Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File:                     TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier:          8pUnPMzKhcqsr8OLqwTx7+Q8xUj59oD6wi4KbxIncPg=
Subject key identifier:   B4:1B:F7:0D:9A:8F:00:66:97:DB:51:ED:CE:DE:E7:D1:3D:90:1D:04
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer:       /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial:       01936A46F9F22B290B5E635FBCCD5613173B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number:          12D1
Signing time:             Tue 26 Nov 2024 21:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:56 +0000
Files and hashes:         1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: 0AeXUogVaNRITp4vcVLb5zqFvcGDoS700sdt5YZClTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:f9:f2:2b:29:0b:5e:63:5f:bc:cd:56:13:17:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
        Validity
            Not Before: Nov 26 21:00:56 2024 GMT
            Not After : Nov 27 21:00:56 2024 GMT
        Subject: CN=b41bf70d9a8f006697db51edcedee7d13d901d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:00:07:4b:c7:1c:02:67:94:9d:9b:21:e2:ed:
                    05:61:fc:46:0d:e5:30:f1:8a:12:4b:87:6d:b1:bc:
                    b3:e9:41:fa:bd:8b:fc:6a:f7:0d:48:7d:52:e3:ea:
                    fa:02:8b:82:c6:44:09:2a:00:43:6d:4b:1b:60:d5:
                    46:f3:21:56:0b:60:a3:51:19:9c:16:1b:33:ac:16:
                    b4:f9:f8:0a:e8:98:55:04:00:c3:81:39:29:0d:73:
                    ea:27:f6:58:61:d5:5d:84:da:c3:81:46:b1:3a:21:
                    3f:08:c1:e5:46:11:98:55:b8:4b:8b:a3:ee:c8:85:
                    b4:09:6d:0a:be:66:4d:17:76:dd:b2:bb:3a:60:34:
                    11:81:36:db:12:7b:aa:35:d3:70:30:39:66:bc:a3:
                    9e:8d:bd:c7:0a:76:83:13:19:9b:9d:60:9c:0e:66:
                    60:3f:c9:d9:55:3c:9e:9d:45:76:82:3c:0d:1d:b6:
                    a7:47:69:f1:2b:2f:a7:a5:91:da:41:38:41:be:9e:
                    45:82:57:0e:29:42:9f:6f:76:68:61:13:37:e9:db:
                    56:16:5b:f5:51:85:bd:6b:50:b7:a1:25:46:47:54:
                    c7:c4:7f:0a:1d:53:d7:d1:d6:fb:07:3d:70:7b:67:
                    ec:03:01:cf:73:ea:f4:ab:ca:2d:55:a2:2b:52:d5:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:F7:0D:9A:8F:00:66:97:DB:51:ED:CE:DE:E7:D1:3D:90:1D:04
            X509v3 Authority Key Identifier:
                keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6b:eb:73:50:7e:2e:f4:b9:08:25:19:d2:7b:4f:ee:e1:06:
         ea:b4:1f:d6:ff:40:8f:f8:78:bf:b9:d2:a5:b2:48:60:18:1f:
         d1:b1:d3:bf:cb:69:7e:86:60:7f:53:48:56:e7:4a:84:ec:a5:
         ff:ba:fe:00:c1:a4:72:77:6c:b2:f1:86:be:48:34:01:2b:b2:
         16:95:7b:3f:1b:41:56:55:bc:63:1f:ae:c7:f2:30:ca:48:5c:
         6d:89:d9:0c:e7:c9:15:dc:66:7c:9d:c5:0a:84:00:19:0e:a3:
         71:c4:61:00:97:80:fd:9b:74:fa:61:34:ab:5a:ae:31:0f:78:
         24:39:58:3a:90:cc:de:b9:3f:95:ac:ac:3a:31:3a:ef:28:b0:
         5f:1f:f6:55:e4:9e:cb:67:76:2e:96:06:fa:b6:89:09:ec:d5:
         ac:3e:20:b9:f4:04:ff:0e:40:ba:58:62:ff:2f:75:0e:2e:06:
         38:f3:fd:6b:f6:79:42:e1:36:d6:71:54:71:c2:5a:e0:19:11:
         93:f7:67:d5:fb:6b:8b:0d:ff:12:22:ec:23:bb:5a:4c:35:d4:
         6f:07:99:90:ae:f1:54:03:8a:dd:14:e2:f0:f3:01:e3:0d:e6:
         b8:f9:62:3c:dc:2e:3c:fd:e1:22:39:74:fb:fd:0b:4c:6a:ab:
         b6:a2:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:30 2024 by rpki-client on console-fra.rpki-client.org