Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File:                     j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier:          5DPDAyZq/71iX4QACSvLo8VrC59FnxC43zdK6uLZZeE=
Subject key identifier:   D4:94:E3:63:32:75:2C:AA:D9:E4:F8:7B:4F:4C:2D:BC:5E:78:C3:C0
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer:       /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial:       019369D968AEACB1D8333DB206AF3206AE3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number:          0832
Signing time:             Tue 26 Nov 2024 19:01:15 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:15 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:15 +0000
Files and hashes:         1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: PCdBdnPmUq3tZe2AOVUDYTuYOAMQKgJAsQb7tAtGFTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:68:ae:ac:b1:d8:33:3d:b2:06:af:32:06:ae:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
        Validity
            Not Before: Nov 26 19:01:15 2024 GMT
            Not After : Nov 27 19:01:15 2024 GMT
        Subject: CN=d494e36332752caad9e4f87b4f4c2dbc5e78c3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:79:f7:6b:67:ef:c3:d1:d2:d9:50:07:5a:
                    9a:c2:25:06:d8:66:72:9f:e1:5b:7b:90:89:0d:c3:
                    be:4c:1a:79:9c:aa:86:8c:11:13:9e:45:f1:a0:f3:
                    42:81:12:42:2b:a2:e3:86:fb:ea:40:ea:50:08:a2:
                    dd:0e:52:f1:64:2b:9c:7d:9e:3a:e1:cd:04:2a:8c:
                    36:54:49:74:1b:0b:ac:7f:47:e4:d7:b4:2a:fa:4d:
                    b1:14:63:f3:bb:ae:1b:2b:3f:a2:fb:ff:82:ed:5f:
                    4b:7b:86:dd:7a:cb:2c:4a:77:3a:a8:6b:f7:92:bc:
                    ce:41:80:b7:55:fa:cd:90:91:8c:3d:ae:b7:40:fe:
                    53:70:71:be:21:f6:9f:ad:de:4c:8c:aa:93:8a:a3:
                    51:c0:b5:d7:89:a7:9b:89:5e:c0:f5:d7:85:4a:61:
                    89:9d:b9:5f:ee:46:87:9b:96:2a:30:5a:ea:74:80:
                    ae:05:9d:d0:6c:d8:e3:8a:a4:30:2a:24:1a:15:fa:
                    3b:db:99:9d:c9:28:93:17:f9:70:56:83:78:e1:70:
                    34:fd:59:4d:4b:e4:0c:89:85:ba:8e:48:0a:24:6e:
                    f1:7a:07:df:50:56:ce:63:74:26:f0:a6:60:13:bf:
                    8e:6b:40:e7:54:bf:0a:3c:3d:5e:06:94:73:6b:e4:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:94:E3:63:32:75:2C:AA:D9:E4:F8:7B:4F:4C:2D:BC:5E:78:C3:C0
            X509v3 Authority Key Identifier:
                keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:2c:12:82:5f:cf:03:94:d3:9a:a3:7d:8d:bb:87:e2:0a:
         9a:a9:63:71:da:ef:07:b0:6b:95:a2:7d:e6:70:fc:01:ac:90:
         02:fb:2d:e5:c6:fd:1f:72:3f:2e:05:b5:99:9b:b5:59:6b:b6:
         96:6c:06:29:4d:4a:e6:4a:1e:df:7f:4b:ba:f5:29:2f:0b:f2:
         4a:ab:00:3b:4b:4e:13:3e:3e:32:68:d5:8f:7f:70:d9:ab:2a:
         27:ea:80:63:59:78:b3:44:da:97:3c:a9:43:dc:0d:2e:86:8f:
         05:d7:89:08:05:eb:bd:ac:16:78:e2:f3:b7:5e:09:45:cd:19:
         78:d1:63:d8:ff:a1:44:65:12:1a:06:89:ac:3d:b1:07:ed:1c:
         94:c4:9e:7b:30:1d:0f:cc:9e:fc:2c:a0:dd:1d:01:f3:79:cc:
         2f:10:a4:24:2f:04:15:1d:43:8b:91:73:f4:af:07:1d:25:b8:
         a5:b3:0c:ac:7e:05:30:aa:38:8d:a2:df:4b:4f:86:7e:f7:b7:
         84:a8:0e:46:f2:13:47:d8:5c:29:61:3a:33:32:c2:32:4a:c2:
         e8:6b:fc:d2:42:17:7f:ba:8c:83:84:32:ae:76:1c:c1:c6:55:
         db:57:9b:ad:b6:a8:11:3d:f0:cf:b2:7d:81:bf:42:62:1f:9c:
         5e:3a:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:30 2024 by rpki-client on console-fra.rpki-client.org