Subject key identifier:   90:58:77:84:CA:7B:DB:2F:7F:7D:41:4A:BF:A9:66:35:C8:15:61:C8
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer:       /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial:       019369DAC5637C1DD38A36DD1D7D492B52EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number:          07B5
Signing time:             Tue 26 Nov 2024 19:02:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:45 +0000
Files and hashes:         1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: taTFAzATDKvV6kQaH4z3R8abWJHiDeZFgvyIBYuIBAY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c5:63:7c:1d:d3:8a:36:dd:1d:7d:49:2b:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
        Validity
            Not Before: Nov 26 19:02:45 2024 GMT
            Not After : Nov 27 19:02:45 2024 GMT
        Subject: CN=90587784ca7bdb2f7f7d414abfa96635c81561c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:70:fc:ef:f0:27:c2:c3:8f:33:cd:b1:86:
                    34:f1:43:de:df:0a:d8:08:fb:44:9e:e8:65:a8:f6:
                    62:78:6b:ac:14:e0:92:44:af:19:e2:0a:de:fa:6c:
                    a3:b7:7f:74:c8:a3:bf:fd:9a:90:be:5f:f3:df:68:
                    c5:36:55:9b:72:7f:39:a7:77:b8:36:1c:f8:a5:34:
                    62:b6:bf:5b:2a:ff:a7:38:c1:30:1e:50:74:af:fe:
                    da:cd:41:7d:a8:f5:42:b2:9d:5c:79:f3:83:77:df:
                    8a:45:02:ed:c8:9a:02:ee:9a:0c:f3:a5:56:74:07:
                    e9:ea:09:c0:29:2a:96:d4:65:3d:e2:e1:5a:18:a6:
                    8f:73:e5:3b:17:06:40:03:7c:b5:eb:00:5b:0a:4f:
                    b8:59:2a:83:7b:e8:45:ee:41:fe:7c:31:48:45:d3:
                    e0:12:c4:18:03:f2:cf:f5:b2:a9:ab:ff:e2:af:9e:
                    13:9d:92:26:79:26:51:bb:d4:47:eb:89:b5:63:59:
                    a2:99:da:88:1d:d0:1f:82:e3:43:c1:c6:28:6b:df:
                    71:18:f1:81:29:29:a6:0f:e7:2e:3b:46:6a:3d:1e:
                    ca:b8:86:a0:6a:e6:aa:fd:0b:9d:9d:18:29:3f:a4:
                    2e:0b:44:f0:34:b5:d0:00:24:8f:0b:a3:b9:6f:0f:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:58:77:84:CA:7B:DB:2F:7F:7D:41:4A:BF:A9:66:35:C8:15:61:C8
            X509v3 Authority Key Identifier:
                keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:36:44:57:c8:09:10:8e:a0:84:e2:34:21:82:14:64:4d:
         6c:51:6c:dc:00:10:82:a1:05:b9:8e:ae:5b:d5:be:03:c7:2b:
         36:f9:c2:7d:e8:45:ed:8a:63:d5:f6:54:a1:e4:bf:cc:0d:40:
         27:4d:1a:e6:14:f5:20:52:86:85:19:77:54:c6:f8:98:07:51:
         3a:06:7e:70:e6:e4:80:15:7f:fa:f7:ee:7b:b4:be:2b:1a:64:
         46:fb:4e:71:66:b3:be:6f:00:1f:2d:ee:fc:9d:da:d8:eb:fb:
         86:93:0e:41:07:a2:e2:0e:45:72:b5:b8:ca:9d:46:47:d6:d9:
         42:af:3a:ba:69:03:b7:df:df:d0:1a:7e:e3:98:29:eb:74:d9:
         db:ec:03:35:62:00:1d:10:87:1b:1c:1f:db:64:0f:48:d3:99:
         ed:b4:f5:20:21:90:54:e7:65:f4:54:2b:ab:68:46:b9:c9:db:
         23:47:68:2e:93:3c:ca:2e:2d:6e:5a:40:0e:6b:3c:a4:db:be:
         14:69:d8:da:a4:31:0a:d3:e3:ab:2e:b1:e8:f5:d4:2c:b5:79:
         70:8d:ad:6a:70:c8:d3:54:44:7a:19:ee:0c:06:d6:45:4a:9c:
         ec:1a:e5:c5:83:63:18:ba:66:24:92:a0:42:e3:c0:52:97:70:
         ff:3a:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:10 2024 by rpki-client on console-fra.rpki-client.org