Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File:                     QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier:          I6wcEfr4TxR0teijaIU5zVjRexycF/IMaN4wLNl6vcw=
Subject key identifier:   79:6E:5E:09:F5:00:B3:ED:76:3E:39:D8:23:43:37:F1:61:95:BA:83
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer:       /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial:       01936A7D82E71E52038DC1C6F19DC2D9DE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number:          0210
Signing time:             Tue 26 Nov 2024 22:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:30 +0000
Files and hashes:         1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: SO2FvOW6z4vyRqy43DwUT58Vn+cRnACSPR09phFhypo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:82:e7:1e:52:03:8d:c1:c6:f1:9d:c2:d9:de:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
        Validity
            Not Before: Nov 26 22:00:30 2024 GMT
            Not After : Nov 27 22:00:30 2024 GMT
        Subject: CN=796e5e09f500b3ed763e39d8234337f16195ba83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:2c:53:9c:7f:f4:b9:aa:29:29:b5:9f:38:
                    dd:fe:7f:d8:61:9c:8d:b0:53:cd:9b:c7:0a:4c:47:
                    54:73:e5:2f:f3:af:87:c9:f2:90:31:aa:c2:70:e5:
                    39:45:e1:38:70:3d:14:2e:2f:ee:da:2d:f8:52:2d:
                    0d:97:93:d2:e5:94:70:dd:c6:38:bd:d8:41:77:db:
                    fd:0c:35:44:41:7d:e7:8e:53:2d:03:53:92:00:78:
                    74:07:e9:6f:f6:ea:fa:5f:f8:db:47:56:33:ba:73:
                    de:b1:36:58:54:4d:c3:4d:2b:f2:29:8a:05:84:0f:
                    9c:46:f4:9b:9f:fb:aa:43:8b:0c:4f:b1:a2:dc:18:
                    fa:91:fe:28:73:7f:b0:bc:25:17:af:90:11:ba:07:
                    8f:25:d1:97:20:d8:f6:0c:88:20:f5:66:ee:e6:c1:
                    4b:7a:36:73:e2:7b:ab:1c:bd:8b:bb:bd:73:31:97:
                    9c:5a:54:a0:b4:d8:05:80:21:bf:ce:77:1d:26:de:
                    54:96:c3:f7:87:9e:93:97:63:ce:4a:c4:e9:e0:80:
                    37:ad:28:83:5f:0b:1f:03:f9:f9:f3:af:36:62:9f:
                    8f:65:b3:df:97:e0:83:2b:49:e2:e8:d3:47:e1:c9:
                    27:dc:d6:04:e7:85:a0:73:7d:97:f4:cb:02:d2:7b:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:5E:09:F5:00:B3:ED:76:3E:39:D8:23:43:37:F1:61:95:BA:83
            X509v3 Authority Key Identifier:
                keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:cf:f5:42:57:af:d2:f9:52:bf:2e:7b:72:31:b6:fa:62:
         17:73:33:0f:24:c6:74:1f:d4:ba:c1:5c:db:ce:8f:3c:be:17:
         46:6c:ed:7e:ab:96:53:64:b9:d8:53:26:39:a8:14:0c:7b:fd:
         56:d1:e8:6b:8b:3c:12:1c:2c:c5:fb:c8:be:56:9a:c9:80:37:
         78:03:ac:6a:b1:19:c9:92:5e:e9:3e:d8:d7:c7:9a:7b:60:fc:
         a5:d9:f3:2a:1c:28:b4:07:45:9f:64:c1:ef:c7:00:e0:93:4a:
         b0:c4:c3:e0:d4:e4:7d:f9:24:a3:4f:4c:44:b2:12:02:11:18:
         07:5a:15:4b:5a:45:b5:88:cf:6f:26:bc:1e:6c:e1:26:b9:57:
         20:bc:eb:67:47:6f:7e:d0:30:d7:73:0b:02:35:64:a2:e9:5a:
         27:97:bb:35:c4:80:ba:9c:51:f9:c0:c6:3c:50:0f:bb:7f:7a:
         bf:53:99:6e:07:1d:7b:1e:01:25:48:7d:e3:d8:b2:e0:da:40:
         87:3a:cb:3f:03:65:1b:15:ca:d8:ef:5a:24:c1:ec:cb:0c:0a:
         0c:11:01:19:85:cc:8f:9d:9b:51:4b:45:a6:de:8e:61:8b:ad:
         02:79:8a:48:3a:41:4b:74:b7:93:ce:08:7b:ca:0d:59:f7:f4:
         c9:66:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:59 2024 by rpki-client on console-fra.rpki-client.org