Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File:                     kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier:          c6lf6fafc7FqLZ/Qk2JwDP0lUv630AYmVMrjLTro42E=
Subject key identifier:   33:8E:12:BA:BF:D0:6C:90:8C:D9:FC:79:9B:A4:FE:BC:87:F7:09:4D
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer:       /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial:       01936BC711C766547B1C8DAE85907C6F4011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number:          10E4
Signing time:             Wed 27 Nov 2024 04:00:28 +0000
Manifest this update:     Wed 27 Nov 2024 04:00:28 +0000
Manifest next update:     Thu 28 Nov 2024 04:00:28 +0000
Files and hashes:         1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: +tj7nNYQNMSLx/xnfQs7TRchAkWwKRFeijwPh34iv10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:11:c7:66:54:7b:1c:8d:ae:85:90:7c:6f:40:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
        Validity
            Not Before: Nov 27 04:00:28 2024 GMT
            Not After : Nov 28 04:00:28 2024 GMT
        Subject: CN=338e12babfd06c908cd9fc799ba4febc87f7094d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:75:e3:98:d1:0b:68:1b:36:98:e1:62:2a:
                    47:5a:72:42:f4:bb:17:74:62:91:d0:59:ff:23:9c:
                    1b:93:8b:91:db:97:5d:2f:93:cd:79:07:f8:9b:77:
                    f0:32:53:16:04:ff:49:71:a9:ef:51:31:ae:3b:b2:
                    c7:ec:41:52:30:fb:c3:fa:84:61:94:30:1e:c3:86:
                    90:ff:9d:26:f8:2d:d7:de:1c:14:a1:dc:b4:69:0d:
                    d0:c5:b3:f1:13:f3:fb:34:71:4b:34:a1:56:02:12:
                    de:46:5b:42:84:c6:6f:5e:cb:1d:40:36:4d:94:ec:
                    c9:12:84:21:d6:89:10:aa:8a:20:88:7f:e8:22:83:
                    ce:bc:63:60:d9:d7:5b:6c:41:41:c5:2a:bc:bb:20:
                    4f:9d:a7:8d:7a:e2:93:f6:45:b9:34:e9:53:23:4f:
                    e6:c2:d8:80:64:6e:2f:56:42:60:01:6f:c6:46:22:
                    51:d5:6f:2e:12:78:28:fb:05:79:d6:91:05:e6:95:
                    9f:4d:3a:0e:1f:c7:6c:c0:cd:3b:ba:dd:d5:24:53:
                    20:4d:c5:d4:20:ad:80:f4:de:0b:2e:0d:29:d9:45:
                    f1:73:56:32:52:a7:9c:b1:37:9b:1f:33:3c:b8:99:
                    5d:67:93:ba:ca:5d:8e:3d:4d:09:90:24:e4:69:60:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8E:12:BA:BF:D0:6C:90:8C:D9:FC:79:9B:A4:FE:BC:87:F7:09:4D
            X509v3 Authority Key Identifier:
                keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:09:61:87:12:da:9a:16:f1:40:e9:d5:48:d3:2b:16:a3:99:
         bc:6f:73:db:a3:17:a0:ee:74:38:54:c2:6d:91:b2:7e:29:30:
         cc:76:4d:39:01:05:bd:45:10:b4:9e:a2:fb:0b:5e:d4:c1:00:
         7d:55:d9:8c:cb:9b:96:1c:96:f8:09:33:43:75:ae:86:f0:f9:
         11:a2:23:b1:9c:e6:b9:c5:4a:6e:36:8f:0a:cc:b6:9a:cf:29:
         ae:76:59:7a:48:53:ab:eb:cd:a2:e0:96:1a:72:1c:ec:05:28:
         9f:cc:db:4c:75:e8:3d:b6:38:2e:ff:a3:d2:66:8f:69:5f:2f:
         40:05:31:f6:6e:6f:ce:f6:89:3e:29:d6:f9:da:9b:d1:67:6b:
         73:cc:62:c1:60:25:f3:65:9e:d5:d3:76:dd:8d:a0:7b:9b:e0:
         42:24:c0:51:2c:11:20:f6:53:98:ad:f5:03:ef:e6:72:f4:1f:
         3e:ef:9f:03:ca:a4:0d:d8:26:d2:57:a4:c5:17:37:ec:a1:c1:
         62:1b:1c:04:6d:dd:ba:a0:37:c5:1a:20:ad:d0:20:6a:f4:63:
         94:55:09:e9:c4:a8:15:07:01:30:b5:4a:f6:30:b4:1b:90:5f:
         60:6e:48:ef:f6:6e:ce:92:3a:32:fa:3a:9e:47:0a:05:ff:24:
         cf:5a:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:31 2024 by rpki-client on console-fra.rpki-client.org