Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
File:                     C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json)
Hash identifier:          Uh6EHbZQrbnz/f9WQGJxsd+/Azsb0iE6SfnPZuou/Wc=
Subject key identifier:   FC:F2:10:0E:2C:F6:67:BD:0E:71:E2:B4:4F:22:0F:1B:EB:67:BF:04
Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90
Certificate issuer:       /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
Certificate serial:       01940647AAC5523187F025CD1FDC79A55EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 04:02:27 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:27 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:27 +0000
Files and hashes:         1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: VayJ3PkQ8Az28Nj2DAa/6e5RBgiVk1sUN8h2QCzEBJ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:aa:c5:52:31:87:f0:25:cd:1f:dc:79:a5:5e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90
        Validity
            Not Before: Dec 27 04:02:27 2024 GMT
            Not After : Dec 28 04:02:27 2024 GMT
        Subject: CN=fcf2100e2cf667bd0e71e2b44f220f1beb67bf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:45:e6:8f:6d:78:1f:0f:d0:ec:8b:c2:08:
                    34:db:d0:cb:80:38:98:98:f1:0e:14:ab:18:22:97:
                    db:d0:62:01:28:ee:f1:76:8e:cd:64:af:65:9a:54:
                    32:32:63:37:64:ab:6d:2c:de:36:51:76:d2:98:64:
                    e5:23:77:bc:eb:70:27:0c:b6:52:02:c2:ca:17:ee:
                    af:1e:aa:a6:ff:4b:61:19:5a:24:96:30:a3:d1:71:
                    37:9d:7a:1e:a3:20:3e:7d:42:df:08:bc:1a:89:cf:
                    98:04:50:29:f0:39:c7:5f:6d:da:91:ff:68:bf:3d:
                    1e:49:e3:2c:e9:ff:d0:ee:b7:70:2d:be:bb:81:29:
                    05:3b:d4:50:26:ac:42:bd:dd:ca:76:19:51:8b:0f:
                    ca:4e:e2:00:c4:55:d2:30:64:ed:78:76:72:04:7b:
                    f5:0e:af:05:bc:09:f8:6e:f8:ea:bb:1a:aa:06:b2:
                    a4:56:d4:75:ea:71:7d:de:1f:2f:2b:a7:06:f6:4b:
                    98:64:9d:ea:98:db:bf:7f:9c:21:7b:70:e0:3c:41:
                    ee:a5:07:79:93:d4:75:11:7e:a4:62:69:64:04:b9:
                    83:97:08:ce:f5:91:4e:9a:9d:99:95:9a:c4:0b:5a:
                    b1:37:7a:c5:ef:19:4c:f6:6e:ed:8f:c6:49:73:a9:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F2:10:0E:2C:F6:67:BD:0E:71:E2:B4:4F:22:0F:1B:EB:67:BF:04
            X509v3 Authority Key Identifier:
                keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:f0:c0:cf:f5:72:d7:f3:d0:01:42:2b:04:82:4b:c3:b7:
         d4:fd:13:6d:91:c7:61:5d:be:4c:68:e8:58:1f:94:92:e3:1d:
         ec:8d:3e:b1:9e:60:6b:28:1c:2f:02:e9:e4:d1:82:a7:84:e6:
         ce:24:c3:88:b1:42:80:24:f2:3c:e7:f5:84:bd:5f:6e:37:63:
         ea:ba:02:20:a9:e8:65:69:c0:e6:ab:5b:3f:bb:5a:9c:67:67:
         ae:94:f8:f6:a1:c1:c2:5a:7f:ec:4c:df:a7:a8:52:23:8e:3d:
         3f:79:48:89:7c:66:6f:e3:95:58:ce:81:40:6a:f0:9d:3f:5b:
         b7:11:13:3a:79:de:01:92:b7:02:18:99:9c:3a:88:e6:56:37:
         fa:6b:a4:c7:5b:7e:5e:4d:22:f0:f3:89:51:29:85:8f:b2:06:
         76:ff:e6:4e:27:a4:de:ef:f1:eb:de:5c:bc:30:50:b1:9e:0c:
         bd:4f:0b:04:2f:65:98:47:38:56:2d:3c:2a:48:fb:f8:bd:00:
         c0:53:b5:c2:f8:20:3c:89:f6:72:03:98:b6:10:a8:cc:28:6f:
         98:3b:a4:78:0b:fc:0c:c9:29:64:e5:e8:e1:2c:83:c2:c3:ff:
         b7:f0:1a:86:f0:6a:1a:05:c4:6c:61:da:fd:a5:7a:2b:ce:42:
         84:31:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:54:26 2024 by rpki-client on console-fra.rpki-client.org