Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File:                     oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier:          Hyb1B2A1jD+E+KndFQ8SsnyIjxRIi2N72UtnEEH2fCo=
Subject key identifier:   9B:7D:EB:02:92:6B:10:F1:C9:AE:2D:C7:0C:2D:BF:3A:71:DC:6B:D1
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer:       /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial:       01935689A045034CBF98C5AA1E04205A28F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number:          0C15
Signing time:             Sat 23 Nov 2024 01:01:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:20 +0000
Files and hashes:         1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: lvMTuVVTomIpPVfphpJSF36Dms5H+YhDA0mAL+aH1uk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a0:45:03:4c:bf:98:c5:aa:1e:04:20:5a:28:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
        Validity
            Not Before: Nov 23 01:01:20 2024 GMT
            Not After : Nov 24 01:01:20 2024 GMT
        Subject: CN=9b7deb02926b10f1c9ae2dc70c2dbf3a71dc6bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:e1:72:82:83:31:0a:19:d7:ca:2f:6e:91:
                    5c:ad:6c:97:b7:86:6e:7a:3e:76:0f:26:b5:1b:fb:
                    92:64:2c:0a:02:78:77:e5:be:21:07:96:15:a3:19:
                    36:ef:5d:59:9c:49:99:93:b3:d5:ad:93:4a:88:8b:
                    fc:5a:57:56:4e:91:9d:9f:15:7f:c4:03:fb:b8:73:
                    ed:88:f5:21:09:2d:f8:a9:61:88:03:86:eb:c5:c6:
                    ec:e9:91:45:56:77:05:03:54:5a:d2:f9:50:c4:16:
                    9b:68:3a:81:7f:18:b0:34:38:94:3b:6b:12:16:64:
                    df:21:cb:3a:48:c1:f2:a9:7d:a7:49:00:98:02:8f:
                    11:0f:8a:59:5e:0d:79:28:97:23:b6:9c:dd:7c:30:
                    4a:50:55:f9:58:ad:d7:65:c8:cb:97:71:33:94:62:
                    1a:f7:ce:02:12:c7:4f:80:50:7b:55:29:56:38:d6:
                    60:59:fd:7b:0d:79:14:a7:bd:94:83:eb:70:85:79:
                    b0:39:32:e8:7e:11:ea:57:9a:ce:f2:c0:22:e7:68:
                    2f:c6:24:30:cb:c4:74:02:30:61:9a:67:d5:41:b7:
                    c6:15:cc:f5:d2:8b:69:c1:ee:ff:21:b6:d3:9c:39:
                    cb:5c:27:3f:9c:2d:4e:76:8b:20:f9:b6:5f:62:19:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:EB:02:92:6B:10:F1:C9:AE:2D:C7:0C:2D:BF:3A:71:DC:6B:D1
            X509v3 Authority Key Identifier:
                keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:fc:3c:42:a3:20:be:0a:52:04:0c:14:e4:a5:e9:cf:f2:
         67:94:bc:f1:62:31:bf:af:c7:55:fa:3b:f9:b6:ee:da:81:a3:
         a3:16:79:58:2a:88:9f:83:51:3d:c0:27:e0:ad:06:92:dc:80:
         78:7d:69:48:70:f9:2e:61:a1:7b:5b:66:04:e4:c8:da:45:f3:
         53:69:99:07:24:63:eb:4f:0a:9f:e8:f3:59:4d:da:34:f6:40:
         40:40:fd:4e:e8:f8:24:2e:22:1b:a0:1c:de:48:8a:66:29:c9:
         d8:66:77:f8:67:40:f6:55:6d:6d:ee:8a:31:6d:18:d8:de:17:
         9d:ab:01:df:bb:be:e3:52:f8:58:a9:65:49:db:c1:8c:52:e0:
         36:05:3e:2e:01:35:39:6e:b4:e9:c9:84:29:ed:8c:ce:f3:54:
         b8:e7:21:df:f2:cf:d0:4a:a8:f4:62:26:61:7e:64:83:fe:92:
         13:54:e8:b2:a0:58:86:db:c1:db:2a:dc:dc:fa:13:2c:a9:33:
         c1:6c:ae:00:2c:c3:54:39:49:8d:eb:77:89:e2:f6:fc:9a:44:
         12:b1:98:33:fd:8e:30:7a:ac:d1:36:d7:a0:bb:88:e8:64:1e:
         ed:c9:9f:11:86:61:c9:44:e6:54:47:13:d4:51:42:8d:4a:b1:
         02:b6:88:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:55 2024 by rpki-client on console-fra.rpki-client.org