Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft
File:                     S0w1pilFbgBJaPouJKSTIgIYW1Y.mft (raw, json)
Hash identifier:          CtCkVR1rG0+J20YITpjocu9adOf92NsGclv/p4hefWA=
Subject key identifier:   67:09:20:AF:4A:EB:64:D8:F1:84:EF:3F:DC:18:8E:B8:4C:4D:AD:B4
Authority key identifier: 4B:4C:35:A6:29:45:6E:00:49:68:FA:2E:24:A4:93:22:02:18:5B:56
Certificate issuer:       /CN=4b4c35a629456e004968fa2e24a4932202185b56
Certificate serial:       019357D2C9D39F02CA268D3A72C2326CF6FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0w1pilFbgBJaPouJKSTIgIYW1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft
Manifest number:          072C
Signing time:             Sat 23 Nov 2024 07:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:52 +0000
Files and hashes:         1: S0w1pilFbgBJaPouJKSTIgIYW1Y.crl (hash: ZUDMLwbvg7cVcVeO4oHMMHzDMPdAejyw46O0L/Z1INU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0w1pilFbgBJaPouJKSTIgIYW1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:c9:d3:9f:02:ca:26:8d:3a:72:c2:32:6c:f6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b4c35a629456e004968fa2e24a4932202185b56
        Validity
            Not Before: Nov 23 07:00:52 2024 GMT
            Not After : Nov 24 07:00:52 2024 GMT
        Subject: CN=670920af4aeb64d8f184ef3fdc188eb84c4dadb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:b9:6e:55:a3:70:70:13:5d:4e:ee:32:69:
                    12:1c:c8:17:61:c8:a3:14:e1:1d:14:59:ba:90:a2:
                    27:dd:6e:7e:b9:f6:cd:93:29:44:54:4e:83:f4:98:
                    92:84:ae:62:a1:c2:1e:69:a2:fb:6d:5f:5b:65:f6:
                    f8:42:e0:f1:5e:79:9c:c5:05:68:33:8d:e0:0c:5b:
                    f1:fd:29:4f:49:2d:c2:3c:3c:6a:01:76:f2:a1:13:
                    4a:2f:e2:8e:09:fa:d4:7c:cf:9b:29:88:b7:e7:69:
                    71:ee:b0:5c:e1:16:53:87:d2:25:b3:51:b7:79:d9:
                    6c:c9:f0:05:b1:ed:9e:a4:65:64:0c:46:47:b1:bd:
                    c0:2c:0c:15:5a:65:b7:4f:b9:34:16:ca:84:69:a0:
                    5f:13:6c:99:ec:b3:f6:39:4a:95:d8:8d:09:0c:ab:
                    77:d9:65:62:91:45:a3:f2:61:cf:f1:d9:1c:58:e5:
                    11:d5:e0:cc:df:11:dc:29:64:ae:92:85:c2:75:66:
                    ce:3b:14:f3:f9:53:55:55:51:e5:cf:7a:c5:b5:ac:
                    b8:7d:89:73:1e:d2:f0:ea:cf:da:c0:9b:91:9b:c5:
                    2d:49:7b:df:bd:c3:fb:91:a7:a4:b2:a0:78:f6:11:
                    27:a8:80:2b:1c:e5:0e:4a:59:b9:b8:e2:01:08:9b:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:20:AF:4A:EB:64:D8:F1:84:EF:3F:DC:18:8E:B8:4C:4D:AD:B4
            X509v3 Authority Key Identifier:
                keyid:4B:4C:35:A6:29:45:6E:00:49:68:FA:2E:24:A4:93:22:02:18:5B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0w1pilFbgBJaPouJKSTIgIYW1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/16ec7e-aff3-4c3b-a0bf-9f00697b64a1/1/S0w1pilFbgBJaPouJKSTIgIYW1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:0e:cd:f7:8c:5e:80:28:7d:85:f0:de:7e:4b:8c:79:c6:
         6f:d3:b0:d3:41:0e:07:39:19:dc:ec:0a:0a:6f:28:d9:7c:79:
         62:80:59:c4:c3:de:ca:63:2b:56:b0:c1:62:5b:f4:5d:6a:0c:
         01:58:b5:41:77:d4:18:ee:a8:52:5c:5d:3e:bb:5e:12:c6:68:
         2b:0d:a8:a2:36:c7:9b:57:11:e4:c3:3e:05:f2:e3:82:e1:8d:
         34:ff:5a:20:9d:54:d3:4b:34:84:6e:8d:03:be:d3:f6:57:e4:
         2b:77:1b:c6:86:60:ef:66:28:a3:13:88:da:58:7f:66:8b:a0:
         6c:cc:a5:2f:c7:f9:08:30:e8:f9:a8:95:da:27:43:fc:7c:6a:
         dd:4e:0a:29:8b:86:aa:63:d2:91:fe:7b:49:ef:3a:1c:ff:3b:
         27:c2:e0:8c:c2:10:7e:84:25:e6:0d:6b:a4:d9:1d:69:ac:05:
         84:aa:30:4c:a9:46:b8:48:80:94:ef:ce:f1:35:3e:9c:93:c9:
         b4:2d:34:ac:f2:84:8c:5f:ca:44:49:e3:67:0a:06:b5:7c:d6:
         2b:df:84:eb:dd:4e:86:25:f5:1a:76:d4:9c:2d:88:6c:35:f2:
         93:52:7f:bc:19:5f:33:f8:5e:a2:0c:f4:c7:bb:05:df:cb:b6:
         70:d3:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:10:44 2024 by rpki-client on console-ams.rpki-client.org