Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File:                     rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier:          emu1AoZjzfMEB0AXROQDlZTNckEUjs1bCILipvIy3cU=
Subject key identifier:   8A:44:24:26:66:C6:26:02:61:57:F6:AE:F3:4F:8B:7F:CD:74:DF:7E
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer:       /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial:       0193549B1537DFB9351DD7225268CD7736B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number:          0301
Signing time:             Fri 22 Nov 2024 16:01:09 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:09 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:09 +0000
Files and hashes:         1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: nG/3R4i+ygDqJdPMyDzHWTOkRdzYShtmzwPsXzCWESk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:15:37:df:b9:35:1d:d7:22:52:68:cd:77:36:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
        Validity
            Not Before: Nov 22 16:01:09 2024 GMT
            Not After : Nov 23 16:01:09 2024 GMT
        Subject: CN=8a44242666c626026157f6aef34f8b7fcd74df7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:05:bd:26:f0:26:b2:45:e0:3c:f9:b5:88:
                    85:5a:f0:f2:68:cd:7a:94:ae:9a:9a:09:61:53:25:
                    64:86:6e:e3:ae:82:15:9b:cb:b9:08:ba:0c:36:76:
                    a2:b3:d5:7a:5d:2e:eb:9c:ba:1e:d3:b6:84:e3:db:
                    5c:a2:10:17:66:1d:51:ac:09:c3:c0:14:2d:96:25:
                    11:ff:ad:d8:68:a1:b9:5e:f1:8e:04:20:97:3b:c0:
                    0d:af:b5:07:3f:c4:96:9c:59:e4:59:cd:62:7e:19:
                    d7:78:d8:9f:ee:05:a3:5d:09:5d:cf:63:ee:27:4c:
                    95:9e:7d:91:9e:2b:d1:96:16:8b:bb:15:7f:cc:91:
                    08:ef:2e:4d:50:ba:e4:1e:c8:3c:cf:fa:08:db:b4:
                    45:c3:2e:0e:87:8a:5c:4d:41:42:5e:d9:18:10:db:
                    95:d1:c2:05:cf:bb:ee:7f:f6:f5:40:ec:03:c3:44:
                    f2:22:e8:d4:e2:c4:45:bb:16:9e:a3:0f:a5:dc:1b:
                    c7:48:85:4b:77:d7:b0:28:ec:c0:17:08:bd:f8:75:
                    27:09:4a:3b:a6:53:7b:ad:1a:f0:fb:1f:18:66:5a:
                    09:88:75:88:d5:77:17:a0:81:27:21:1c:9e:40:b5:
                    b7:f4:e2:38:8d:69:18:43:72:b2:ba:c9:6d:ba:1b:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:24:26:66:C6:26:02:61:57:F6:AE:F3:4F:8B:7F:CD:74:DF:7E
            X509v3 Authority Key Identifier:
                keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6f:84:1a:3c:e5:86:0d:ba:be:ee:ff:42:9c:63:d5:3d:aa:
         58:43:99:ed:16:06:60:d8:0d:c8:fa:45:79:27:b3:c2:68:37:
         de:f2:31:33:4b:f6:e0:8f:09:b7:b3:e3:2f:53:e5:a9:5b:f9:
         3a:f0:1f:a7:5f:90:40:e7:03:d0:9f:1b:bc:d4:f6:b9:87:b2:
         93:68:51:56:5c:26:8c:cd:c8:f8:97:a5:4d:06:d6:dc:62:be:
         50:44:e2:61:e5:48:6d:09:43:a6:3a:5d:d8:cd:43:95:6d:3e:
         46:b4:51:05:d9:bd:76:a1:1e:7f:1b:c1:22:7e:60:0d:64:7f:
         7d:bd:5a:c8:86:83:b2:c8:eb:b4:da:69:e4:f8:71:46:0f:f2:
         1f:78:9b:55:90:65:54:ca:66:8c:5f:b2:65:81:6e:28:a3:3c:
         50:81:4b:5e:cd:6c:e0:a5:b6:7f:f5:bf:6c:4b:17:f6:26:05:
         a7:90:c3:74:59:1c:5c:c5:84:25:16:42:a8:48:73:5e:11:0d:
         3c:b1:b7:b5:9f:da:b6:c1:7f:6a:d5:d9:f1:53:63:be:bb:5f:
         13:20:4b:02:da:86:36:61:fc:91:0c:9e:8f:1f:d3:2b:00:c4:
         67:fa:f5:96:a3:25:e5:89:6f:43:31:bf:47:74:55:82:02:b7:
         59:a4:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:30 2024 by rpki-client on console-fra.rpki-client.org