Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File:                     JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier:          ZoG5AjP6+/IbLSNah7XLFarHFGgu2CSdQ27qVDTiDgI=
Subject key identifier:   22:F4:7F:F7:12:98:61:C8:0D:C6:2D:3B:96:2E:06:FB:1C:6A:6F:DB
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer:       /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial:       0193572DA77BD9EB604E0478EAD0FC1274A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number:          0CED
Signing time:             Sat 23 Nov 2024 04:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:29 +0000
Files and hashes:         1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: A+h6S/GwLO4CPSSiKiRnVhoEfibpNm6axoY9YtjrRXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a7:7b:d9:eb:60:4e:04:78:ea:d0:fc:12:74:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
        Validity
            Not Before: Nov 23 04:00:29 2024 GMT
            Not After : Nov 24 04:00:29 2024 GMT
        Subject: CN=22f47ff7129861c80dc62d3b962e06fb1c6a6fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:78:21:11:3d:ef:d1:96:4d:4f:53:b5:ad:
                    55:56:64:a2:cc:b6:b8:2c:83:d2:fe:e5:1a:aa:99:
                    74:5b:17:b0:e1:d9:88:0a:bc:95:b5:9c:17:9d:32:
                    5f:51:d5:a9:1f:44:6b:d5:6f:80:c9:22:63:63:a6:
                    13:71:44:76:28:7d:fb:17:a8:81:07:8a:f6:76:f9:
                    2f:32:49:b3:c3:41:98:ae:a0:3e:7c:07:a0:cb:b9:
                    bd:12:39:a2:0c:b4:57:4b:39:10:6a:a3:cd:59:a0:
                    ee:76:40:04:1a:e6:e9:03:34:67:b5:41:12:ba:ab:
                    8a:b7:c5:bb:0c:78:74:ae:02:e1:62:68:30:fe:d5:
                    fb:8f:e5:a3:39:93:e0:80:2f:04:ac:52:76:3c:66:
                    56:e4:75:82:de:74:3d:cf:dc:1c:31:67:0d:d6:95:
                    c7:b2:a6:38:ee:b2:9a:1c:1d:99:e2:59:64:4f:bb:
                    46:99:e5:e2:0f:b6:0f:4c:26:dc:76:5f:c1:9d:3c:
                    80:06:3b:75:b7:6f:2e:7e:d5:eb:51:50:2c:9b:29:
                    e1:65:88:24:9c:ff:26:45:ad:ca:ca:6c:65:d8:81:
                    6b:4d:81:6e:ee:a2:cd:c0:03:08:19:00:f3:43:50:
                    e5:5c:03:1c:b5:02:b4:34:57:9f:ad:4d:d7:7d:13:
                    fd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:7F:F7:12:98:61:C8:0D:C6:2D:3B:96:2E:06:FB:1C:6A:6F:DB
            X509v3 Authority Key Identifier:
                keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:47:11:7f:4f:c0:f6:c0:a4:3c:5a:65:be:c8:5b:19:6a:
         9f:49:06:4b:ad:11:db:36:c2:44:98:b6:62:42:6a:fe:62:b9:
         76:24:21:a6:27:bd:a1:b9:c5:10:2f:b5:14:98:76:14:44:70:
         c1:57:7a:f2:a8:4e:c9:4e:3a:64:a9:8c:5d:0a:fd:f3:e0:d2:
         2a:34:f0:80:32:bc:ed:0d:2b:12:cd:66:46:78:d4:6a:a7:f0:
         67:fe:e8:0b:fd:da:f7:1c:c7:33:a5:a5:44:75:4d:69:15:2a:
         10:94:37:51:6e:a1:a0:45:0a:58:61:6e:c0:10:ff:f3:ec:ff:
         fb:2a:d0:df:07:1a:09:34:ef:ef:83:88:b2:22:79:46:eb:ee:
         1e:16:3a:02:4c:49:d8:51:20:ee:94:ee:aa:7a:f1:e8:7d:8c:
         aa:fc:28:2b:e3:49:93:52:d6:f1:10:79:c3:99:65:f0:cd:09:
         4b:a9:5d:63:b8:35:83:74:08:d0:20:2f:aa:6d:b6:67:63:f0:
         17:0a:42:7f:99:d6:cc:a8:3e:90:f5:52:78:25:c0:7b:51:9b:
         8f:59:e8:e4:76:2c:c8:13:5b:c6:20:d9:46:aa:fa:b7:1d:04:
         cc:53:4e:92:ca:ef:94:92:d4:e0:d2:6f:0b:f1:b0:e0:ee:49:
         37:b2:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:01 2024 by rpki-client on console-fra.rpki-client.org