Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File:                     v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier:          AxkLo+maJu+XYMv4Q2W7kaHMagx2nX5ePBK/v9mr0z8=
Subject key identifier:   B4:FE:F8:35:AB:FA:4C:BE:A2:A6:72:D0:B8:28:04:9D:04:88:4A:24
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer:       /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial:       01936CD9E3C3B585C2E9F956F4BEA7D0754F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number:          0139
Signing time:             Wed 27 Nov 2024 09:00:39 +0000
Manifest this update:     Wed 27 Nov 2024 09:00:39 +0000
Manifest next update:     Thu 28 Nov 2024 09:00:39 +0000
Files and hashes:         1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: F1XOdUHUD9QafuGiOIRCVGDau/nQmFKo4Qhsmcj8uFY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6c:d9:e3:c3:b5:85:c2:e9:f9:56:f4:be:a7:d0:75:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
        Validity
            Not Before: Nov 27 09:00:39 2024 GMT
            Not After : Nov 28 09:00:39 2024 GMT
        Subject: CN=b4fef835abfa4cbea2a672d0b828049d04884a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:13:c3:3c:82:09:71:e5:b1:ad:2b:60:77:59:
                    7d:bb:4d:62:21:7d:2d:20:a5:35:17:d6:90:3a:e8:
                    4c:eb:9e:21:56:69:e1:95:3c:43:55:1b:d2:11:3c:
                    55:91:e9:23:dd:1b:1a:ea:f6:25:1a:3e:fb:91:f9:
                    9a:53:d8:34:0c:f0:2a:cf:71:a5:63:da:3c:ad:85:
                    74:bf:29:19:b1:1e:b9:bb:a9:d8:d4:6a:92:29:b5:
                    58:4f:3f:e0:31:ec:a2:b0:74:8b:2f:bd:a2:93:3f:
                    ff:10:8f:f5:9c:ea:f1:08:eb:e4:b2:d4:30:f1:4b:
                    d1:9d:27:f8:7a:d6:fd:51:4c:5c:93:29:25:51:ae:
                    c1:13:fb:cd:3a:88:a2:9c:eb:5a:71:12:e5:f1:4c:
                    57:a2:12:e4:46:d6:6a:bf:a0:8c:4b:aa:f1:11:3c:
                    23:08:17:49:61:5c:3b:49:91:82:53:17:66:11:52:
                    09:94:e2:8d:6d:7a:df:cb:e0:4b:b0:19:5d:db:b4:
                    0a:ef:78:ed:f9:5e:b2:8c:bf:7d:26:4f:d5:03:2f:
                    8f:5f:58:6f:b0:12:9b:62:7f:f2:82:a6:ae:29:c6:
                    19:ff:19:5e:c1:66:47:23:a1:a7:e6:20:cd:57:17:
                    a3:be:a2:99:e8:84:87:ad:0d:9e:48:9a:b1:3c:a3:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:F8:35:AB:FA:4C:BE:A2:A6:72:D0:B8:28:04:9D:04:88:4A:24
            X509v3 Authority Key Identifier:
                keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:f3:7c:7e:60:97:91:5f:c2:7b:d6:e8:57:99:db:df:bb:
         62:75:48:e2:ae:7e:50:35:4a:51:f8:ee:22:1f:96:33:b0:ad:
         d3:78:fb:7a:48:d6:ba:03:b8:77:88:de:8e:6b:26:cd:51:9d:
         ce:c5:5a:20:0a:b2:c9:20:e2:93:95:50:57:e3:d5:67:75:ba:
         62:32:7c:9b:0a:a3:d9:b3:e0:c5:a4:42:ca:8e:9e:78:09:f5:
         02:af:5b:52:36:29:7b:66:11:d8:10:0c:89:b3:41:7f:ef:dc:
         fb:6c:c0:a0:56:10:e9:dc:46:46:85:58:0b:eb:0e:da:0d:1c:
         7b:9c:b3:da:db:97:8c:2c:b8:72:7b:61:fb:01:f6:13:36:69:
         0a:88:6a:bc:f1:b0:12:ac:0b:ba:ad:b8:60:3c:34:5a:ed:09:
         b1:cf:5d:48:11:71:17:be:7f:cf:a5:ea:d3:f0:87:94:07:6a:
         95:f4:d7:53:64:cd:3c:f7:d4:94:ef:73:b1:12:1d:66:a0:ef:
         7a:60:ee:74:20:ac:be:12:fa:89:7b:42:51:93:86:39:1d:82:
         11:bc:e3:1b:f8:46:60:e7:b5:ef:83:45:9b:78:b8:c0:ac:55:
         7f:08:27:e9:7b:9d:59:bc:2f:fa:69:e6:7a:7d:90:d2:da:30:
         dd:7a:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:33 2024 by rpki-client on console-ams.rpki-client.org