Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          7HUsT8xiStGL1yFVQstOFSKHcR874oZ61i8TADsUcW4=
Subject key identifier:   F2:0B:E0:58:A5:45:FF:A2:33:6C:0E:D9:3D:EF:A7:E9:BC:72:42:6B
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       019357D29271F769F766DB0F1FEA38D54049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          0E91
Signing time:             Sat 23 Nov 2024 07:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:38 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: z3piHITvTHQ24drFSoPLiJ7LxUZQ48h8Xc3jshyBZM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:92:71:f7:69:f7:66:db:0f:1f:ea:38:d5:40:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Nov 23 07:00:38 2024 GMT
            Not After : Nov 24 07:00:38 2024 GMT
        Subject: CN=f20be058a545ffa2336c0ed93defa7e9bc72426b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:2c:2a:76:3f:51:f7:2f:c1:5d:c2:b7:35:
                    79:cf:43:6e:49:5a:58:40:10:a7:25:34:9d:82:e8:
                    f1:08:ed:d0:5f:99:3f:cc:26:c6:41:09:3b:cb:1d:
                    59:f0:24:96:13:98:c5:57:d1:0d:b5:db:92:ce:f2:
                    8a:be:f0:02:70:8f:88:c5:5c:f9:aa:35:0d:6f:80:
                    fc:ac:a0:7f:68:98:ef:fe:b0:5b:63:96:60:0c:ee:
                    00:82:d4:11:00:52:ae:31:cb:90:0e:22:94:de:0e:
                    7a:0a:6c:0e:ea:77:8d:d3:0c:c5:7f:40:f1:ca:94:
                    59:41:94:e5:ea:0b:34:72:be:7f:8a:df:f1:9c:a8:
                    a0:b3:54:36:8b:0d:3c:49:b7:b2:b2:70:00:d5:78:
                    4f:20:b4:f2:09:32:6b:ab:a4:cf:c3:43:7d:6f:5b:
                    e8:f6:e7:dc:1a:01:bb:cf:15:15:b8:ef:b8:e6:11:
                    09:03:55:65:6d:41:be:c3:25:6b:84:d9:b2:a7:75:
                    b9:f5:49:94:4f:cd:a5:ad:86:6b:7a:d5:31:7e:2f:
                    9d:a9:e9:f5:73:ff:71:e2:19:4f:96:f9:7e:cf:86:
                    07:d5:95:e6:00:c8:37:25:cd:2b:19:9c:06:0c:67:
                    dc:23:68:be:12:ad:6d:e8:83:c7:6a:74:af:b1:0f:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0B:E0:58:A5:45:FF:A2:33:6C:0E:D9:3D:EF:A7:E9:BC:72:42:6B
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:09:50:d7:ac:34:ff:57:c1:ac:21:29:61:55:89:8b:05:b6:
         08:c8:2a:c1:a4:2e:f0:d3:2c:3f:df:b8:d7:2f:6d:ce:15:2d:
         22:1e:c0:7d:38:cb:ae:8e:2c:42:6f:92:e0:4a:dc:04:13:6b:
         d5:37:22:18:b8:f5:68:eb:f0:41:ff:10:87:43:81:2d:be:44:
         55:b1:d8:d5:46:be:74:e0:cd:de:56:f2:e6:dd:15:03:95:b5:
         01:d8:7d:64:69:c1:25:d7:d5:9c:7d:a1:77:4e:14:42:bc:cd:
         35:4b:f3:38:3b:07:c1:3c:7a:0e:13:99:fc:27:f7:98:64:c4:
         55:ba:79:8e:8b:a4:11:b5:eb:c5:b9:4b:5b:fe:36:a7:6b:78:
         be:bc:46:2c:5b:2d:f5:4a:69:d6:f2:7d:37:28:64:05:11:f3:
         8d:01:2d:1a:a7:36:16:a6:e6:53:01:26:cf:55:8d:dd:aa:df:
         fd:64:a7:9e:3d:a1:49:c3:7a:57:64:1d:67:72:25:c2:b1:9c:
         6a:e2:45:3e:a2:0d:6e:78:05:15:b6:1e:05:f9:8d:b9:b4:d5:
         49:06:5c:fa:16:0e:c4:d6:7d:20:82:cf:32:31:e3:83:43:e1:
         66:65:0b:c7:b8:8a:e4:41:da:c8:8b:90:ad:aa:13:2c:30:56:
         b4:55:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:02 2024 by rpki-client on console-fra.rpki-client.org