Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
File:                     d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json)
Hash identifier:          YakLWaLsLwTXjVo1JifrE+ypgJjsoNxRHJR9/QjYlAE=
Subject key identifier:   9C:B3:D6:70:6C:4F:D1:15:7B:10:E4:91:D6:86:3B:96:DA:35:7E:2C
Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Certificate issuer:       /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Certificate serial:       019356BF7D0169FF0752F32B743CD3A70E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
Manifest number:          01DD
Signing time:             Sat 23 Nov 2024 02:00:09 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:09 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:09 +0000
Files and hashes:         1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: L0jiXlJrfhlgh5TzRLjozC5qufrdwoqp1slqnANz24o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:7d:01:69:ff:07:52:f3:2b:74:3c:d3:a7:0e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
        Validity
            Not Before: Nov 23 02:00:09 2024 GMT
            Not After : Nov 24 02:00:09 2024 GMT
        Subject: CN=9cb3d6706c4fd1157b10e491d6863b96da357e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:ab:a3:76:6e:61:76:41:d4:9c:e3:bb:7c:
                    03:03:bf:39:19:44:6f:87:f1:91:3d:69:ee:e2:8c:
                    c7:f8:27:04:4a:80:c6:85:9b:b7:09:96:d7:95:04:
                    e0:ad:9f:ac:d6:b9:8a:fc:2e:26:43:72:6d:92:59:
                    98:33:3d:da:59:b7:52:f0:42:1b:b4:8e:25:89:dc:
                    16:6d:5d:24:03:d5:08:c2:e7:86:57:3a:8c:d0:d2:
                    04:e8:12:4d:30:d8:3e:25:e9:25:5b:cd:17:e5:70:
                    18:e4:b4:9c:18:e8:b1:a9:6d:2b:89:28:4a:e9:da:
                    52:0a:98:dd:e3:98:0c:6b:c7:eb:1a:39:ec:53:06:
                    f3:d3:60:1f:2b:a1:fe:58:6d:ab:32:a6:46:18:88:
                    43:2f:78:12:83:68:fe:49:84:f6:06:77:4b:a0:84:
                    6e:cf:1b:35:5b:1e:a4:48:ba:79:3a:cc:b4:c8:07:
                    94:20:00:8c:3b:fb:fa:e8:af:26:75:ad:0b:26:1e:
                    47:2c:ea:44:b0:cb:53:42:3a:9b:9b:41:9e:0c:c9:
                    4b:d5:2e:33:fd:2d:cb:e5:71:51:de:15:91:a3:61:
                    9b:e2:f2:60:42:a6:e4:f7:65:52:10:57:ce:60:29:
                    50:a6:8c:1a:ef:fd:d1:f9:25:40:01:15:72:51:c8:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:D6:70:6C:4F:D1:15:7B:10:E4:91:D6:86:3B:96:DA:35:7E:2C
            X509v3 Authority Key Identifier:
                keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:56:af:7a:d5:93:63:33:1b:80:37:bf:1e:43:1c:c6:6d:ec:
         e6:ae:25:f9:55:f2:6b:99:90:1d:b0:18:77:f6:a7:9c:59:32:
         bb:ce:64:5d:91:0d:f4:09:72:c3:e2:4c:90:6f:2e:61:59:95:
         f7:ce:4c:fa:2c:fe:63:f5:22:1d:d0:40:c4:92:a4:05:f0:76:
         25:6c:64:cc:43:bd:da:b7:f3:3a:0d:3e:d8:2c:e7:ca:71:c6:
         a7:c8:26:b6:32:af:c6:ac:7c:65:72:06:17:4f:23:8c:8a:8b:
         3e:d9:c7:5e:46:37:a0:e8:a8:7e:17:c4:11:fc:7d:0b:e7:76:
         65:0a:b1:f2:af:a1:ed:61:db:28:28:c8:09:16:67:0b:76:cd:
         9e:f0:84:db:96:ae:b2:05:10:1e:9c:2a:89:df:70:5e:df:92:
         1b:99:db:98:20:24:57:ba:da:e3:45:87:15:78:e6:0d:a2:ff:
         eb:bf:e5:9d:1e:b1:cd:af:95:d0:f3:5a:71:aa:92:22:f7:b6:
         ca:21:9f:b9:c2:ce:09:50:ba:d8:4d:1d:96:c0:32:7f:79:89:
         c7:43:dc:79:45:33:ad:b7:67:7c:05:e3:d6:c6:ba:44:13:df:
         1d:3f:6e:44:62:53:6e:33:16:b8:3e:93:6c:7c:f2:67:61:28:
         37:ff:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:29 2024 by rpki-client on console-ams.rpki-client.org