Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft
File:                     1jJTG7z24ATYT681_tawK30zVAs.mft (raw, json)
Hash identifier:          x8okbQ6UbgB3eUiwzbtpND2zXQI3AQjDOO3QFqpSMpU=
Subject key identifier:   CA:2F:FD:96:FD:8B:7B:A5:62:14:D2:65:0F:82:3D:A0:BE:40:2E:E9
Authority key identifier: D6:32:53:1B:BC:F6:E0:04:D8:4F:AF:35:FE:D6:B0:2B:7D:33:54:0B
Certificate issuer:       /CN=d632531bbcf6e004d84faf35fed6b02b7d33540b
Certificate serial:       0193568A2D73ECBF5B1EB75D38B55CF49E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jJTG7z24ATYT681_tawK30zVAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft
Manifest number:          05BE
Signing time:             Sat 23 Nov 2024 01:01:56 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:56 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:56 +0000
Files and hashes:         1: 1jJTG7z24ATYT681_tawK30zVAs.crl (hash: p43EVhD/3anMtn+UL0jNj/sBDcYBwcZqniBo8M0cX9Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jJTG7z24ATYT681_tawK30zVAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:2d:73:ec:bf:5b:1e:b7:5d:38:b5:5c:f4:9e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d632531bbcf6e004d84faf35fed6b02b7d33540b
        Validity
            Not Before: Nov 23 01:01:56 2024 GMT
            Not After : Nov 24 01:01:56 2024 GMT
        Subject: CN=ca2ffd96fd8b7ba56214d2650f823da0be402ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:50:48:40:7b:b8:69:2e:2e:01:f6:d6:5e:
                    54:24:d0:97:f4:18:df:b0:b3:54:6e:8e:b6:2b:74:
                    31:22:03:23:b9:55:1d:2c:ba:84:fc:61:e0:2a:22:
                    e5:b9:32:9b:8c:38:0f:2e:00:1b:de:cd:c9:ea:7d:
                    91:32:b1:5f:e2:4a:30:b8:f7:f3:20:92:a2:d5:09:
                    d2:7d:d6:29:f7:be:b3:e4:b4:20:ca:68:d7:f4:fc:
                    e4:1f:e0:18:2b:1c:40:26:2d:34:ca:df:f5:05:40:
                    15:35:15:56:9d:d3:c9:82:19:6d:6f:19:a6:4e:e2:
                    ee:d1:08:81:f3:5b:7b:8a:d7:c4:e2:dc:c6:5f:58:
                    da:a8:88:ad:2f:4f:e2:94:a3:8d:82:20:32:d4:48:
                    8a:96:19:72:f8:17:75:62:eb:9c:8d:f5:e7:cb:f2:
                    31:8a:a7:1b:d4:6a:65:fa:d7:36:86:31:7d:72:47:
                    93:ec:dc:c9:e4:60:d5:73:86:e3:7e:72:e9:94:40:
                    65:16:cf:1e:50:b0:de:89:b2:6e:36:57:56:d5:55:
                    16:7a:6f:5c:5c:1b:4e:de:ff:24:ee:86:a2:03:1c:
                    c8:20:c3:84:15:fd:4a:30:cc:4b:8c:c2:72:cf:96:
                    7e:8e:01:9e:c8:f3:e2:e3:30:4a:19:ad:17:03:27:
                    10:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2F:FD:96:FD:8B:7B:A5:62:14:D2:65:0F:82:3D:A0:BE:40:2E:E9
            X509v3 Authority Key Identifier:
                keyid:D6:32:53:1B:BC:F6:E0:04:D8:4F:AF:35:FE:D6:B0:2B:7D:33:54:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jJTG7z24ATYT681_tawK30zVAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:56:45:29:a0:86:67:57:69:79:05:36:1d:44:c2:1d:5f:de:
         00:8a:4b:03:4a:6d:56:2b:81:88:31:64:f9:f2:25:21:22:08:
         dd:c9:8f:e5:94:6d:80:d3:c6:7b:f6:54:bb:02:b3:01:b8:c3:
         50:b1:31:f5:6c:db:b0:cc:eb:94:bb:6e:1d:64:b4:c8:7f:00:
         8d:a4:cd:4a:ad:29:70:85:b0:ed:1e:07:25:0c:4c:84:33:66:
         a5:c1:2a:d6:e9:d9:85:48:38:81:4a:12:bb:78:ba:5b:80:a1:
         d1:58:79:a7:29:55:c9:2d:a7:c0:d5:e8:d9:38:4e:98:f5:9f:
         8e:9c:6c:e2:fb:ed:0a:1c:f8:84:7f:63:8f:f2:b2:7d:3d:05:
         00:ec:8e:10:32:b0:fa:73:0c:b9:d6:de:61:9f:6c:66:7d:a3:
         21:91:ee:8c:fb:0c:f2:5a:34:44:2b:c2:0b:3b:3d:c9:22:83:
         ac:a4:80:71:c4:3f:84:52:6b:c0:49:d4:e1:85:e2:75:78:c7:
         4d:f8:4c:a8:a8:17:de:b7:93:61:81:60:7c:a4:96:55:e6:76:
         fd:2e:8c:ee:8a:f9:27:80:cc:d0:36:e3:af:b9:2c:9c:b4:b8:
         0f:ef:09:35:6c:e9:3c:79:d5:f0:54:e9:ea:29:4e:57:fa:78:
         8c:25:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:25 2024 by rpki-client on console-ams.rpki-client.org