Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File:                     1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier:          pBCsoH1gBM7WksFfrWtSpZxhlpWDSwZN5PrIEv0lWZI=
Subject key identifier:   CD:6E:D0:54:3D:0B:78:3E:A9:DB:17:C8:9D:B0:EE:03:2C:0F:43:C4
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer:       /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial:       01936B226C33512946737957DB9B310685B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 01:00:38 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:38 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:38 +0000
Files and hashes:         1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: sc3bNq/NqzUszIfyowI3VrgJZLv0YVrVwPkfvIhawfA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:6c:33:51:29:46:73:79:57:db:9b:31:06:85:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
        Validity
            Not Before: Nov 27 01:00:38 2024 GMT
            Not After : Nov 28 01:00:38 2024 GMT
        Subject: CN=cd6ed0543d0b783ea9db17c89db0ee032c0f43c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:87:fd:24:b2:83:69:8f:f3:bc:ce:52:97:
                    f9:a1:65:de:65:5d:70:6b:fe:a2:9a:40:74:ed:9a:
                    1e:9e:20:22:d9:2f:16:b1:71:29:6d:17:48:c0:05:
                    71:5a:50:84:fa:56:a3:29:3d:2a:29:0a:a8:18:e8:
                    92:aa:58:e8:07:dd:cf:b2:fb:05:34:38:5a:f5:82:
                    19:81:d8:d1:02:a1:dc:ff:78:eb:0f:f8:7a:89:66:
                    29:34:76:58:0c:02:0e:3d:3d:b0:86:16:e0:5c:19:
                    9a:fd:85:25:d7:34:97:46:fc:92:5d:d7:98:7f:48:
                    0e:e5:88:23:32:1d:87:52:15:64:dc:b5:f1:17:0d:
                    08:53:6d:3e:ba:64:af:3c:98:9d:dd:0a:54:fa:4a:
                    c7:a4:36:db:c2:21:00:04:13:b2:03:4e:41:9f:dc:
                    8b:3a:e3:94:ab:59:61:30:07:63:b4:c2:7c:67:5a:
                    45:d8:c9:2f:4b:9b:3b:24:c4:67:91:e7:9b:90:15:
                    04:61:d9:be:ab:35:b8:1f:0c:9b:fc:dc:93:06:7b:
                    cd:11:52:db:38:77:e0:bd:a1:3a:27:7e:98:cf:21:
                    d8:c9:40:46:80:c7:ac:ae:fe:d7:4b:53:9f:44:e6:
                    bd:1f:f3:e7:ff:e7:32:70:43:3d:76:83:ed:44:1a:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:D0:54:3D:0B:78:3E:A9:DB:17:C8:9D:B0:EE:03:2C:0F:43:C4
            X509v3 Authority Key Identifier:
                keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:f7:e2:ac:56:23:6c:4b:02:47:ee:8c:05:84:a2:bb:6e:
         cc:ea:d0:bf:ee:e8:d8:55:72:aa:6a:71:f0:37:ce:ac:67:73:
         c7:07:a6:59:05:bc:3c:bb:11:f6:74:46:4c:7a:7b:ef:40:87:
         f1:5f:7d:39:e7:82:1c:f7:de:44:f6:fc:8d:b2:50:90:7b:f8:
         71:12:7f:e1:44:6e:d6:6b:3e:6e:74:a3:a5:1c:58:84:2f:58:
         0b:b7:3c:82:8f:4c:e0:31:85:03:2a:25:4f:8c:e3:78:9c:b0:
         54:a2:ad:4e:b3:de:09:15:c9:f0:b6:3a:86:22:dd:dc:42:83:
         af:12:dc:a6:5b:38:18:20:5e:7d:95:ef:b0:b0:43:02:68:33:
         63:81:da:da:0a:06:61:6d:bb:bd:6c:56:cf:0c:f2:4f:62:8a:
         3f:cd:7e:3f:0a:43:58:3d:b6:ad:85:90:50:54:db:fe:9c:12:
         cf:77:2d:b8:c9:24:6f:7f:43:7c:ba:d2:7a:00:d1:c4:28:cd:
         f9:34:5c:ff:ed:b2:55:6d:c1:08:9c:6a:43:ad:ec:16:f7:05:
         d2:e4:5c:3e:6b:61:c7:5d:44:b6:84:bd:a8:04:5e:5e:ee:c3:
         6a:f0:46:53:36:51:ed:e4:34:db:23:93:15:36:9c:57:3c:cb:
         a5:7f:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:00 2024 by rpki-client on console-fra.rpki-client.org