Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
File:                     V-L2mlyy1YBNIamwRboxSusaqh8.mft (raw, json)
Hash identifier:          KqwS713a3cZDYmqzYW4bJ+gGm5g3tBmvIVrxbo0GrRg=
Subject key identifier:   B3:24:D3:97:F5:60:99:2E:27:E2:AF:09:A2:03:2D:11:6F:DE:54:13
Authority key identifier: 57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Certificate issuer:       /CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
Certificate serial:       019356F6AB074902955F879C736848D3E5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:26 +0000
Files and hashes:         1: V-L2mlyy1YBNIamwRboxSusaqh8.crl (hash: oL+rueWVdPGn865PzFpkiNz462PdA159YEG5nAZRvEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ab:07:49:02:95:5f:87:9c:73:68:48:d3:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
        Validity
            Not Before: Nov 23 03:00:26 2024 GMT
            Not After : Nov 24 03:00:26 2024 GMT
        Subject: CN=b324d397f560992e27e2af09a2032d116fde5413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:22:14:e7:a4:10:86:ba:76:a9:8f:42:76:
                    79:50:17:34:db:4e:fa:65:c5:51:d8:a6:b4:9c:54:
                    8d:e1:0e:cb:71:bd:51:f6:08:79:79:71:09:e4:a4:
                    9d:b3:0a:fa:74:5e:1b:5f:e4:ef:8d:c7:af:0e:21:
                    7b:b1:c1:1a:f1:ad:47:a0:50:86:9b:cd:d5:53:c4:
                    e8:97:2d:dd:b6:c9:59:1e:39:a8:68:31:b7:d1:a1:
                    95:f9:ae:82:b4:13:10:ff:99:ca:9c:2c:33:3c:cc:
                    92:93:33:d3:63:86:42:03:d1:cf:41:ab:22:32:56:
                    f3:38:02:8a:31:fc:a4:c7:80:55:b5:e4:ba:54:c3:
                    0f:0f:e9:8d:f3:29:ba:d8:b6:f8:8c:9e:4e:12:88:
                    e9:c4:56:f0:79:8b:58:51:7c:70:06:6f:2a:98:f1:
                    84:3e:6b:74:f3:3e:2e:dc:17:f9:f7:20:c9:99:af:
                    bf:cf:2b:31:4e:87:90:92:14:52:79:33:c3:e2:61:
                    3a:f5:92:6a:3f:50:eb:79:bc:20:24:88:ca:f6:9c:
                    e8:5e:cc:20:8a:a5:52:a9:5f:3b:ef:2a:06:6d:34:
                    4a:c0:12:72:ec:af:dc:5e:bb:35:b7:5a:f3:f5:d7:
                    db:d4:b6:fd:f3:48:6f:72:84:49:b4:e0:77:a6:48:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:D3:97:F5:60:99:2E:27:E2:AF:09:A2:03:2D:11:6F:DE:54:13
            X509v3 Authority Key Identifier:
                keyid:57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:53:50:a9:44:73:ca:86:e5:52:b4:cf:30:da:03:a9:71:
         0b:9d:9d:b5:03:6b:74:91:1d:36:94:8f:83:ba:2e:69:77:35:
         30:a9:02:18:bd:a8:9a:43:e3:51:63:f4:4b:dd:64:47:ef:b2:
         ef:30:7d:1d:6d:0a:95:c9:3e:08:6e:83:2a:03:86:19:31:80:
         1f:d0:ca:d2:8b:6c:91:3e:d9:5a:59:17:6e:c9:f9:5f:58:d5:
         cd:af:61:e3:c8:88:bb:43:02:36:ad:35:8e:87:fa:97:16:a7:
         4f:60:e6:2a:a2:82:98:a0:2e:68:42:8b:f4:bb:25:6f:60:1d:
         90:02:a9:cd:51:4a:65:92:a1:73:97:3c:74:3b:64:d8:bb:43:
         0c:31:e5:87:80:b0:53:1d:93:d7:85:b5:12:86:f9:b4:10:5f:
         af:2b:86:96:6e:5d:3d:61:50:eb:80:49:81:28:c5:3d:83:a9:
         07:84:9f:ef:f8:9d:0a:94:51:d6:dc:02:a1:28:98:d4:c0:b3:
         13:3d:f5:62:d1:6f:61:8f:c8:ad:36:3b:5b:ea:d1:54:11:cf:
         39:00:e7:0f:c4:f8:f2:2d:19:78:fd:30:50:25:67:72:a3:34:
         f8:97:66:c5:cc:40:74:23:c0:d8:d6:df:4a:62:2a:cb:21:6e:
         3b:9d:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:30 2024 by rpki-client on console-fra.rpki-client.org