Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File:                     p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier:          2gG7IkDw6yRRpjdy5Gl9fjyzTCqaEhv0yGB59r+oHAQ=
Subject key identifier:   7E:18:A3:C2:3E:39:F9:27:F2:F6:D6:EF:32:22:C3:70:AF:1A:0F:7D
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer:       /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial:       01938C9D41A36FC0990C6B99865986B5E948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number:          138B
Signing time:             Tue 03 Dec 2024 13:02:16 +0000
Manifest this update:     Tue 03 Dec 2024 13:02:16 +0000
Manifest next update:     Wed 04 Dec 2024 13:02:16 +0000
Files and hashes:         1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: /CkxYtqh6hMDAhpP0FIWwFi9gbRnzy+1IX+0oqxigUg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9d:41:a3:6f:c0:99:0c:6b:99:86:59:86:b5:e9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
        Validity
            Not Before: Dec  3 13:02:16 2024 GMT
            Not After : Dec  4 13:02:16 2024 GMT
        Subject: CN=7e18a3c23e39f927f2f6d6ef3222c370af1a0f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:6d:5b:f4:af:d7:49:d7:e0:11:38:f5:95:
                    f1:11:40:f2:ec:bb:2e:b2:f6:0b:df:e6:1e:18:7f:
                    ca:a3:0d:cc:8e:86:25:8e:79:64:27:13:14:56:d6:
                    16:a6:98:86:f0:6d:1e:e0:13:d6:7e:85:10:23:cb:
                    10:db:a8:e2:84:73:f2:9c:df:62:62:d6:bb:9a:44:
                    5b:82:7d:5d:b9:fd:6a:f8:82:32:9a:d5:43:11:d7:
                    34:c6:67:7d:28:43:8a:e2:7a:e6:27:d5:b8:43:86:
                    bf:fe:54:c1:bb:79:55:b3:a9:9d:56:0a:2e:91:0d:
                    fa:32:00:90:f4:31:74:8e:bc:89:9b:7f:9d:df:ad:
                    e9:94:71:a3:a0:ea:d7:20:ea:38:d1:e1:ab:06:ff:
                    10:41:eb:52:21:3d:b5:7a:54:7d:c1:35:18:7f:54:
                    a2:83:43:6d:2d:72:05:ad:60:1c:a3:4f:fc:23:c1:
                    dd:fb:c2:cb:f7:e2:b8:c6:e1:e0:18:3c:1b:31:1a:
                    68:db:f4:36:90:66:9f:05:71:b0:26:10:e3:10:6d:
                    98:79:a8:84:7e:f3:b2:ac:8d:f1:09:ab:db:68:67:
                    12:aa:b7:da:d2:8f:d8:3f:29:f5:95:bd:9b:e8:65:
                    c0:6f:e9:16:a9:04:d6:aa:86:2f:fb:74:20:05:f3:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:A3:C2:3E:39:F9:27:F2:F6:D6:EF:32:22:C3:70:AF:1A:0F:7D
            X509v3 Authority Key Identifier:
                keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:7c:ca:93:77:74:60:ad:50:9e:24:60:a7:2d:b8:6c:e1:
         13:dd:08:0f:8e:46:5e:f7:32:fa:a8:5e:42:e5:ef:be:87:2e:
         b2:7c:0c:9a:30:a1:66:ee:7b:64:fe:bf:49:fb:8b:d2:cf:7a:
         16:c5:31:68:69:47:b1:b8:10:27:8a:e2:84:bc:d4:69:bb:e7:
         d8:82:5d:88:84:17:87:f1:28:7b:4b:ec:56:37:4b:56:7a:12:
         59:a1:4d:ca:30:d7:5d:60:f0:d5:06:0a:d6:7a:ec:de:b1:ca:
         eb:4d:99:ad:24:a7:85:e3:7d:87:3d:32:77:ce:7f:9a:28:58:
         98:48:00:ba:db:6e:17:ca:f0:ec:13:bc:dd:9f:5c:fc:d0:de:
         cd:83:9f:96:c6:0a:7e:a7:c9:54:d7:bb:c6:fb:a2:cd:6d:f3:
         5c:b5:e2:13:4a:fd:d0:2d:c9:8d:cf:72:57:cb:a2:6d:84:fe:
         5a:3f:92:bc:fe:46:15:9b:ce:c9:b7:25:a5:31:35:49:8b:97:
         78:a9:77:d1:b4:20:6d:20:aa:4a:98:79:0f:6a:4e:d3:5c:36:
         fc:57:25:65:85:1b:76:7e:81:aa:c0:3d:d1:46:34:ee:1b:bc:
         2d:33:90:4a:cb:42:ef:9c:df:b1:22:d0:16:e2:3c:27:69:f1:
         0a:33:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:29:59 2024 by rpki-client on console-ams.rpki-client.org