Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File:                     V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier:          pjtBkZW2KQc6hONBnHwH/UJVVgKGcNuNBKAurCo3Hak=
Subject key identifier:   59:76:FF:10:0F:28:FD:DD:A7:9E:76:13:7E:A8:FC:A5:E2:79:8C:0C
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer:       /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial:       019368FCF0DB2364551C30020BAD252B0D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number:          71
Signing time:             Tue 26 Nov 2024 15:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:27 +0000
Files and hashes:         1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: YcnGN63j9cymkr7Lg4O2RWcYCcOyqV1L5Ac9FO1ODsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:f0:db:23:64:55:1c:30:02:0b:ad:25:2b:0d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
        Validity
            Not Before: Nov 26 15:00:27 2024 GMT
            Not After : Nov 27 15:00:27 2024 GMT
        Subject: CN=5976ff100f28fddda79e76137ea8fca5e2798c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:02:d4:55:45:ed:b4:83:5c:fa:a3:c7:bf:
                    c8:29:25:9c:84:5b:82:c5:1e:90:10:b3:8f:53:4b:
                    f0:71:5a:1f:3f:b3:fb:5a:95:16:2b:d5:f9:a3:5d:
                    ec:f3:3a:88:d3:6d:5d:2f:f9:36:9d:fe:71:a5:51:
                    e3:65:26:7a:bd:21:6b:c0:f6:70:6f:60:b3:c9:8e:
                    02:a3:45:da:e2:e3:a3:12:22:34:74:13:d3:56:4a:
                    4f:da:04:8f:3e:55:63:53:3f:9e:70:3e:44:01:e8:
                    cf:e5:77:57:2e:ce:9f:0a:ac:aa:cb:3f:5d:1c:20:
                    fe:15:ea:c9:1f:ed:dd:ea:19:2f:fe:f6:58:48:38:
                    51:96:47:9a:b4:5e:02:87:8a:5e:96:e3:0a:aa:37:
                    38:58:14:70:b6:ab:4c:b0:52:ed:db:e7:dc:bd:1b:
                    fe:24:af:64:78:7c:80:2c:c6:19:c0:50:d4:05:f4:
                    b6:0f:14:e5:34:c2:2a:d8:91:b7:e8:fa:29:d3:21:
                    84:0e:f4:5a:46:43:f3:61:e6:55:ea:46:05:84:8a:
                    25:77:aa:79:44:61:68:cc:a2:c3:86:76:11:20:5d:
                    72:6d:57:37:a1:3b:42:23:e1:ea:17:5b:05:36:0d:
                    d2:17:fb:18:a7:6e:1f:8b:71:ba:85:2a:a5:23:ff:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:76:FF:10:0F:28:FD:DD:A7:9E:76:13:7E:A8:FC:A5:E2:79:8C:0C
            X509v3 Authority Key Identifier:
                keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:46:6a:20:44:63:d5:04:bc:99:d5:14:15:0c:61:3f:40:
         6f:bb:da:b4:26:61:dd:a2:bc:00:5b:90:3b:3b:e8:3b:c2:49:
         77:72:00:a0:44:95:91:ff:fb:4a:8c:a3:81:58:69:25:4a:9b:
         3e:3d:0f:e4:6e:f3:28:a9:19:ec:21:80:47:0f:e1:13:02:5d:
         a5:05:75:4e:97:0d:61:7a:02:59:87:57:73:2c:43:b8:12:72:
         f7:8b:99:60:f3:79:5f:01:7e:6c:9c:12:85:cf:25:f4:42:e8:
         38:61:1a:24:01:e4:e1:ed:c2:83:11:22:e2:58:8a:47:61:83:
         6f:46:1c:7a:23:81:ad:13:e9:b2:5b:c2:72:c1:27:66:7e:8d:
         9e:1b:6c:fc:0d:80:24:24:0a:ee:b8:80:13:d6:b2:0e:36:08:
         b1:8d:3f:93:0a:74:02:1b:b6:98:d0:57:24:a0:bc:aa:7e:d0:
         63:9d:5e:86:7f:11:b7:ae:65:e0:39:7b:f3:09:32:db:ff:75:
         d0:11:cf:05:cd:8a:74:e9:c8:b5:af:68:30:c6:e1:6a:e9:e7:
         10:89:9a:22:2a:f6:39:9f:b8:93:2a:e7:e5:db:c9:ea:7c:34:
         91:83:50:dc:2a:c8:b1:a6:9b:36:60:82:6d:91:02:fc:01:e6:
         fd:bb:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:50 2024 by rpki-client on console-fra.rpki-client.org