Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File:                     fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier:          yaxYVsb+Q65X1m8mJqpHnR0tAl6kwEJqZkGZHCD5n9U=
Subject key identifier:   AB:A8:8B:68:88:28:19:29:B5:BE:35:43:29:AE:78:52:4C:CE:9E:F8
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer:       /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial:       01938C9C483AFD092F335E0692694A4615A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number:          138A
Signing time:             Tue 03 Dec 2024 13:01:12 +0000
Manifest this update:     Tue 03 Dec 2024 13:01:12 +0000
Manifest next update:     Wed 04 Dec 2024 13:01:12 +0000
Files and hashes:         1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: F17Ie6+U73dxe+yVvEG9XBK++5pCtJRAbIpIC8/IOh0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9c:48:3a:fd:09:2f:33:5e:06:92:69:4a:46:15:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
        Validity
            Not Before: Dec  3 13:01:12 2024 GMT
            Not After : Dec  4 13:01:12 2024 GMT
        Subject: CN=aba88b6888281929b5be354329ae78524cce9ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:75:0d:66:3e:5c:1b:1b:79:fa:b2:7b:02:
                    55:32:92:ad:92:d0:bb:69:af:c0:61:ee:3b:aa:88:
                    27:d3:da:d4:25:bb:0b:3f:18:8d:f1:60:82:3a:d5:
                    05:a2:8d:a1:54:53:4d:f6:ca:96:1f:0c:f9:0c:e8:
                    2f:20:06:79:b0:3d:65:f7:2d:73:16:c8:fb:9e:ba:
                    d1:e9:0e:29:46:30:d0:50:17:62:bf:f8:c7:cc:e5:
                    a9:bf:dd:dc:3c:46:7f:d6:2f:ab:cf:20:b5:b5:d4:
                    ee:eb:9f:cb:5e:7d:1e:0b:b9:58:4c:55:eb:2d:e9:
                    2c:4f:e4:09:18:3f:d2:9a:31:fb:ce:c4:a7:5d:a6:
                    89:63:c9:61:99:30:41:ae:3c:e0:0c:91:c2:3f:86:
                    dd:ac:24:f3:8d:5b:58:fd:86:f2:75:3a:44:96:9e:
                    34:47:b7:e8:20:d3:ef:b3:fb:17:4b:cb:36:3c:7e:
                    bc:02:1d:b5:58:ff:b5:7e:1b:33:8d:10:14:cc:ef:
                    b6:84:2e:37:b8:a8:8a:73:a8:b4:58:63:0b:47:49:
                    9d:e2:b2:f9:38:6b:42:b5:ad:41:ec:34:30:d5:ce:
                    b0:aa:46:c1:ee:10:fb:4d:d3:e4:63:b9:11:d8:f6:
                    8e:8a:50:94:f2:17:c0:3e:4e:2b:4d:75:82:0a:1e:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:8B:68:88:28:19:29:B5:BE:35:43:29:AE:78:52:4C:CE:9E:F8
            X509v3 Authority Key Identifier:
                keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ba:78:45:de:66:79:49:c2:c4:1a:60:0d:16:3b:2e:92:2a:
         ec:5c:8e:79:f6:15:65:cd:7f:a2:32:02:6e:a6:e4:4d:f6:16:
         10:52:d2:2d:84:a4:9b:f9:38:d2:c9:4a:97:b5:78:3f:f0:03:
         d5:bb:90:16:bc:81:2f:ab:7b:3a:d3:1f:0c:0f:78:b7:92:16:
         81:f0:c9:57:d2:00:d4:8c:72:a6:7f:58:4b:9d:a6:aa:f2:1c:
         ae:4e:8f:76:98:85:88:36:bf:9c:ff:5a:41:64:d2:30:99:19:
         9d:29:5f:c4:61:6e:61:62:51:e3:1b:03:39:a2:76:35:5f:ec:
         ac:db:9d:52:2b:98:50:97:e2:11:36:77:73:f8:06:72:03:0e:
         6a:00:c0:99:b2:bb:3e:37:cc:ec:9b:c0:f1:0e:99:dc:80:cb:
         5d:ea:25:34:81:54:63:df:d5:5c:1b:31:1a:29:95:c8:0b:01:
         f7:bb:74:a5:6d:4a:f8:d0:eb:b1:35:9f:da:43:3f:64:e5:45:
         10:d3:89:4f:50:b5:28:06:15:b8:53:7b:09:fe:47:1b:09:2d:
         ce:09:ac:36:0b:8c:66:2d:2c:39:d9:a7:3a:cc:96:16:6b:c3:
         e5:d8:d5:9a:b0:a8:a6:54:7a:86:5c:7e:c4:9f:53:ad:cd:e9:
         b8:31:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:39:01 2024 by rpki-client on console-fra.rpki-client.org