Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          ISWnH8NMDunmqrG6WzkkSwGgBsoW1oGamrjPEQuWX88=
Subject key identifier:   8F:A1:C4:6A:14:CE:7C:93:09:53:9C:9F:F2:C1:4D:42:CA:EC:01:BF
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       0193572E0651A6CEE520AAC589E6152CDBEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          136C
Signing time:             Sat 23 Nov 2024 04:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:54 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: +voMTrqcNsa0oJPppKFYyvhhUWUmAUxLPHHAaPLPZow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:06:51:a6:ce:e5:20:aa:c5:89:e6:15:2c:db:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Nov 23 04:00:54 2024 GMT
            Not After : Nov 24 04:00:54 2024 GMT
        Subject: CN=8fa1c46a14ce7c9309539c9ff2c14d42caec01bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:e9:07:89:05:d3:a6:e7:08:df:85:82:60:
                    4d:be:16:dd:82:c3:0d:6b:a5:34:1f:84:c9:2e:0e:
                    f4:65:1b:76:39:5c:72:40:5c:0b:41:b0:63:0b:f5:
                    6b:be:f2:82:6c:64:50:d0:c0:46:dd:a7:7a:a2:07:
                    e8:9f:4e:83:c2:6d:ce:1e:b0:ca:da:cd:67:58:e6:
                    da:e6:3d:f3:fb:96:66:8d:65:17:07:e9:fa:03:51:
                    dc:fa:0a:82:7c:7f:eb:47:a6:05:97:29:d6:60:a6:
                    0f:7d:66:d8:1b:09:5e:57:06:04:62:1b:f4:50:b7:
                    e3:e3:14:50:32:fa:2b:f4:2c:f4:68:f0:11:b9:fd:
                    7a:ce:31:51:0c:50:de:71:44:9e:73:00:da:a1:12:
                    56:29:81:94:d2:5f:c6:d8:02:30:fd:26:d9:ae:b5:
                    62:65:78:d1:30:59:45:a4:40:2c:0f:18:3c:e7:6a:
                    f2:23:30:74:ec:1c:b8:be:7b:54:c5:45:5e:1c:0e:
                    b7:96:c2:65:70:b6:e5:41:a5:6f:2b:32:ef:97:5e:
                    57:c3:a3:2a:54:04:c9:f9:e7:fd:32:67:c8:26:ec:
                    1e:ee:b3:df:52:9f:91:1f:8d:d6:ae:8f:9f:66:73:
                    c6:5b:a7:48:53:dd:21:54:b1:48:5c:f4:74:15:eb:
                    20:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A1:C4:6A:14:CE:7C:93:09:53:9C:9F:F2:C1:4D:42:CA:EC:01:BF
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:94:54:5c:51:1f:22:5a:78:84:ed:7c:e9:09:97:3c:73:aa:
         e0:c0:73:0f:13:14:cb:af:7a:bb:96:3d:23:d7:53:b8:bf:8e:
         c8:4d:8f:72:d9:39:30:20:cb:a8:c5:31:b8:80:b4:ac:61:48:
         43:df:27:3c:ac:1a:40:3f:11:32:da:83:e1:13:7b:59:f5:5e:
         f8:47:21:c6:4f:0b:d5:46:89:95:c4:81:5c:db:03:41:6c:9b:
         41:12:3f:1e:38:51:cc:f6:2e:4f:9d:fc:49:28:e0:14:6d:c0:
         2f:dd:47:a3:3e:a2:87:d0:c8:44:de:02:81:b6:3b:c8:b4:e9:
         6c:a8:5e:5b:bd:c7:1d:c5:a2:b0:32:fa:d8:26:18:3c:a2:f6:
         f5:dd:64:84:e5:cc:53:be:b8:72:6c:a0:f2:04:63:33:00:7e:
         8f:35:9a:d5:7d:73:c9:b5:e8:dc:b9:a5:f5:42:9a:0f:27:ff:
         d8:96:d7:0e:ad:9f:2c:ea:b6:1b:cd:0b:0d:8b:a8:e0:82:51:
         ec:df:ee:67:9e:a8:fd:41:5d:f0:b5:c6:49:75:c6:5c:2c:2c:
         52:2a:dd:1b:07:17:6d:64:f8:50:96:7a:81:2a:03:ec:ef:26:
         8a:45:ab:8b:58:ac:2a:4b:34:90:76:08:47:17:fa:17:92:66:
         4b:f6:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:10 2024 by rpki-client on console-fra.rpki-client.org