Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
File:                     d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft (raw, json)
Hash identifier:          GtSh0BbPDQ4Af6DE04xVfYIXFXUYky9HRZR8UxnJSqw=
Subject key identifier:   11:A0:C2:02:4B:E7:7A:C5:96:88:A7:E6:B7:FB:44:D4:7A:F5:13:E1
Authority key identifier: 77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5
Certificate issuer:       /CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
Certificate serial:       0191F934787EA41468D85A6C9E6318C34AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
Manifest number:          0128
Signing time:             Mon 16 Sep 2024 05:00:51 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:51 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:51 +0000
Files and hashes:         1: d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl (hash: LifryE6Kxl6KjOBliAU2gX8kR5KsCQcqq0WYha9UkvE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:78:7e:a4:14:68:d8:5a:6c:9e:63:18:c3:4a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f49af84c0b8a09a7b3b4f1f27144eb25910fb5
        Validity
            Not Before: Sep 16 05:00:51 2024 GMT
            Not After : Sep 17 05:00:51 2024 GMT
        Subject: CN=11a0c2024be77ac59688a7e6b7fb44d47af513e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:3d:bb:be:2a:1a:99:b5:fd:82:c5:7b:d1:
                    96:5c:a8:39:c8:16:f1:7e:7d:92:14:c7:06:fc:8a:
                    ef:ab:d6:7a:b2:61:ac:da:0a:1a:f2:9d:e9:45:0b:
                    1c:76:c8:23:20:63:3a:de:9d:4b:c3:6d:14:10:73:
                    05:53:0d:58:09:68:e3:b1:1c:ff:6f:22:97:82:56:
                    42:ec:43:50:ed:25:1d:e3:b9:53:d0:b7:5a:26:6c:
                    9c:78:d6:99:c0:f8:84:82:0e:5a:64:6e:49:ff:6a:
                    34:7e:17:35:6e:8f:65:66:90:fb:51:4e:49:bc:f2:
                    1e:7b:08:71:b7:2f:a8:22:72:11:3a:be:81:e4:4d:
                    6e:c8:40:58:1e:8a:5f:f2:80:cb:a2:40:c2:43:07:
                    10:d4:f7:2a:63:f9:2d:bb:b1:af:e8:74:74:5c:0a:
                    8c:fa:6f:de:02:fd:7b:b5:67:bc:5b:d4:c8:65:e4:
                    83:f3:3c:42:48:6a:1c:17:25:97:7d:44:16:2a:96:
                    40:80:2a:18:ab:0a:d6:2a:64:31:fb:46:22:85:4a:
                    5a:a5:b6:bb:96:48:96:17:5e:ed:a7:ab:29:78:f3:
                    7b:bd:90:09:50:01:eb:31:40:e8:d7:dd:10:c2:41:
                    b2:28:fb:18:44:6a:80:54:fa:34:6b:8c:87:5f:39:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A0:C2:02:4B:E7:7A:C5:96:88:A7:E6:B7:FB:44:D4:7A:F5:13:E1
            X509v3 Authority Key Identifier:
