Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File:                     GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier:          PtFhyL+OwHKMBTfHPTaqPSdOKrlFS1A5vXri+SF19kQ=
Subject key identifier:   9A:48:58:D6:30:FE:47:58:75:41:C4:E0:F2:75:BD:47:B8:D6:23:7C
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer:       /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial:       0193647B8AFAAEAF4330B91F3DBFFB6BE190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number:          0AD6
Signing time:             Mon 25 Nov 2024 18:00:38 +0000
Manifest this update:     Mon 25 Nov 2024 18:00:38 +0000
Manifest next update:     Tue 26 Nov 2024 18:00:38 +0000
Files and hashes:         1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: rpnJEOec0TjpVJLBlpJRikt4lsLgD8gj51ELrtBB+Js=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:8a:fa:ae:af:43:30:b9:1f:3d:bf:fb:6b:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
        Validity
            Not Before: Nov 25 18:00:38 2024 GMT
            Not After : Nov 26 18:00:38 2024 GMT
        Subject: CN=9a4858d630fe47587541c4e0f275bd47b8d6237c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:69:51:f9:ee:6f:c1:c8:ec:68:89:14:bb:
                    7d:6f:4f:d5:86:f4:83:16:8b:b3:e8:ba:8d:c9:c9:
                    eb:bd:f4:fd:9e:d2:e8:73:ee:d9:74:94:1e:37:10:
                    c4:c6:25:8a:94:aa:e0:2f:57:b8:63:06:22:c1:35:
                    30:54:e9:d0:b2:38:67:06:d5:35:46:f9:e0:39:c9:
                    1f:50:4b:97:af:fe:55:44:c0:26:6c:26:79:30:78:
                    83:3b:14:f9:dd:d6:05:55:83:df:6a:f6:14:fe:be:
                    b3:16:d2:8c:29:46:84:fb:2f:ad:dd:ca:a9:4c:1a:
                    43:a4:3d:a4:92:e3:96:5f:09:bf:9f:89:cc:f1:08:
                    66:f9:d8:b0:2c:a7:9a:bf:40:98:bd:e4:92:84:ce:
                    3c:2b:b2:2f:40:a8:d0:f1:ad:df:7c:00:4a:bb:1f:
                    8c:af:a6:33:9b:86:f2:e9:4a:4c:85:70:38:63:d9:
                    f8:18:f5:cb:ab:0b:a2:a1:2b:46:c9:a8:4c:ee:3b:
                    5a:ed:27:ed:ac:17:b1:96:b0:d1:00:68:42:81:ad:
                    9d:5f:a5:32:70:51:98:ba:fc:03:b5:50:3c:98:3c:
                    dd:23:b8:aa:31:61:3b:6c:b0:b5:fd:f9:a5:8d:77:
                    0d:c0:dd:26:ab:62:5e:43:65:6c:29:64:bf:bd:64:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:48:58:D6:30:FE:47:58:75:41:C4:E0:F2:75:BD:47:B8:D6:23:7C
            X509v3 Authority Key Identifier:
                keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5c:83:4a:2d:65:0e:d0:de:ca:d0:e8:9a:e8:b8:47:36:c7:
         2f:35:7a:d5:80:33:2f:90:f7:64:89:d3:76:c8:d5:bd:fa:d9:
         8f:f3:2b:2c:60:4f:54:d3:15:39:7a:4a:74:1d:f4:f7:28:e4:
         76:2f:27:7a:f2:c1:7b:b2:fa:ca:56:1a:44:3a:5a:e7:34:0e:
         1e:14:1d:98:7c:7d:54:4d:5d:2c:a8:2a:8e:56:53:69:c9:7d:
         59:ed:f0:17:f5:9e:78:0b:91:5b:84:a6:e0:01:49:3c:67:6d:
         39:35:b1:48:02:4a:4f:af:4d:1a:9f:2f:08:a6:db:be:2b:77:
         4e:67:30:b6:a7:82:4f:23:ac:f1:2e:41:d5:86:cb:b5:0b:2b:
         e4:8b:1f:ce:1b:46:0b:c8:91:21:6c:65:67:b0:3a:b6:d4:98:
         f8:d6:0e:ef:ef:13:af:34:55:bb:bd:0f:b0:e1:52:a3:b5:fe:
         76:c5:60:93:c7:e1:73:07:5d:8a:f2:9e:ad:3c:97:0d:39:34:
         31:79:d3:74:66:50:9a:44:bc:ea:a0:a6:3d:54:c9:3f:52:91:
         2b:27:d9:cd:fd:f1:45:19:c5:03:ef:fb:b8:f6:58:0a:24:36:
         9c:95:fb:bd:b9:ac:47:61:fe:71:1f:34:ae:27:36:3d:fb:ff:
         40:e7:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:38 2024 by rpki-client on console-fra.rpki-client.org