Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
File:                     jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft (raw, json)
Hash identifier:          mLJuF6UFoesa8g1NZiEIh3ujgjUCR9cvfgYabuZe+vw=
Subject key identifier:   16:9E:AA:84:94:19:FA:F7:77:96:9C:D3:42:C0:81:64:A5:95:C3:45
Authority key identifier: 8D:72:7F:54:FD:72:50:73:68:45:F7:EF:B1:5F:C5:DE:FE:5F:07:4C
Certificate issuer:       /CN=8d727f54fd7250736845f7efb15fc5defe5f074c
Certificate serial:       0193688EE816B0264C32E6C2AEE4E03FA711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jXJ_VP1yUHNoRffvsV_F3v5fB0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
Manifest number:          48
Signing time:             Tue 26 Nov 2024 13:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:16 +0000
Files and hashes:         1: jXJ_VP1yUHNoRffvsV_F3v5fB0w.crl (hash: /tb7IG92dTvFsJtkKB2olhOOUZKEpL2hpqdyUsNRNC8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jXJ_VP1yUHNoRffvsV_F3v5fB0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8e:e8:16:b0:26:4c:32:e6:c2:ae:e4:e0:3f:a7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d727f54fd7250736845f7efb15fc5defe5f074c
        Validity
            Not Before: Nov 26 13:00:16 2024 GMT
            Not After : Nov 27 13:00:16 2024 GMT
        Subject: CN=169eaa849419faf777969cd342c08164a595c345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:c2:9a:5c:62:00:57:c1:5a:a8:b3:77:70:
                    a0:a8:bf:f0:11:6c:24:11:02:f8:11:09:53:7e:58:
                    7b:17:81:74:25:6e:2e:23:09:63:48:98:a3:11:a3:
                    c8:ef:3b:74:81:b6:9c:fd:a5:95:ed:9d:48:22:12:
                    30:98:97:8b:ff:87:4a:73:e7:cd:f0:4e:68:02:dd:
                    ff:0d:2d:15:c9:06:c6:af:e5:e2:da:7b:9b:c1:93:
                    b3:dd:a6:95:67:16:dc:e5:59:9a:be:cf:f2:8c:f6:
                    22:53:93:cc:97:12:89:e6:b8:db:cb:fe:b3:91:95:
                    b6:11:82:54:d5:82:ce:e0:e3:05:d7:99:4f:01:d3:
                    4f:d9:9b:08:6c:fb:70:1d:e1:51:ed:32:35:f9:59:
                    78:f0:df:7f:8f:60:27:9c:e9:8f:0a:19:11:cd:b4:
                    ec:7f:a1:06:58:bd:c8:3f:b1:c3:60:b0:6b:8a:9f:
                    59:a9:22:7e:31:3d:6b:b0:4c:3d:33:b1:75:a3:8b:
                    ab:1f:2e:38:58:ad:fd:dc:b3:41:c0:72:24:11:83:
                    7d:53:03:47:05:e5:7f:9c:c7:64:96:18:11:17:33:
                    86:d4:4d:91:56:be:d6:ff:1d:2d:c8:5d:c6:86:7c:
                    35:6c:f6:2c:6b:c6:16:de:16:c0:e4:0a:9d:df:61:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:AA:84:94:19:FA:F7:77:96:9C:D3:42:C0:81:64:A5:95:C3:45
            X509v3 Authority Key Identifier:
                keyid:8D:72:7F:54:FD:72:50:73:68:45:F7:EF:B1:5F:C5:DE:FE:5F:07:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXJ_VP1yUHNoRffvsV_F3v5fB0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/cedab5-1d05-4983-94c2-402eb27c447d/1/jXJ_VP1yUHNoRffvsV_F3v5fB0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:25:7d:40:85:0d:fb:05:be:63:f5:d6:92:6d:89:1a:ee:aa:
         df:df:55:ce:b5:4d:a9:29:55:fa:09:15:b7:55:e9:83:a0:54:
         57:9a:54:35:3b:ad:7d:1a:08:f5:3c:1a:6e:d8:7e:bf:1a:53:
         23:6c:3b:29:32:aa:3e:e8:67:95:75:1a:1b:37:52:60:88:23:
         c0:f0:10:39:35:69:6b:71:60:f9:be:82:37:68:2f:e8:5c:7e:
         a0:dd:7d:a4:a8:80:bb:f7:b7:fc:e9:90:7d:08:bd:d5:ac:4a:
         4e:2a:92:df:e3:5d:ac:cf:9d:3e:f3:53:32:64:00:b5:b5:37:
         2a:75:77:bf:76:52:61:cd:69:a3:2d:b0:56:23:53:a1:4b:d4:
         41:45:e0:75:28:a3:51:3d:c4:4d:13:af:16:81:c2:5f:73:1a:
         a3:3f:43:5b:dc:56:42:41:fe:d8:6e:d7:62:c8:6e:69:26:91:
         cb:2f:1f:52:18:50:7f:20:f5:c8:e7:09:7b:2b:7a:1d:85:2e:
         64:04:22:0f:8d:9c:9f:9a:33:20:75:5f:17:b0:e6:61:37:5a:
         31:c2:0a:67:e4:4d:6c:3f:03:6b:f3:7e:03:75:16:46:4a:97:
         0e:5d:4b:ff:70:b0:26:2c:e2:47:cf:2f:8d:28:4e:5a:ac:06:
         03:69:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:31 2024 by rpki-client on console-ams.rpki-client.org