Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File:                     L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier:          E0EXWXD0+oQHAhLr/RMMhLJ7Oz3j1tTUbt9NlaWO+AY=
Subject key identifier:   C6:8C:96:8E:62:4D:B6:9E:23:7A:3D:7D:0C:27:D2:1C:0E:33:79:1C
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer:       /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial:       019355088F847CAD23DD92185AB5A5A296AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number:          136B
Signing time:             Fri 22 Nov 2024 18:00:44 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:44 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:44 +0000
Files and hashes:         1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: rEG/c6JZyIiyvxz0ixqpsjFv6QoG0u+inIvBcB9Hvpk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:8f:84:7c:ad:23:dd:92:18:5a:b5:a5:a2:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
        Validity
            Not Before: Nov 22 18:00:44 2024 GMT
            Not After : Nov 23 18:00:44 2024 GMT
        Subject: CN=c68c968e624db69e237a3d7d0c27d21c0e33791c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:bf:ed:e8:43:9e:09:75:f1:3f:62:c5:99:
                    2b:9c:cd:86:26:e7:99:d0:f6:82:92:4a:a4:7b:bd:
                    56:14:a7:39:9a:e4:08:e3:fe:1b:a7:be:01:b5:82:
                    3a:72:b1:5f:b9:8f:62:96:d7:42:8b:f0:4b:e0:6b:
                    a3:b5:2d:aa:35:ef:99:aa:68:6e:16:d1:eb:97:c6:
                    b7:fe:d1:a5:09:40:fd:60:f7:c7:57:9d:eb:eb:88:
                    d2:61:d4:64:f0:a6:3b:b1:1d:ae:72:64:82:34:98:
                    d7:b6:71:09:78:a3:95:b3:92:1c:64:08:61:76:97:
                    47:1e:fe:ba:ed:f6:df:20:08:78:18:41:71:e8:f7:
                    ce:85:ef:86:80:d2:86:09:17:9c:ee:95:80:8a:3f:
                    3b:fc:2c:0d:56:7a:16:92:6d:ff:c6:09:34:79:74:
                    34:bc:da:90:af:5b:06:8b:f9:09:b7:ac:4c:b6:33:
                    ae:e2:75:9d:95:59:87:c7:9d:6b:b6:a6:01:bc:73:
                    27:e1:43:27:ca:8e:4f:4c:e3:ca:25:a5:5a:8a:b7:
                    e4:b7:22:7a:62:fa:eb:56:3b:63:14:23:e0:ca:f7:
                    f4:c3:37:b8:93:dc:80:90:7e:03:f9:8e:b3:99:fc:
                    45:b7:43:70:68:f0:8d:1b:7b:57:b2:c7:48:31:1f:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8C:96:8E:62:4D:B6:9E:23:7A:3D:7D:0C:27:D2:1C:0E:33:79:1C
            X509v3 Authority Key Identifier:
                keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:9a:e8:ed:6e:41:0b:6d:f9:09:b1:7e:58:0f:06:dd:65:
         de:f8:45:ca:0c:ed:fe:54:39:de:86:b7:a5:fe:7b:e4:54:d1:
         7e:b5:60:1f:3b:b4:f3:ac:75:26:93:32:7d:cf:d0:b8:a4:a3:
         27:74:be:46:1e:ce:66:97:8c:8d:f4:f0:50:f9:bc:e2:d3:e3:
         db:60:39:69:a6:f6:5c:12:06:e7:96:44:f0:ef:96:5c:f1:fb:
         ac:2c:9a:19:3a:62:49:98:e1:bf:76:f6:d3:e1:a4:d5:42:f3:
         50:e9:02:cb:18:67:85:1c:ef:f9:76:0c:f5:45:9d:21:8a:2f:
         26:d4:5d:f8:3a:43:64:c7:7e:7c:9f:b1:ec:c1:01:76:d6:6c:
         93:7f:2d:ef:6d:b9:ca:d0:46:dc:2d:9a:34:67:c7:ca:ac:a8:
         b1:00:d0:27:a9:d0:a6:b9:3b:c9:7e:8f:c0:27:5e:a5:e8:b2:
         bb:a9:ae:72:41:67:e6:3f:4d:49:1a:f9:b4:c2:9a:5d:41:62:
         46:94:c6:49:ff:ba:b8:91:cf:c6:4c:6e:a9:c0:17:6a:0e:a9:
         b1:d5:4f:ea:b2:f2:83:5d:92:c0:fe:22:01:43:59:f2:dc:a3:
         43:a9:99:cf:43:68:2f:0c:7e:d3:2f:b5:05:e9:c4:2c:45:f4:
         66:8f:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:51:46 2024 by rpki-client on console-fra.rpki-client.org