Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File:                     k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier:          7s3EZtI4cEKxeivAwM9Aj6AAZRE/bJbAzufUJRR9TQU=
Subject key identifier:   76:68:E5:C9:96:59:7C:14:17:05:93:AE:97:56:75:FB:18:F7:FB:87
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer:       /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial:       019357D29CB0805E2318F4D30AE93738F7DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number:          112D
Signing time:             Sat 23 Nov 2024 07:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:40 +0000
Files and hashes:         1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: Bb/rMsd7ncqsQHe3ExfXowm/GObiJqTuhMi3XyyTRMY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:9c:b0:80:5e:23:18:f4:d3:0a:e9:37:38:f7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
        Validity
            Not Before: Nov 23 07:00:40 2024 GMT
            Not After : Nov 24 07:00:40 2024 GMT
        Subject: CN=7668e5c996597c14170593ae975675fb18f7fb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2f:ba:73:85:39:ab:dc:1a:1f:65:c7:20:85:
                    d3:25:bf:92:45:f2:01:20:47:a6:9d:7b:e1:94:04:
                    17:43:a3:36:11:3e:82:e3:56:e1:f9:de:e6:aa:88:
                    3a:41:ea:5a:32:ea:0d:62:4d:bd:b0:b0:c2:55:b4:
                    0a:5b:d9:b7:18:96:df:2a:47:b2:99:a9:e1:57:7f:
                    36:90:e3:97:67:55:b7:4a:90:8b:8f:1f:50:6e:d6:
                    52:32:4d:6d:ed:16:51:d3:8a:31:85:7d:80:47:8d:
                    46:fe:16:01:27:a4:d8:48:08:fb:7d:9d:9a:ff:0c:
                    5c:6c:f0:94:6c:2b:9a:33:ad:b2:45:60:1c:79:ea:
                    bc:ce:08:0f:d4:71:3b:84:23:c9:a0:07:6b:c1:d2:
                    8c:ec:17:28:2e:56:c3:7c:97:dd:70:6b:41:5a:2d:
                    e2:1d:3b:83:eb:59:53:11:b1:55:a0:98:4a:72:37:
                    fb:f8:fc:1f:16:82:b5:16:d4:a9:e1:ac:e3:8f:c0:
                    96:3c:8b:8f:e9:13:7f:35:c5:d6:8d:44:a1:0e:19:
                    b5:c2:6c:96:4f:3a:9d:9a:15:23:4a:2e:f4:21:8e:
                    d0:7f:b9:3a:9f:a5:4e:3c:ec:fc:c5:25:7d:71:62:
                    07:fc:9e:37:5e:e6:f9:81:49:e9:78:fa:f2:65:5b:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:E5:C9:96:59:7C:14:17:05:93:AE:97:56:75:FB:18:F7:FB:87
            X509v3 Authority Key Identifier:
                keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:74:50:e6:ef:b3:72:44:6f:e8:78:27:04:a2:86:b3:a7:09:
         c3:ac:76:c2:23:c4:ed:96:a6:73:d9:a9:89:35:b7:ba:fe:22:
         7e:71:c0:62:f2:46:71:83:04:bc:90:29:f6:47:ab:16:1a:f0:
         d2:d5:00:a5:79:58:8d:67:3d:b3:a5:c1:40:f0:e1:87:b0:a6:
         34:36:2a:8e:23:21:dc:bf:af:ab:4a:78:b8:d2:cd:8d:86:87:
         00:af:ba:d4:d4:14:88:7a:02:22:a4:74:77:85:36:b5:c9:98:
         3f:47:9d:f9:60:9c:91:14:55:bd:48:88:4e:4c:a2:1e:60:0a:
         57:24:de:3d:91:3b:69:24:0d:e2:76:7c:24:59:75:c2:4b:a5:
         72:6a:97:83:c0:c3:6e:e1:73:d6:b9:05:b3:ff:c2:5d:66:3a:
         aa:52:06:f4:c9:d1:d5:df:8c:b2:13:3f:fa:19:fd:0d:25:a8:
         99:96:e6:41:eb:bb:aa:36:78:af:bb:ed:27:94:a9:2e:51:66:
         f9:fb:5a:d2:60:1d:38:2a:d4:bf:1d:b2:e5:e4:f6:9f:5e:5f:
         7e:e7:a8:3b:93:af:12:51:00:a1:87:9e:8f:e5:9e:b7:77:dd:
         27:06:a2:96:89:9c:e4:c3:cd:68:82:ef:77:b9:80:96:e0:15:
         2f:1e:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:11:40 2024 by rpki-client on console-ams.rpki-client.org