Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
File:                     eBd1rflxcuL2j8kQUwnTdTuh9M0.mft (raw, json)
Hash identifier:          H/Xa0BG9tefDPVqyx8fFMlx1nU0qUc3fw/yrwb8fag4=
Subject key identifier:   0F:FA:B9:48:71:01:38:97:59:A6:72:49:9B:7E:72:42:FC:D8:18:86
Authority key identifier: 78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD
Certificate issuer:       /CN=781775adf97172e2f68fc9105309d3753ba1f4cd
Certificate serial:       01935879444A299F0F5EEA67C3F4DADCA997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 10:02:42 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:42 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:42 +0000
Files and hashes:         1: eBd1rflxcuL2j8kQUwnTdTuh9M0.crl (hash: UEl0TIQddMmNuq+DRjlJbx/6ySQ09DgylHf+1BBmB8I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:44:4a:29:9f:0f:5e:ea:67:c3:f4:da:dc:a9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781775adf97172e2f68fc9105309d3753ba1f4cd
        Validity
            Not Before: Nov 23 10:02:42 2024 GMT
            Not After : Nov 24 10:02:42 2024 GMT
        Subject: CN=0ffab9487101389759a672499b7e7242fcd81886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:17:6d:ec:d7:2c:dc:a3:61:f1:b0:8d:51:
                    a0:35:05:2f:09:c5:4d:40:59:ff:ba:c3:ed:53:0a:
                    88:76:40:22:6d:7a:8d:3b:2a:e0:41:fc:6e:5b:30:
                    be:61:83:37:86:86:fe:56:fb:52:4d:d0:6e:e9:34:
                    f3:64:96:79:1c:93:38:9f:96:ed:f7:5e:c8:fd:a6:
                    f0:18:04:27:52:2b:b3:85:57:8e:3b:fc:89:64:de:
                    ef:53:31:43:09:f1:98:d0:4b:7d:39:00:a1:79:e8:
                    85:01:d8:fb:f0:31:b5:14:1d:b4:34:4b:d2:8f:9a:
                    67:68:85:1d:34:4a:88:8a:a4:ef:81:af:7b:fb:c0:
                    32:f8:fa:a8:27:27:05:7f:b2:11:8f:86:84:fe:aa:
                    31:be:bb:a6:70:ef:d4:c0:41:cd:59:ff:d4:8e:ba:
                    cd:e1:34:29:9d:b4:a2:6a:a5:26:fe:db:09:42:d9:
                    ee:c1:58:ce:76:ad:e8:80:31:a1:d6:8c:da:d5:51:
                    b1:c1:a4:7b:57:01:99:c1:41:a7:74:e6:4f:74:bf:
                    24:d1:e3:62:7b:e8:9d:a5:02:4e:96:29:2d:9a:a7:
                    ef:94:a2:82:6c:97:c1:b2:c9:1e:c7:33:ae:a0:fd:
                    5e:7d:7e:cb:b5:2f:1e:25:64:d8:a8:cf:27:31:47:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:B9:48:71:01:38:97:59:A6:72:49:9B:7E:72:42:FC:D8:18:86
            X509v3 Authority Key Identifier:
                keyid:78:17:75:AD:F9:71:72:E2:F6:8F:C9:10:53:09:D3:75:3B:A1:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBd1rflxcuL2j8kQUwnTdTuh9M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/114d25-a1aa-4a33-b7b4-560e9b053dd1/1/eBd1rflxcuL2j8kQUwnTdTuh9M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:b3:91:71:4e:5c:bd:2c:1a:f6:9d:ae:35:86:95:49:3b:
         f2:5e:a5:20:48:95:3c:29:2f:d2:6b:7c:cc:6d:74:74:be:36:
         da:68:16:c4:19:28:3e:82:08:af:31:53:bc:17:7d:bd:fd:37:
         fd:1c:62:c3:26:06:98:43:ae:5d:77:0a:96:6e:c9:0a:bd:dd:
         e6:3a:48:eb:8b:f8:cb:ca:0e:6a:61:f8:c5:bc:21:0a:1f:e4:
         3f:8f:82:4c:c7:79:73:7f:6a:d7:47:7a:d2:c7:f9:33:73:63:
         60:e3:2d:cd:58:ee:a9:be:4c:87:9b:2e:01:f5:7d:65:70:03:
         a3:ac:28:52:da:bf:2c:2e:b8:a9:3a:b3:43:11:60:a9:10:9e:
         c2:4b:7a:63:89:69:26:93:ce:af:be:83:35:ce:19:44:a7:7d:
         24:f2:1e:d1:a0:28:23:bd:9f:dc:5d:ad:0e:1a:e4:9d:f3:77:
         c0:87:c3:dd:a4:c1:54:2e:60:a4:3d:eb:fc:39:38:c2:d4:f8:
         32:90:19:43:69:c0:6b:ba:33:82:a6:6b:f2:95:88:5b:97:b2:
         ef:c7:c2:e4:eb:0f:87:55:34:25:70:f9:c3:9f:10:6f:07:d4:
         b2:f7:af:28:bb:6c:b1:22:22:13:20:2a:c5:56:bf:2b:89:49:
         4d:39:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:51 2024 by rpki-client on console-ams.rpki-client.org