Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
File:                     ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json)
Hash identifier:          cPQ2sX8IuLGPeeBsrqi5oUc0BMkld2Cro1Y3ccE8ltg=
Subject key identifier:   FD:9E:2A:FA:E4:29:68:CB:DA:68:AB:32:9A:1F:7E:67:75:68:5C:6C
Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27
Certificate issuer:       /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
Certificate serial:       019369D88F831767C193A0B9449F6DD41F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:20 +0000
Files and hashes:         1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: IbuvAxSvtVh2TQGV9dWo2T+KVu8EuLrsCTJizxN3EWU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:8f:83:17:67:c1:93:a0:b9:44:9f:6d:d4:1f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727
        Validity
            Not Before: Nov 26 19:00:20 2024 GMT
            Not After : Nov 27 19:00:20 2024 GMT
        Subject: CN=fd9e2afae42968cbda68ab329a1f7e6775685c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:c0:a3:21:77:78:44:e1:69:db:17:3c:c6:
                    f1:f3:d8:e2:21:bf:75:07:95:88:f9:75:97:94:82:
                    7d:88:78:60:18:08:1c:41:c2:14:fc:68:42:85:3e:
                    f8:ec:14:0c:03:08:2b:87:e1:c2:f7:92:b4:a1:98:
                    69:07:f6:e4:7f:c6:5a:2d:30:73:84:53:20:68:c0:
                    e7:79:10:bf:64:7f:b2:ce:64:6c:ef:6a:22:74:78:
                    8f:00:b7:9f:4f:8d:3d:37:06:f1:26:a7:0c:00:7f:
                    8b:82:31:08:80:1b:92:4a:c8:e2:5b:b7:d3:20:e3:
                    a0:91:e8:43:0f:bd:c6:6f:48:f0:2e:27:81:73:91:
                    89:fe:b5:54:e5:1d:9d:3c:f4:f0:9b:02:5f:77:28:
                    bf:bc:21:76:30:3a:3c:6d:0f:51:6b:d1:d7:71:84:
                    b5:80:75:05:9c:af:8a:fc:fb:af:72:1e:d4:67:67:
                    3f:5f:f5:1b:1b:24:55:d2:b5:1f:62:2f:cf:91:e0:
                    65:75:2a:69:ff:9e:67:03:f4:57:70:2b:95:2c:7a:
                    fb:be:e0:ce:8f:02:d3:4e:ec:8d:93:4b:ac:38:d3:
                    0f:e8:73:f8:97:aa:fc:b3:74:94:4f:8c:98:6b:7e:
                    cd:81:04:a0:f3:68:4b:34:21:ae:e7:8b:5f:9b:31:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:2A:FA:E4:29:68:CB:DA:68:AB:32:9A:1F:7E:67:75:68:5C:6C
            X509v3 Authority Key Identifier:
                keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:b9:ae:da:9d:f7:11:9b:7a:8f:a6:0f:71:50:a2:0f:d6:
         54:ff:a0:a9:47:33:26:76:22:61:19:c1:16:c2:ea:b7:31:63:
         f6:57:18:d8:b3:45:85:62:62:de:38:f0:89:55:d8:49:ad:05:
         c4:8b:67:63:5c:8d:89:54:f6:32:3f:52:fc:3f:6f:69:99:2e:
         c6:f2:f5:8b:c8:a9:45:a6:0b:2b:c3:c5:56:3a:bd:0e:f9:6b:
         fb:00:31:2b:c3:19:17:0b:ac:e2:63:16:a9:e4:bd:3c:27:5d:
         88:fe:3b:17:4a:6e:c3:68:4e:7f:7a:a5:dd:9a:af:0a:6c:61:
         aa:29:02:d9:f5:fc:6b:da:05:3d:5c:c9:ef:26:e4:3c:61:86:
         2c:61:f3:d5:08:cd:13:70:a9:59:c5:bf:4a:f7:5d:53:4e:75:
         c6:11:aa:a0:27:04:74:7c:14:b3:96:32:c2:a3:18:95:39:4f:
         17:79:8f:77:9c:82:36:78:ec:93:b5:04:f8:5a:c1:36:0a:ab:
         c9:65:9a:a0:cd:95:7a:07:91:09:61:f8:b5:dd:c4:76:b4:4d:
         7b:54:77:cc:84:72:86:ac:13:08:97:cd:1a:4d:39:1f:c4:63:
         46:4d:89:0a:a6:07:5f:c4:c5:9b:16:30:96:b2:ca:25:e5:e8:
         e3:2d:cd:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2I+DF2fBk6C5RJ9t1B8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj
ZTA3MjcwHhcNMjQxMTI2MTkwMDIwWhcNMjQxMTI3MTkwMDIwWjAzMTEwLwYDVQQD
EyhmZDllMmFmYWU0Mjk2OGNiZGE2OGFiMzI5YTFmN2U2Nzc1Njg1YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAXAoyF3eEThadsXPMbx89jiIb91
B5WI+XWXlIJ9iHhgGAgcQcIU/GhChT747BQMAwgrh+HC95K0oZhpB/bkf8ZaLTBz
hFMgaMDneRC/ZH+yzmRs72oidHiPALefT409NwbxJqcMAH+LgjEIgBuSSsjiW7fT
IOOgkehDD73Gb0jwLieBc5GJ/rVU5R2dPPTwmwJfdyi/vCF2MDo8bQ9Ra9HXcYS1
gHUFnK+K/Puvch7UZ2c/X/UbGyRV0rUfYi/PkeBldSpp/55nA/RXcCuVLHr7vuDO
jwLTTuyNk0usONMP6HP4l6r8s3SUT4yYa37NgQSg82hLNCGu54tfmzEh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2eKvrkKWjL2mirMpoffmd1aFxsMB8GA1UdIwQY
MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt
NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1
LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEy5rtqd
9xGbeo+mD3FQog/WVP+gqUczJnYiYRnBFsLqtzFj9lcY2LNFhWJi3jjwiVXYSa0F
xItnY1yNiVT2Mj9S/D9vaZkuxvL1i8ipRaYLK8PFVjq9Dvlr+wAxK8MZFwus4mMW
qeS9PCddiP47F0puw2hOf3ql3ZqvCmxhqikC2fX8a9oFPVzJ7ybkPGGGLGHz1QjN
E3CpWcW/SvddU051xhGqoCcEdHwUs5YywqMYlTlPF3mPd5yCNnjsk7UE+FrBNgqr
yWWaoM2VegeRCWH4td3EdrRNe1R3zIRyhqwTCJfNGk05H8RjRk2JCqYHX8TFmxYw
lrLKJeXo4y3Npw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:28 2024 by rpki-client on console-ams.rpki-client.org