Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File:                     ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier:          9MAhtd72riy5nHcCdnBYahGBFndgErkRfar0tLT0b5w=
Subject key identifier:   5B:17:FC:76:04:59:EF:A5:E0:6D:02:5B:65:93:CD:CD:E1:82:18:4B
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer:       /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial:       019358093A1BFB133A1B6A96C8234D5D9E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number:          49
Signing time:             Sat 23 Nov 2024 08:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:19 +0000
Files and hashes:         1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: o2HPDWrQeswjF9o8FpPhV2vjefBkUvQ/dGSLZ8ZJAmg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:3a:1b:fb:13:3a:1b:6a:96:c8:23:4d:5d:9e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
        Validity
            Not Before: Nov 23 08:00:19 2024 GMT
            Not After : Nov 24 08:00:19 2024 GMT
        Subject: CN=5b17fc760459efa5e06d025b6593cdcde182184b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:e8:75:f5:10:9b:00:dd:b9:d4:b9:dc:7b:
                    fb:79:ae:24:a0:cb:7c:09:a2:d8:ea:c1:80:9a:25:
                    8c:1c:b0:74:f6:4f:5b:3c:4c:79:17:42:79:26:3e:
                    85:1f:d7:5b:aa:3b:ff:44:6c:22:89:cd:c7:97:e1:
                    5e:c3:4c:97:9b:4b:68:03:fd:a1:2e:c1:84:dc:b2:
                    93:60:ff:6f:b4:f3:d3:ca:0f:95:b2:e3:86:c8:73:
                    1a:b6:45:db:21:a0:e8:17:e7:06:79:5a:63:68:69:
                    57:42:f0:98:3f:eb:3e:ea:b9:ea:a5:21:e6:64:0e:
                    46:5e:c4:64:68:a1:11:49:97:a6:27:7d:37:43:99:
                    ea:ee:45:19:1d:19:9d:3e:c0:30:71:70:9e:48:02:
                    58:b4:0b:43:2e:f4:e8:60:eb:11:60:24:b5:42:ca:
                    4c:6c:cc:0c:98:25:b1:b2:cb:ce:fc:f3:74:67:f5:
                    70:8f:a4:eb:1b:b3:ab:73:89:99:96:ec:3a:fe:27:
                    88:00:6e:9a:f9:70:be:79:e8:f5:7f:b8:2c:06:b4:
                    b7:f4:fb:2e:23:44:75:31:46:a2:4c:55:33:34:0f:
                    35:f6:b8:f4:b7:63:45:71:92:9f:f6:e3:40:15:ed:
                    d7:9f:4d:a4:77:be:21:da:b3:86:04:72:13:ac:54:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:17:FC:76:04:59:EF:A5:E0:6D:02:5B:65:93:CD:CD:E1:82:18:4B
            X509v3 Authority Key Identifier:
                keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:6b:03:e3:a1:bd:38:37:b0:40:bf:e0:e5:6f:60:66:11:45:
         f4:cf:09:f5:bf:91:7c:b3:09:2f:c8:a6:0a:19:2e:d0:ea:78:
         2e:f0:a8:c8:5b:32:dc:ea:30:1e:44:4d:c6:49:d9:f1:76:36:
         02:16:85:52:d7:b2:30:cc:47:77:97:e8:4e:0f:a2:5e:27:6e:
         ca:9b:6e:0c:ea:9e:b9:22:76:dc:59:85:81:2e:f7:2b:7d:9d:
         30:6e:dd:97:d0:72:d9:8c:f0:03:b8:83:f7:95:7f:44:4f:fb:
         bb:2c:f9:6e:40:b5:c4:d3:67:2e:f9:30:a9:8e:58:19:a9:fe:
         7f:40:ed:e0:80:22:3b:70:62:43:15:d6:1c:87:04:27:b4:46:
         c0:88:aa:3f:74:46:ec:2d:b5:b6:fd:13:8d:87:6e:21:a7:91:
         e2:46:a6:73:a8:2d:41:e6:dd:f8:86:4d:9e:9b:f7:23:5c:7c:
         64:ce:dd:cc:d8:5c:b1:1d:d4:ea:74:a3:61:96:2f:84:e3:3c:
         36:ff:7d:b6:b0:d4:e8:d2:fb:03:9d:79:79:87:f4:0d:4d:70:
         dc:c4:ef:e2:60:19:e6:3f:de:d2:ee:cd:9c:19:5d:d4:c8:fe:
         63:04:e0:ad:fa:7b:58:dd:16:71:93:87:7b:e4:3b:c5:be:da:
         31:46:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:41 2024 by rpki-client on console-fra.rpki-client.org