Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          WXZ3wGhY7+3PdQM1vwa6umveG1LXN0i4/6XC6oyC9RU=
Subject key identifier:   02:CD:40:64:96:32:0A:4E:BC:AD:AB:A2:4C:B6:45:04:B0:D5:84:66
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       019357D2DF81AF1C5E774BAAEE290F7923B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 07:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:57 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: BfhDuuGRIeIYz7lfNCcXvEWP5hYwSvfPGqAQVHlN49Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:df:81:af:1c:5e:77:4b:aa:ee:29:0f:79:23:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Nov 23 07:00:57 2024 GMT
            Not After : Nov 24 07:00:57 2024 GMT
        Subject: CN=02cd406496320a4ebcadaba24cb64504b0d58466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:60:9b:43:a4:57:3e:ac:b2:03:7f:55:f5:
                    9c:e9:74:2c:75:eb:0b:0f:54:c6:8b:3c:d4:51:95:
                    b8:9a:ea:ae:1a:9c:86:33:af:84:93:18:36:0b:54:
                    5f:ab:dc:51:8c:fa:f7:45:4d:a0:81:52:ec:d2:73:
                    db:dd:26:9c:c8:6b:d5:04:44:56:8f:7d:5a:7e:4f:
                    69:08:3e:f9:8e:64:55:f8:fb:cc:0e:fc:2d:c9:58:
                    c0:73:d2:67:ab:b5:6e:f8:db:08:6a:1e:ca:c2:58:
                    d3:1e:97:04:81:71:f1:ee:44:5e:20:68:38:d5:65:
                    17:37:b1:82:f6:19:20:1e:3d:32:a0:b3:66:cb:93:
                    7c:98:59:07:fe:8c:d8:5c:a9:d2:5f:8b:72:b0:fa:
                    a8:ce:ba:40:a0:ca:19:71:f9:e7:4f:6b:08:c6:58:
                    a3:db:0e:16:18:d6:24:63:59:f4:92:97:45:ae:da:
                    8a:20:f7:3c:17:36:a9:fb:72:17:bd:28:b9:a9:67:
                    2f:91:3e:17:24:73:50:75:3b:86:87:40:dd:03:94:
                    a2:64:eb:1f:c8:ea:68:86:ee:ba:11:68:11:43:a6:
                    bd:f2:04:c8:f0:94:76:f0:c7:94:e8:49:88:7c:c0:
                    77:a5:5f:fe:3b:66:f5:46:e6:e2:cc:3c:18:22:cc:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CD:40:64:96:32:0A:4E:BC:AD:AB:A2:4C:B6:45:04:B0:D5:84:66
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1c:42:28:3e:61:26:e3:8a:6e:a0:1c:7a:80:f4:99:1f:ac:
         0f:e1:03:63:9b:9e:f5:dd:4b:2a:34:37:dd:c9:76:fd:91:43:
         18:dc:40:fc:87:04:1d:d9:00:49:a1:39:a8:da:a9:10:31:d6:
         70:80:90:8d:22:32:4f:f9:ba:e3:2b:f3:ce:39:93:c0:8a:38:
         32:f7:f2:e5:a3:57:89:98:e6:91:c0:09:8a:74:4d:df:33:14:
         b9:74:8f:2b:d9:d3:cd:39:9b:00:42:fe:89:e4:43:33:31:4d:
         c1:39:14:2e:05:4f:3f:cf:48:e1:7a:c9:01:90:5e:24:34:a8:
         61:66:c5:00:4a:7d:aa:b1:c8:b2:c9:52:75:f6:41:f3:60:72:
         f3:d2:4a:90:c4:b9:be:3d:c0:26:cc:18:fd:db:15:35:61:83:
         9c:ac:be:eb:b3:46:0a:6c:3c:d1:2f:4d:21:46:af:0b:e4:2e:
         79:0b:b2:30:9c:4b:95:35:2a:1e:18:ef:32:dc:df:4d:60:d2:
         9c:47:9c:b1:53:f3:e0:ae:45:d4:1f:dc:cb:41:a5:b2:62:81:
         a4:bd:59:6f:ff:d2:39:27:ab:a5:95:32:e1:6c:2b:dc:db:0d:
         34:5e:d5:10:e2:36:37:e7:61:47:56:64:1f:d3:d2:21:90:f6:
         7f:f0:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:48 2024 by rpki-client on console-fra.rpki-client.org