Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File:                     Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier:          TBC0AE4bEovQ3izqVS+coQ92R7WJd1JYZDDd2OV7MH4=
Subject key identifier:   89:C8:0C:5E:37:9A:AE:71:91:7E:C6:51:4E:84:ED:AA:28:45:AC:19
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer:       /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial:       019355082B3E5A3306D2BE9B70C302070D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number:          136D
Signing time:             Fri 22 Nov 2024 18:00:18 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:18 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:18 +0000
Files and hashes:         1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: j+Rjv7bwIl3VPGyyxrII0e8CZUUhKmyq9VgpSNPJew4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:2b:3e:5a:33:06:d2:be:9b:70:c3:02:07:0d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
        Validity
            Not Before: Nov 22 18:00:18 2024 GMT
            Not After : Nov 23 18:00:18 2024 GMT
        Subject: CN=89c80c5e379aae71917ec6514e84edaa2845ac19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:f8:0d:17:cb:95:d2:d9:eb:fa:bf:2e:d5:
                    98:fd:d5:cc:5b:98:53:16:c2:8f:e2:95:2c:48:52:
                    bd:f1:65:82:cf:bc:6a:04:82:3f:5d:db:a8:7d:8a:
                    2c:62:82:eb:6c:2e:ff:d1:c6:80:e8:5c:55:11:86:
                    9b:5f:e3:ef:da:51:14:ea:76:a6:a0:09:c7:f3:b7:
                    63:1f:4d:a5:ea:db:8c:42:d6:87:66:64:b4:74:28:
                    a8:19:b6:d7:51:20:ff:0a:3c:9f:12:01:6b:13:4e:
                    30:e6:ba:a4:db:be:5f:5a:17:81:f3:1c:6c:72:90:
                    95:a4:79:ae:11:13:47:ba:d3:0c:0c:5e:17:3d:22:
                    6f:7c:ae:1a:60:d4:66:74:ca:b9:29:1a:3a:9b:a9:
                    e6:27:0c:c6:62:a6:7d:55:8e:65:22:78:62:86:7c:
                    27:5b:b2:55:06:ed:f2:ff:02:85:c1:58:90:13:00:
                    ad:0f:33:0b:d9:75:22:6a:58:bf:49:f2:c5:d6:69:
                    74:3a:91:d8:29:71:75:3e:5e:90:9f:67:db:8a:7f:
                    9a:30:b6:fe:87:3c:ea:16:e6:5a:bd:c9:b4:d9:c3:
                    8f:14:7d:d3:6c:59:4f:d6:dd:3b:3f:07:be:5b:09:
                    8e:53:63:7b:cb:9b:5a:fe:7d:3a:3b:27:d5:4e:2f:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C8:0C:5E:37:9A:AE:71:91:7E:C6:51:4E:84:ED:AA:28:45:AC:19
            X509v3 Authority Key Identifier:
                keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:68:bb:94:b3:f2:b0:67:71:38:e9:ee:b9:c3:47:31:73:
         d2:0f:05:a5:8e:7b:52:00:3d:f7:f6:35:b8:a2:00:68:b9:d7:
         ef:6d:db:86:ba:0b:bd:f9:35:ca:43:5a:3e:e6:0b:3d:b7:8f:
         ac:06:1f:e8:d3:c0:5b:7b:52:13:28:59:ce:b8:a4:a3:d8:7b:
         42:b3:ad:9f:a1:93:5e:14:8f:89:fa:8a:d5:0f:69:6d:0e:49:
         0b:a8:24:81:33:be:91:11:67:0a:90:87:57:37:5f:e7:c0:ec:
         00:4d:b5:f0:a5:92:91:31:8b:6f:3e:08:45:56:11:68:ea:30:
         2a:4e:24:c9:ff:41:fd:8d:5a:92:45:79:f2:ed:5a:b3:b9:6a:
         71:50:5d:24:fb:3c:17:59:5e:e7:8c:9f:fe:f7:1a:fe:d9:1a:
         aa:58:1d:5e:31:58:0a:92:37:2b:b1:ac:47:99:cb:07:eb:3b:
         fc:ee:6c:cb:90:cd:c0:76:74:5b:e3:30:64:e7:9f:a9:53:02:
         47:cb:fd:74:01:d4:eb:ed:58:0a:a7:49:38:20:e1:c1:6b:89:
         4d:f4:ec:e7:66:60:78:ea:44:ba:3d:a2:6c:e4:75:25:4b:90:
         9c:7f:f6:b3:00:ec:b6:1a:e8:09:68:17:1d:64:21:8c:b2:27:
         51:a7:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:03 2024 by rpki-client on console-fra.rpki-client.org