Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File:                     B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier:          ygwUdL9A+ftKoS5PrzWOJDmekkZLt3jS2VjQGq/2mgk=
Subject key identifier:   9C:F0:1C:02:37:27:83:1B:69:7F:F0:59:6B:68:03:9E:5D:4A:05:66
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer:       /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial:       019405A16F3EA9E6CF7A76A78E2E00D42936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number:          13C7
Signing time:             Fri 27 Dec 2024 01:00:53 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:53 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:53 +0000
Files and hashes:         1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: zBEsGd4saGMtcf64A/QqOAXkLE1qWx7THWejuUScdoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:6f:3e:a9:e6:cf:7a:76:a7:8e:2e:00:d4:29:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
        Validity
            Not Before: Dec 27 01:00:53 2024 GMT
            Not After : Dec 28 01:00:53 2024 GMT
        Subject: CN=9cf01c023727831b697ff0596b68039e5d4a0566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:47:dc:7b:b0:7a:a2:0b:fa:94:34:4b:f6:
                    d4:ad:e8:f7:70:09:5c:26:ed:14:ad:91:f6:be:1f:
                    4b:60:fb:79:12:f2:67:be:e2:04:42:5e:92:fc:11:
                    8a:12:ab:47:c2:00:04:93:81:78:31:28:e0:1e:b9:
                    3f:f2:e9:0d:04:69:cc:8d:58:50:9e:67:0d:f0:50:
                    6f:0e:75:5c:2e:d2:2c:94:75:79:b1:6e:e1:3f:3e:
                    a8:bf:78:bb:20:d0:9c:f5:41:24:39:3a:10:0d:e0:
                    df:5f:36:d5:c3:3f:ed:be:c2:fa:85:df:f9:81:72:
                    68:b3:23:bc:c9:3d:0f:80:04:df:75:e4:d2:da:e2:
                    aa:12:f1:09:7d:04:89:a5:d6:4d:b9:f4:c3:c1:4e:
                    17:22:0b:ef:e8:cf:a3:56:50:15:2b:b6:5d:cc:f5:
                    e2:64:e4:c1:0d:72:09:3d:22:54:36:3a:b2:bd:07:
                    ca:46:83:c6:24:4a:41:12:23:52:73:8f:3f:cf:f1:
                    23:6d:b8:cd:b5:d3:61:7b:d2:0f:3f:e4:92:c9:d3:
                    d8:f6:a9:e7:d0:cf:b5:63:a1:45:c6:9a:59:78:26:
                    d4:76:2c:85:67:5f:55:c7:31:52:20:b0:41:fb:3b:
                    52:bf:e6:65:22:79:fb:22:8b:4e:eb:d8:92:c0:8c:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:1C:02:37:27:83:1B:69:7F:F0:59:6B:68:03:9E:5D:4A:05:66
            X509v3 Authority Key Identifier:
                keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8b:76:2b:b0:fa:9e:e7:13:7d:f6:f3:54:dd:2d:23:e8:b5:
         a7:79:61:30:c3:62:f9:bc:79:b5:f0:e2:d0:fd:40:c7:8e:86:
         9f:f7:ca:75:87:e9:be:3f:e0:e6:26:e3:9c:63:c4:12:6d:34:
         8e:62:3e:31:15:47:24:cf:41:5a:3c:23:df:e4:ee:fd:a7:d8:
         8a:40:da:45:67:d3:79:3b:13:4b:4b:e8:73:ad:f0:e7:19:2b:
         fb:e6:9a:d7:81:f9:0c:9a:f8:0d:52:ab:54:ed:5f:fd:5b:90:
         bf:af:96:64:e2:3f:72:1d:55:67:c5:96:5b:3b:c0:c9:f0:d7:
         0b:67:d4:02:69:d8:c9:74:3d:99:70:6f:a9:72:8e:96:cb:46:
         31:97:e6:9c:c2:fd:76:f9:bb:21:f2:a0:07:62:b3:cb:ce:53:
         d9:f2:a6:f3:af:da:bb:9f:57:8a:8e:a6:74:ce:68:03:d5:53:
         2e:1c:b2:a0:49:cc:3d:b6:43:a4:dc:7c:6d:9b:7b:74:09:df:
         a8:be:33:20:97:c7:a8:07:6a:8f:db:81:f8:e1:f6:17:2f:dd:
         a2:50:6a:75:de:4d:9a:c5:be:bf:07:35:58:ed:8d:ec:50:26:
         92:2f:23:02:27:87:2f:19:7a:5d:c8:55:41:46:c6:11:ba:80:
         82:bf:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:51 2024 by rpki-client on console-ams.rpki-client.org