Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File:                     vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier:          u2fDxjWuEQN9Gdj+C48IyjWAWOWXWm2JgWq+uwB/IE8=
Subject key identifier:   B1:B2:80:69:6F:A9:90:92:B5:FD:AD:27:A0:49:A3:D1:D6:EC:41:0B
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer:       /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial:       019369D8BD02B4255AB3FEB692CFCE824B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number:          0613
Signing time:             Tue 26 Nov 2024 19:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:31 +0000
Files and hashes:         1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: HUKZuYOyZR+5XZWPcnTLfnueuNNHry3pA+51pwcOsiQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:bd:02:b4:25:5a:b3:fe:b6:92:cf:ce:82:4b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
        Validity
            Not Before: Nov 26 19:00:31 2024 GMT
            Not After : Nov 27 19:00:31 2024 GMT
        Subject: CN=b1b280696fa99092b5fdad27a049a3d1d6ec410b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:85:2f:c8:d6:33:00:9e:fa:a6:c1:d3:bd:
                    ae:08:9e:a5:5b:27:a3:9f:39:b1:b1:cd:32:34:9f:
                    6c:65:9c:f6:62:54:08:b2:c1:d2:a7:0e:78:3e:77:
                    5a:a1:32:64:28:ac:d1:4a:0f:3f:54:95:f1:a2:7c:
                    16:02:59:7e:f3:fd:ec:99:0a:fb:33:78:dc:c6:85:
                    17:21:d9:3e:06:91:81:3c:72:26:d9:4d:32:14:89:
                    9e:40:f2:79:a7:0f:24:05:f6:af:2b:50:6a:b4:c6:
                    c4:20:32:42:63:da:f8:29:b5:d6:43:f4:7a:bc:af:
                    aa:fb:8d:b3:aa:c3:bf:8d:ac:9e:20:ca:5e:d5:c2:
                    76:28:03:0a:22:ca:e6:a0:42:26:e2:9f:2a:df:56:
                    30:3c:8c:2c:dd:36:59:d1:92:75:a3:ef:c8:48:36:
                    aa:99:13:c4:02:28:cd:82:65:8e:4b:32:4f:83:08:
                    d9:d0:8a:b7:50:5b:e4:8e:ea:8a:d9:cc:cf:da:f4:
                    62:8c:42:1b:48:be:95:c8:72:03:dc:d4:95:60:3a:
                    b9:55:ce:6d:f7:f8:c4:8b:74:4f:59:34:97:64:a2:
                    ed:c9:78:f3:3e:89:1a:57:b4:0f:80:f0:9e:c7:80:
                    a6:f9:aa:f9:29:5d:a7:01:55:02:9e:5d:4b:98:1a:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B2:80:69:6F:A9:90:92:B5:FD:AD:27:A0:49:A3:D1:D6:EC:41:0B
            X509v3 Authority Key Identifier:
                keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:49:48:ad:d6:bf:38:07:9c:fc:4b:95:2c:be:f3:ce:33:23:
         e8:46:8e:3a:0c:f6:c1:93:e5:d6:b1:d2:6c:0c:e4:d1:e8:b2:
         f3:40:32:b8:8a:e0:95:0e:8d:eb:2b:0e:ac:1e:50:cb:3b:82:
         5b:6d:17:4c:b1:f9:6a:56:f0:3f:7f:b7:f7:f3:a6:07:33:85:
         11:13:b4:63:c9:94:52:24:f3:ea:03:0a:d5:f2:16:ee:79:88:
         53:e1:21:b7:2b:36:53:3d:9a:94:e3:2d:9c:61:3e:e7:ef:dc:
         cc:ca:bb:0b:64:20:55:c0:d2:16:b0:24:63:60:e4:53:98:8c:
         6c:ed:92:f0:53:22:b9:4b:a8:c1:5d:83:62:a3:98:27:99:4a:
         6f:49:3c:4d:f3:24:e5:3b:ae:b9:74:6d:06:fb:23:f7:a9:43:
         c1:3d:bc:cd:9a:ef:4f:e9:b3:83:80:8f:76:2b:1a:be:5d:01:
         33:ab:2f:04:1e:ac:46:81:0f:53:8b:62:1b:b3:63:48:e8:7e:
         06:61:92:0f:5d:cd:4c:9b:5a:d7:68:6c:05:4c:2a:18:38:f8:
         06:59:e6:fd:f3:15:de:dd:bb:fb:74:47:68:86:29:25:27:fa:
         f3:f5:04:3f:27:93:9b:7d:57:54:42:b5:d2:d4:38:7d:d7:ed:
         2c:53:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:07 2024 by rpki-client on console-fra.rpki-client.org