Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          7Cccm99oY9X2H412OiB0aL69v4y1+i3txdZ1YDaaa8M=
Subject key identifier:   FC:DE:64:37:DC:67:72:67:DF:C4:C2:25:9E:23:B9:78:8E:E3:62:54
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       019357D2EE2E00507909EB797CEAD5038AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          69
Signing time:             Sat 23 Nov 2024 07:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:01 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: cyas13eybXRk7SGpT+awDE0tCTF4/Wo6iO12AZyGmaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ee:2e:00:50:79:09:eb:79:7c:ea:d5:03:8a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Nov 23 07:01:01 2024 GMT
            Not After : Nov 24 07:01:01 2024 GMT
        Subject: CN=fcde6437dc677267dfc4c2259e23b9788ee36254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:b2:19:ed:3d:49:f3:ee:83:18:49:bd:5f:
                    a9:27:d4:84:e8:01:76:25:48:fa:a4:c8:65:f8:fc:
                    f4:1a:0f:4d:3b:b0:25:62:d9:e5:8d:2f:5f:e6:dd:
                    66:f5:4c:50:43:88:68:7e:06:83:fd:94:ef:13:21:
                    3f:f3:85:cc:c7:b8:3e:5d:63:83:10:b9:b7:e9:40:
                    d3:d7:47:a7:0b:e9:d6:78:5b:cd:a6:78:49:0e:5b:
                    52:6e:6d:6e:9a:ac:66:c0:e1:b4:d6:e7:59:c4:7d:
                    ba:f1:e8:22:86:a9:98:cf:18:39:a8:8b:b4:84:fa:
                    02:10:60:a9:80:09:a0:0e:15:48:1c:84:d3:4d:85:
                    47:49:37:3f:57:49:28:1b:63:b0:63:91:c5:02:bb:
                    a2:dd:ed:19:c6:56:5f:11:37:06:d8:ad:76:6d:c0:
                    8e:1c:ed:b2:7a:43:4d:ee:8d:e1:bf:37:d6:2a:89:
                    a6:53:95:b4:61:c0:09:a7:2b:86:f7:12:62:12:d2:
                    15:c4:ae:03:5f:c0:65:39:6e:20:5f:70:65:2f:ba:
                    df:17:a8:28:56:11:b5:0d:99:d3:34:7d:c3:22:81:
                    2e:bb:44:9d:60:aa:d0:4f:81:84:3d:88:2c:04:35:
                    f1:0e:6d:ca:d4:9f:81:27:87:44:ea:00:97:51:c9:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:64:37:DC:67:72:67:DF:C4:C2:25:9E:23:B9:78:8E:E3:62:54
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:a8:4c:89:3b:e6:ef:6c:c7:97:7a:d2:d1:52:46:b1:d9:
         68:28:98:a2:9b:86:54:0b:84:ef:e9:e4:29:ea:ea:4d:ea:98:
         2c:92:3e:b8:22:81:95:3d:8a:75:a6:80:c2:07:08:43:6c:e8:
         50:a3:f6:8f:d5:45:39:fe:e8:a2:9b:58:fb:0a:83:75:1f:36:
         1a:bf:a8:dd:86:79:10:83:15:dd:a6:15:cf:97:85:8f:09:71:
         24:05:18:ed:80:cf:20:1a:e0:c8:c6:fa:fe:34:34:4a:25:f3:
         dd:c8:33:d2:b8:6e:31:3e:13:c6:d5:7b:e2:8b:aa:43:fd:a9:
         3e:c5:b1:4a:80:8d:a5:11:c6:e6:9d:24:e0:08:60:a7:1f:b2:
         0d:ea:ec:2c:26:86:60:2f:91:13:1d:cf:76:c5:1b:ee:6c:12:
         41:23:03:ad:c5:f8:b8:cc:06:cf:80:39:00:64:6a:6d:a8:3d:
         cc:6c:10:f4:5e:47:7b:ca:7e:a3:7f:3e:c2:f1:ba:21:c7:86:
         5d:de:51:ad:3c:be:a3:4f:7d:f9:5c:14:00:20:83:d5:01:19:
         6d:df:17:4c:4a:0d:d6:be:d5:29:2c:83:34:6a:fc:01:ab:6a:
         ef:43:f1:07:70:4c:87:67:8a:5b:7e:4d:54:06:82:fa:34:50:
         08:c1:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:51 2024 by rpki-client on console-ams.rpki-client.org