Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
File:                     RMmsJXmD7SmqZgqd1TEiTwmsS10.mft (raw, json)
Hash identifier:          1YER205AuArZZox+wlStKvlVYQkDzt+Iv/EZOOLmglA=
Subject key identifier:   E8:B9:00:49:71:3C:CE:E0:2C:57:1F:F6:02:B1:46:D3:A4:5A:06:E3
Authority key identifier: 44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
Certificate issuer:       /CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Certificate serial:       0192F1411FE98E893A84271E90EC27B493CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
Manifest number:          0116
Signing time:             Sun 03 Nov 2024 09:00:29 +0000
Manifest this update:     Sun 03 Nov 2024 09:00:29 +0000
Manifest next update:     Mon 04 Nov 2024 09:00:29 +0000
Files and hashes:         1: RMmsJXmD7SmqZgqd1TEiTwmsS10.crl (hash: LL3hEpguyOfVjvMCLH8KfGtsVWV4TE+XYX3s/BM9wRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f1:41:1f:e9:8e:89:3a:84:27:1e:90:ec:27:b4:93:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
        Validity
            Not Before: Nov  3 09:00:29 2024 GMT
            Not After : Nov  4 09:00:29 2024 GMT
        Subject: CN=e8b90049713ccee02c571ff602b146d3a45a06e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:0a:fb:4e:cc:04:83:f0:81:dd:e2:34:fc:
                    71:91:66:4c:de:aa:0e:28:43:fd:86:d1:ec:c9:20:
                    8e:26:dd:14:56:29:f6:3e:5e:23:53:39:3f:4f:b0:
                    b9:4e:25:6b:27:41:fc:06:47:76:4e:f2:e1:79:2b:
                    c5:f9:d4:f4:a1:08:85:91:b4:3e:7c:07:05:31:1a:
                    5f:0f:b7:87:36:39:41:66:8a:e8:16:41:29:5b:6c:
                    51:d3:de:f3:dc:b6:0d:49:bf:fb:90:cd:4c:6c:91:
                    f5:c4:e0:ca:0f:7d:a5:e4:39:94:95:61:69:ea:97:
                    59:43:e3:37:06:9b:c3:07:26:de:65:12:25:05:32:
                    3f:3d:c3:22:0a:4e:77:9d:aa:59:9c:02:f3:60:72:
                    8f:08:fc:11:7b:07:80:8c:3e:9e:1a:c0:d5:50:34:
                    53:0f:ed:81:6f:75:01:3e:c4:70:2b:0c:f5:b0:00:
                    2b:ad:45:64:e5:3a:87:72:69:b5:df:4e:08:e9:9d:
                    c1:86:78:72:2c:f4:bc:7a:a3:db:48:e8:ae:bd:12:
                    cf:cf:2b:ab:b3:71:0a:61:68:63:e3:12:f5:6d:f7:
                    89:5b:0e:6d:99:6e:57:54:ee:5d:fc:32:cf:66:c5:
                    dc:bb:c5:ac:5c:5a:4a:3c:bb:c2:19:d0:b7:55:81:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B9:00:49:71:3C:CE:E0:2C:57:1F:F6:02:B1:46:D3:A4:5A:06:E3
            X509v3 Authority Key Identifier:
                keyid:44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:ea:97:91:31:fe:8b:c3:14:58:02:19:79:e7:0d:7f:d0:
         51:46:a7:19:5c:d6:d2:09:1d:fc:22:24:29:83:43:0e:df:4a:
         5c:66:75:40:e5:b6:99:af:6d:a0:c8:b4:08:8c:52:26:13:e5:
         0e:19:95:6a:11:62:4e:8e:09:91:e4:ce:f8:4e:17:40:c4:1e:
         52:3e:80:13:b0:d0:49:fc:01:05:0f:07:4c:b9:3c:5b:05:06:
         97:35:4b:04:19:03:bb:29:70:df:e0:fc:8d:ae:d4:5f:e0:0f:
         11:76:d1:44:c8:c8:d2:81:b9:3e:cc:2f:9f:22:c9:e5:28:7a:
         56:c2:fb:0b:1e:96:74:12:92:f4:1c:49:4a:78:b5:1e:b8:74:
         48:69:cd:15:85:3c:16:f1:a4:9f:04:9c:b5:42:dd:39:ac:14:
         be:2e:64:14:ef:4a:44:d6:12:3a:49:54:4a:69:65:14:1e:ed:
         93:11:03:83:7e:ad:01:4e:cb:11:75:37:76:62:97:cc:c4:a6:
         b6:3d:2a:f4:a3:bf:cf:1d:3a:f4:05:a1:e4:a7:31:a2:3b:6f:
         ec:bc:d6:4b:6f:5b:ad:37:49:38:a1:9d:5e:cb:de:58:c4:5c:
         a3:ee:bd:b9:c6:f6:e5:70:c8:24:9c:7b:6d:fc:9f:e4:e9:db:
         85:7f:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:25:25 2024 by rpki-client on console-fra.rpki-client.org