                keyid:77:F4:9A:F8:4C:0B:8A:09:A7:B3:B4:F1:F2:71:44:EB:25:91:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Sa-EwLigmns7Tx8nFE6yWRD7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2644a0-3d8f-4ebd-8588-356c411b430e/1/d_Sa-EwLigmns7Tx8nFE6yWRD7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:f1:9a:c3:86:19:9d:a6:a7:7d:df:e6:40:63:11:4d:5d:
         e3:0a:9d:00:83:de:24:45:5b:69:b0:ed:39:47:1c:3f:61:16:
         c1:98:c7:5f:5f:ea:cd:86:6e:fc:37:24:01:df:cd:42:d3:40:
         ad:c1:7c:2a:bc:fe:38:f9:21:d2:ee:d7:e9:52:e7:8d:e8:2f:
         8c:8c:90:e2:09:bc:f0:9e:7b:4c:b1:86:66:17:d8:5b:73:dd:
         67:a5:80:31:b3:34:5c:52:da:94:0a:93:b7:ba:35:d0:ed:78:
         2a:40:90:2b:ff:d9:9b:4b:83:ae:07:68:f0:68:b4:5d:e8:ab:
         62:fe:09:0e:85:b0:8e:0c:0c:ae:35:a4:f8:5d:bd:df:ba:b4:
         ce:3d:28:9a:3b:e3:aa:0b:9b:70:f5:4e:a7:50:2a:c5:a4:5b:
         90:50:f7:b6:24:fa:03:33:cb:99:37:78:e2:ff:06:7c:07:43:
         68:75:45:c6:63:33:12:83:d7:24:69:c5:30:d8:86:ef:df:e8:
         5a:12:1a:b5:43:87:1d:bf:35:43:70:e6:f1:d5:13:97:8b:f4:
         7a:3e:9e:00:f5:f6:b5:9a:f0:c7:f8:a5:37:a1:e2:ce:bb:19:
         14:a5:8a:5e:db:cc:1b:79:6b:f6:6d:e3:61:af:4e:7c:e6:61:
         5a:39:43:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5NHh+pBRo2FpsnmMYw0qkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjQ5YWY4NGMwYjhhMDlhN2IzYjRmMWYyNzE0NGViMjU5
MTBmYjUwHhcNMjQwOTE2MDUwMDUxWhcNMjQwOTE3MDUwMDUxWjAzMTEwLwYDVQQD
EygxMWEwYzIwMjRiZTc3YWM1OTY4OGE3ZTZiN2ZiNDRkNDdhZjUxM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdE9u74qGpm1/YLFe9GWXKg5yBbx
fn2SFMcG/Irvq9Z6smGs2goa8p3pRQscdsgjIGM63p1Lw20UEHMFUw1YCWjjsRz/
byKXglZC7ENQ7SUd47lT0LdaJmyceNaZwPiEgg5aZG5J/2o0fhc1bo9lZpD7UU5J
vPIeewhxty+oInIROr6B5E1uyEBYHopf8oDLokDCQwcQ1PcqY/ktu7Gv6HR0XAqM
+m/eAv17tWe8W9TIZeSD8zxCSGocFyWXfUQWKpZAgCoYqwrWKmQx+0YihUpapba7
lkiWF17tp6spePN7vZAJUAHrMUDo190QwkGyKPsYRGqAVPo0a4yHXzkOEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGgwgJL53rFloin5rf7RNR69RPhMB8GA1UdIwQY
MBaAFHf0mvhMC4oJp7O08fJxROslkQ+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgt
MzU2YzQxMWI0MzBlLzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjQ0YTAtM2Q4Zi00ZWJkLTg1ODgtMzU2YzQxMWI0MzBl
LzEvZF9TYS1Fd0xpZ21uczdUeDhuRkU2eVdSRDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgHxmsOG
GZ2mp33f5kBjEU1d4wqdAIPeJEVbabDtOUccP2EWwZjHX1/qzYZu/DckAd/NQtNA
rcF8Krz+OPkh0u7X6VLnjegvjIyQ4gm88J57TLGGZhfYW3PdZ6WAMbM0XFLalAqT
t7o10O14KkCQK//Zm0uDrgdo8Gi0XeirYv4JDoWwjgwMrjWk+F2937q0zj0omjvj
qgubcPVOp1AqxaRbkFD3tiT6AzPLmTd44v8GfAdDaHVFxmMzEoPXJGnFMNiG79/o
WhIatUOHHb81Q3Dm8dUTl4v0ej6eAPX2tZrwx/ilN6HizrsZFKWKXtvMG3lr9m3j
Ya9OfOZhWjlDRg==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:18:39 2024 by rpki-client on console-fra.rpki-client.org