Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
File:                     9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json)
Hash identifier:          PScEwhjMGqE7vSoN1UzzYGkvK8eyk2GlQkqDfdthcfE=
Subject key identifier:   AF:CF:1E:57:B9:13:B6:1E:B4:97:64:A3:D9:00:C1:7B:62:D0:1E:9F
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Certificate issuer:       /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial:       01940647FA4B5A2CC003651B75DAFE44DC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
Manifest number:          0E8A
Signing time:             Fri 27 Dec 2024 04:02:47 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:47 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:47 +0000
Files and hashes:         1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: gAU8NGOF1xPsXkMeb0MEOrwULT4iRy/xnUDHTZCR8Dc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:fa:4b:5a:2c:c0:03:65:1b:75:da:fe:44:dc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
        Validity
            Not Before: Dec 27 04:02:47 2024 GMT
            Not After : Dec 28 04:02:47 2024 GMT
        Subject: CN=afcf1e57b913b61eb49764a3d900c17b62d01e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:d4:cf:7b:cc:76:65:3d:b9:c9:b8:c7:b5:
                    c0:e7:3c:29:31:34:43:54:4d:54:de:5b:38:0a:f3:
                    3d:88:49:f2:70:35:85:0b:e5:a2:bb:f5:93:78:c3:
                    32:21:22:5e:f8:d6:05:d8:38:05:28:6d:4f:bd:bf:
                    f1:1b:82:b9:b7:b6:6f:28:5d:e6:71:7c:49:90:79:
                    d7:55:0f:78:0e:0f:83:13:15:ce:8d:be:93:b4:24:
                    2e:f0:db:56:41:d3:04:67:8a:0e:f8:a7:f9:df:4c:
                    f8:65:f0:0e:b7:35:81:92:30:1c:49:fa:ac:72:65:
                    23:d6:53:dc:ef:2c:44:a0:07:94:6c:ee:0d:4d:f1:
                    ca:03:48:d5:4c:1e:ac:31:c0:be:90:c4:7f:d6:fd:
                    00:8f:33:6a:cd:9c:38:0c:92:0a:82:9c:b7:ea:f0:
                    0d:cc:fe:07:6d:eb:18:f6:01:55:e9:a3:8d:76:ac:
                    8d:ef:de:44:3c:80:0e:5b:70:e4:bf:c8:7b:40:51:
                    71:5b:6a:82:a5:49:ac:b0:ab:86:c6:cc:ee:ca:e9:
                    1a:09:37:2c:ec:2e:a8:a3:ea:c8:0c:6f:dd:16:0a:
                    77:db:24:23:73:0a:a8:6c:80:d7:e9:a1:aa:5e:e0:
                    64:9f:a9:6a:63:35:a4:16:5d:a3:25:dd:21:1b:26:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CF:1E:57:B9:13:B6:1E:B4:97:64:A3:D9:00:C1:7B:62:D0:1E:9F
            X509v3 Authority Key Identifier:
                keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:ae:46:01:7b:29:8d:b1:c0:d6:46:60:8b:b5:e7:e2:61:
         60:0a:aa:61:d1:b6:f4:7f:ba:0e:2e:3b:f2:e5:3b:e1:93:91:
         a3:ed:a6:63:04:c5:26:d9:1b:92:de:62:04:bb:bf:95:fb:ac:
         20:f8:85:8f:14:9a:86:31:c1:41:1e:83:56:85:25:e4:5b:f2:
         df:e9:1a:eb:b1:61:9e:6b:41:0a:bc:4b:86:ed:cd:2c:30:e7:
         02:53:2e:70:b5:6a:b2:5d:da:71:e7:69:0b:38:79:12:2b:88:
         7c:da:9e:ed:02:4e:d3:b6:34:b2:3c:cd:8b:f9:41:30:92:f8:
         5f:14:7c:0a:bc:be:8b:7b:0a:53:a2:d4:a7:da:2b:4f:d7:f8:
         47:c6:7e:0c:ad:67:62:38:79:ef:96:a0:44:e7:a0:67:eb:fa:
         df:10:d7:d1:ec:4f:62:9f:95:8a:61:d2:d6:a1:dd:64:c2:8d:
         0a:90:89:93:5d:9f:b9:0a:d2:eb:a5:c0:0d:6d:08:38:cf:64:
         e1:52:2e:f7:aa:2e:61:f5:2a:76:0a:39:78:b1:8a:ce:fb:10:
         58:d2:63:fc:73:0c:6a:ea:82:1d:9d:9e:db:98:c5:ff:4e:7a:
         7d:81:2b:18:6b:8f:a1:d4:d5:5c:d2:dd:bb:9a:b8:52:91:59:
         87:d2:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:51:12 2024 by rpki-client on console-fra.rpki-client.org