Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8f4eae-a630-473b-941b-8765ce1a7bb6/1/9xAt4vPbsxELJGY_hKGDcNlKLtI.mft
File:                     9xAt4vPbsxELJGY_hKGDcNlKLtI.mft (raw, json)
Hash identifier:          qqZgUbiz7c7z/s25Lh8Je50m9xCFzvTTXJ819pzY80Y=
Subject key identifier:   24:F9:C2:93:D8:43:D8:84:4C:78:E4:38:07:D8:13:AA:18:D9:46:AC
Authority key identifier: F7:10:2D:E2:F3:DB:B3:11:0B:24:66:3F:84:A1:83:70:D9:4A:2E:D2
Certificate issuer:       /CN=f7102de2f3dbb3110b24663f84a18370d94a2ed2
Certificate serial:       019405A17197FF32244EFBE2D8A75689EA7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xAt4vPbsxELJGY_hKGDcNlKLtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8f4eae-a630-473b-941b-8765ce1a7bb6/1/9xAt4vPbsxELJGY_hKGDcNlKLtI.mft
Manifest number:          30
Signing time:             Fri 27 Dec 2024 01:00:53 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:53 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:53 +0000
Files and hashes:         1: 9xAt4vPbsxELJGY_hKGDcNlKLtI.crl (hash: R+/AIRL+ieqV7wEa/91NtjlMtd8h3xb4VJ8f/iyrHF8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8f4eae-a630-473b-941b-8765ce1a7bb6/1/9xAt4vPbsxELJGY_hKGDcNlKLtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8f4eae-a630-473b-941b-8765ce1a7bb6/1/9xAt4vPbsxELJGY_hKGDcNlKLtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9xAt4vPbsxELJGY_hKGDcNlKLtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:71:97:ff:32:24:4e:fb:e2:d8:a7:56:89:ea:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7102de2f3dbb3110b24663f84a18370d94a2ed2
        Validity
            Not Before: Dec 27 01:00:53 2024 GMT
            Not After : Dec 28 01:00:53 2024 GMT
        Subject: CN=24f9c293d843d8844c78e43807d813aa18d946ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:d4:7d:fd:78:f3:3e:d6:8b:a7:de:67:a6:
                    e9:b0:df:aa:46:1d:f5:0a:8f:f1:74:04:5c:36:f8:
                    cb:81:ac:e0:33:43:f9:43:f2:12:77:56:0f:c9:ce:
                    92:d5:bc:5b:de:d0:c7:2f:70:7b:4e:a0:2e:4d:40:
                    e9:00:0e:ee:ed:d3:f5:8a:1f:28:c4:4d:fa:d0:75:
                    c6:f6:1c:05:ba:09:cf:18:f0:08:e4:f9:35:ab:5e:
                    8b:79:70:44:72:73:dc:ff:09:62:88:4c:ee:11:86:
                    47:9e:0c:4b:22:93:d3:c1:f3:2b:37:87:4f:f2:d0:
                    f2:52:27:bb:79:02:bb:97:d7:83:0a:66:7c:84:e3:
                    f4:9e:00:25:18:20:9e:61:a0:31:5d:0e:15:1c:bf:
                    f1:ea:b8:31:2f:d8:1f:4e:e0:8f:39:f5:a1:40:3b:
                    98:c1:10:f7:12:a8:5a:64:00:86:27:26:3c:b9:ce:
                    3e:14:c1:5f:db:51:5e:e3:8a:73:04:5f:d9:2e:da:
                    56:36:d4:84:22:5b:42:a7:16:dd:0d:f8:92:f5:d5:
                    9d:67:e6:8f:7c:49:08:e9:8d:97:56:8f:c2:ea:42:
                    0d:d8:a0:ec:ff:8d:97:44:86:b1:5f:d6:1e:f7:5c:
                    58:b3:ea:10:48:5d:c8:4c:ee:ed:de:f1:a1:ae:b1:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:C2:93:D8:43:D8:84:4C:78:E4:38:07:D8:13:AA:18:D9:46:AC
            X509v3 Authority Key Identifier:
                keyid:F7:10:2D:E2:F3:DB:B3:11:0B:24:66:3F:84:A1:83:70:D9:4A:2E:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xAt4vPbsxELJGY_hKGDcNlKLtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8f4eae-a630-473b-941b-8765ce1a7bb6/1/9xAt4vPbsxELJGY_hKGDcNlKLtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8f4eae-a630-473b-941b-8765ce1a7bb6/1/9xAt4vPbsxELJGY_hKGDcNlKLtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:79:40:7a:32:3c:0d:d8:e6:ce:92:f7:97:22:7c:56:e2:e7:
         2e:a2:95:24:3b:db:c7:c1:bc:d2:d8:79:88:97:7f:04:6f:f4:
         91:f4:e0:83:66:89:87:f9:d5:ad:2c:36:c0:4e:14:84:02:89:
         1b:6c:10:03:31:5e:8c:72:4c:df:ad:f0:37:08:96:e1:ad:0b:
         88:b2:16:2e:81:e1:db:3d:b8:13:86:0e:f7:0f:b5:60:83:6d:
         8e:80:14:e2:58:ea:ae:80:df:8e:ee:57:86:23:64:20:f8:e9:
         52:b4:d2:ac:d6:1c:60:6d:1a:68:d7:23:1a:1e:85:8d:ca:8d:
         01:48:bb:8f:db:4a:6f:50:90:04:41:27:37:87:aa:e3:fa:02:
         ee:13:12:34:d1:9c:24:16:30:e1:84:65:87:64:ba:10:86:a4:
         ba:7c:28:08:de:41:e9:4f:fe:11:10:91:a3:a3:7a:e7:a3:6b:
         32:52:a2:70:8a:6b:39:d0:e1:c6:c0:9e:88:73:df:8d:6d:5a:
         87:05:5a:05:ae:a5:ca:17:cc:b9:61:d1:a8:6d:4d:7a:b6:09:
         f2:2a:fa:d6:fa:0d:67:c6:a1:03:dd:8c:4c:42:28:3e:79:ef:
         20:c2:64:ea:86:02:40:7a:25:29:aa:fb:35:55:5b:8f:1d:9a:
         21:ea:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:49:27 2024 by rpki-client on console-fra.rpki-client.org