Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File:                     IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier:          GUzFAWuisp6AW99fCEgR/tOKRPKIYOchyP1CyngaNcM=
Subject key identifier:   43:EC:53:4B:59:FE:15:80:DD:93:A2:45:D2:5F:74:DB:FC:16:DB:CE
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer:       /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial:       019356F6BCE7D91BACCBA894410798855985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number:          02DD
Signing time:             Sat 23 Nov 2024 03:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:30 +0000
Files and hashes:         1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: 601I/7Z8MkDpa+EqobeBq5zeV2xAlIJJsdaXG2tjUl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:bc:e7:d9:1b:ac:cb:a8:94:41:07:98:85:59:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
        Validity
            Not Before: Nov 23 03:00:30 2024 GMT
            Not After : Nov 24 03:00:30 2024 GMT
        Subject: CN=43ec534b59fe1580dd93a245d25f74dbfc16dbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:67:72:62:78:b4:d1:52:7f:09:42:88:e4:
                    45:eb:27:f9:ca:a9:5f:12:e3:a1:f1:f9:11:d8:77:
                    4d:52:ac:70:c4:4c:de:57:84:13:cc:49:4b:66:7d:
                    93:b6:54:51:98:2b:08:4e:7d:e4:52:47:6a:2a:e9:
                    3c:ca:c3:48:e8:27:5a:03:09:11:40:e3:3b:1f:f9:
                    d7:dc:ce:b2:a6:bd:16:61:17:d8:f8:a4:1d:f6:57:
                    51:e8:9f:7b:50:b6:7e:cc:a1:0c:9e:88:55:bc:3c:
                    e5:7b:1d:dd:a3:07:73:9d:d6:8d:b0:f0:eb:9e:6a:
                    7e:5a:e9:bb:f2:01:40:b5:28:5d:ca:0c:da:b9:08:
                    4f:79:fd:f0:f1:45:e9:d8:99:dc:fe:da:cc:af:e7:
                    73:c4:05:42:d2:0e:e7:a5:92:14:ed:cb:21:97:a7:
                    47:e5:c1:5a:23:fd:7d:b7:0f:24:a5:b9:de:54:8e:
                    5d:e2:e5:e5:2a:dd:ad:93:b4:f9:0b:fe:11:fe:a6:
                    7b:21:32:c4:33:ab:bd:04:13:02:3b:eb:28:f0:c1:
                    44:89:c3:76:6b:54:1b:8a:37:0b:5d:fc:62:5d:f9:
                    2c:7b:92:97:51:8c:b3:bb:da:da:99:f0:3a:07:6a:
                    6d:c9:fb:53:22:9c:41:ee:2e:53:21:36:55:61:d5:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:53:4B:59:FE:15:80:DD:93:A2:45:D2:5F:74:DB:FC:16:DB:CE
            X509v3 Authority Key Identifier:
                keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:de:e5:67:a5:f5:fc:cf:7e:0b:f8:45:29:16:76:34:b1:
         67:a2:a6:33:18:35:6d:2e:3b:f1:6c:22:0a:53:5d:15:85:00:
         f6:a1:3f:3c:56:9c:19:9d:74:47:31:0a:d2:8d:42:83:40:71:
         ec:a3:b3:79:92:45:19:b5:9a:78:8a:b0:97:33:1c:3c:4a:11:
         49:fa:c8:93:97:8b:36:15:d4:4b:11:aa:47:50:ed:2a:9a:12:
         c9:b5:a4:e0:fe:8a:11:54:1a:8b:f9:89:52:34:9c:28:e9:21:
         9f:a6:d6:33:f8:4f:da:1b:e5:09:7e:fe:79:03:5c:70:a3:0b:
         2e:e9:13:4b:1a:d7:ea:2d:f9:32:bc:a0:ad:24:f7:e7:8f:7c:
         d6:67:6c:1b:41:c7:6e:34:e2:a8:db:aa:01:5c:2d:aa:30:58:
         bb:38:e4:15:05:1a:63:1c:ae:b9:02:58:f1:61:2e:76:f1:d6:
         2b:4a:0e:6a:ec:f7:f9:e1:9a:13:be:5d:76:1f:bf:51:81:4b:
         b8:86:91:02:c3:37:ef:df:40:96:ad:c6:6a:6f:34:2d:54:88:
         d7:20:9f:0a:77:36:dd:ed:36:64:63:d5:71:50:e8:93:68:88:
         81:9b:e8:36:87:bf:29:59:d4:97:6f:50:d8:6d:91:56:fe:0e:
         6b:4c:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:55 2024 by rpki-client on console-fra.rpki-client.org