Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
File:                     _m-zjWufNfVcZIPDeGmR__jVJ0I.mft (raw, json)
Hash identifier:          JxaKZ/iXtDDYpnM0aFQWMBUvwVelgPR/ipaB5pOeR/c=
Subject key identifier:   0D:EB:3C:3B:AD:C8:F2:D5:8E:FD:1D:BF:0A:93:40:DB:FD:F4:35:37
Authority key identifier: FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42
Certificate issuer:       /CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
Certificate serial:       0193568AFE65B9CEF3820EBEDD4E800D1C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
Manifest number:          0AD1
Signing time:             Sat 23 Nov 2024 01:02:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:49 +0000
Files and hashes:         1: _m-zjWufNfVcZIPDeGmR__jVJ0I.crl (hash: yFSNGg59P7YomwjgjS5RS7O8imat3nKgAgwU1ZPo3uA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:fe:65:b9:ce:f3:82:0e:be:dd:4e:80:0d:1c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6fb38d6b9f35f55c6483c3786991fff8d52742
        Validity
            Not Before: Nov 23 01:02:49 2024 GMT
            Not After : Nov 24 01:02:49 2024 GMT
        Subject: CN=0deb3c3badc8f2d58efd1dbf0a9340dbfdf43537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:29:2e:51:53:26:41:6e:fa:e7:8b:5e:0b:
                    6b:f6:d4:c8:66:f6:0d:25:0a:59:09:79:15:c9:a6:
                    69:ac:84:40:0d:bd:e5:31:c3:c6:5e:2f:be:e9:4e:
                    aa:5a:77:a3:65:32:3b:e0:a6:c6:b4:1d:a3:8a:4d:
                    50:13:8c:d8:e3:a9:95:e9:fd:fd:11:37:eb:a2:1b:
                    c7:71:e5:24:6e:17:84:d2:6b:c4:b5:74:62:8c:9b:
                    f1:ba:33:f7:81:7b:c8:c1:2c:41:7c:03:f7:94:f8:
                    f3:9c:fd:8a:d6:34:76:ee:e3:b0:64:60:de:a7:1d:
                    39:6a:cc:b5:b2:6a:24:f9:e7:cd:0b:14:a1:ca:d1:
                    04:60:77:57:4b:fd:33:26:a9:e7:09:83:e2:07:80:
                    f4:34:61:03:b7:59:c7:67:e9:3b:1c:7b:d6:8a:cd:
                    36:7c:1c:c5:07:c8:de:2e:69:bf:20:ae:81:d8:88:
                    e2:80:e6:a3:78:d5:aa:39:41:e1:15:1c:f6:72:87:
                    5e:78:24:78:53:f2:cf:20:91:4e:43:b7:cd:63:10:
                    f8:14:a0:4d:22:75:50:cd:da:4c:a1:50:4b:b3:82:
                    e8:c0:a7:c3:38:aa:f0:03:36:95:c6:d4:41:5f:2b:
                    39:b9:dd:8f:56:e3:f0:32:89:d2:40:4e:e9:10:46:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:3C:3B:AD:C8:F2:D5:8E:FD:1D:BF:0A:93:40:DB:FD:F4:35:37
            X509v3 Authority Key Identifier:
                keyid:FE:6F:B3:8D:6B:9F:35:F5:5C:64:83:C3:78:69:91:FF:F8:D5:27:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m-zjWufNfVcZIPDeGmR__jVJ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/24908e-4819-4874-a1ed-f059cdc77989/1/_m-zjWufNfVcZIPDeGmR__jVJ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:d9:ab:16:5e:c9:10:01:ed:cc:43:cb:54:f1:22:94:93:
         e9:6f:3e:d2:d8:15:b6:85:57:b5:6f:05:cc:fd:65:a9:8c:71:
         7f:ec:4f:78:af:12:a6:d1:d3:23:96:e5:2c:49:7a:14:25:7f:
         7e:74:a1:aa:61:25:75:a2:4e:f1:ff:09:d8:6b:cd:74:36:38:
         6d:61:25:43:c1:d5:f4:00:2d:95:cb:44:13:97:27:61:9a:60:
         5e:40:c5:8b:06:80:aa:f9:ec:b9:99:77:b9:9c:2e:b3:a5:a4:
         5c:e7:93:dd:bc:6e:f7:00:ba:7e:4c:90:aa:06:f2:ca:55:ae:
         bc:0f:6a:9e:96:77:0d:b5:06:cf:ce:c8:c6:9b:aa:5a:ed:6b:
         18:b8:1e:f7:9a:05:6e:e9:00:9d:3f:e0:4c:e7:1f:ba:3b:1f:
         ca:a4:0d:c5:c4:11:78:e2:8b:30:5d:0e:5b:5d:5e:aa:a1:17:
         0a:72:e0:01:93:74:70:92:0f:20:29:4c:90:70:6e:0e:2e:be:
         0f:91:38:e0:c3:13:c4:5f:6c:26:e7:fb:3b:81:24:b4:1d:82:
         32:bf:2c:11:78:7e:f6:d9:cd:ea:56:a5:c3:f0:0a:ea:8f:cf:
         41:a9:71:29:6c:d6:d0:3b:b8:0a:63:d2:8f:b1:08:83:7e:3e:
         0a:d3:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:38 2024 by rpki-client on console-fra.rpki-client.org