Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File:                     8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier:          5i/ZVnuGGXlguUhifMTZJtjh5QJzsCbQ6oEjQZvm5l8=
Subject key identifier:   B6:60:89:36:42:EB:A8:19:53:6C:84:FA:C3:A8:45:5A:79:0C:BC:5E
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer:       /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial:       01936857FAD54B69A6D3F8777C6652CCE992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number:          0161
Signing time:             Tue 26 Nov 2024 12:00:16 +0000
Manifest this update:     Tue 26 Nov 2024 12:00:16 +0000
Manifest next update:     Wed 27 Nov 2024 12:00:16 +0000
Files and hashes:         1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: pQMvqu4jmGr+CObsFN/GQzZhIuzYeccX4ClbeSPUiJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:57:fa:d5:4b:69:a6:d3:f8:77:7c:66:52:cc:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
        Validity
            Not Before: Nov 26 12:00:16 2024 GMT
            Not After : Nov 27 12:00:16 2024 GMT
        Subject: CN=b660893642eba819536c84fac3a8455a790cbc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:32:c2:75:0d:e8:83:2b:43:7a:69:68:1a:
                    06:3f:de:eb:ff:34:08:8a:be:a8:24:a7:69:70:1d:
                    c6:03:18:15:a6:7d:79:b9:55:a7:a4:ee:a1:38:cd:
                    8b:18:71:13:94:7f:ca:be:c5:7d:7b:cb:9a:a6:e0:
                    d5:2e:2e:95:ed:db:bc:f9:c2:9f:83:dc:f1:f4:0d:
                    2d:61:38:dc:8a:70:6c:7d:a7:fb:f3:e1:4b:14:19:
                    dd:c8:93:8f:b2:be:1c:75:e2:64:b9:fa:f2:79:70:
                    75:3e:86:a4:69:dc:f1:5d:8d:f9:62:85:24:7e:8f:
                    c4:2d:5a:22:30:9c:88:84:95:cd:0b:3d:c6:18:5d:
                    97:26:6f:d6:28:77:d6:ff:3b:c7:48:02:af:bf:c4:
                    cb:03:d6:ac:8d:f2:47:ac:67:df:7a:43:c7:34:5c:
                    88:48:95:e8:a4:d3:94:3b:87:ee:e1:a1:93:96:32:
                    63:12:79:0b:93:e4:c1:e0:dd:a0:6f:4b:ac:5b:dc:
                    7b:77:80:c6:ed:6b:92:c8:90:73:d6:81:4d:32:5d:
                    1e:f7:b9:b9:f5:20:39:40:f8:32:ac:b7:b9:87:12:
                    1d:e6:c5:e8:83:af:5d:ab:87:a0:e5:23:80:09:fe:
                    48:62:cc:77:73:20:1f:c4:cc:33:19:fc:f3:a5:62:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:89:36:42:EB:A8:19:53:6C:84:FA:C3:A8:45:5A:79:0C:BC:5E
            X509v3 Authority Key Identifier:
                keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:a7:a4:d7:a1:de:ee:c2:aa:9e:ea:00:f7:71:fe:cc:37:
         a7:46:e6:73:c3:0c:c1:7a:c7:fe:09:ec:aa:ad:da:21:42:dd:
         b4:71:0c:70:f8:b3:b8:72:42:2a:31:86:38:83:ce:d9:0c:cd:
         48:ec:96:f3:0a:1a:67:83:92:a1:56:1e:f1:25:26:36:de:c6:
         ef:b1:0e:21:86:df:69:61:04:fa:51:88:8c:a8:bc:00:77:e5:
         0f:55:60:ff:b4:af:e4:9d:94:67:4d:1a:b2:bd:08:6c:ec:f1:
         88:7e:62:c1:bc:b8:ea:d1:90:ad:b4:e0:90:98:e2:7a:99:0c:
         16:04:37:35:b0:66:4d:92:de:0f:0a:d0:5b:00:2c:8d:2f:fa:
         bf:a5:9d:4e:20:e7:b7:6e:21:8e:54:03:3d:4d:4c:50:04:a2:
         b2:8a:01:14:45:52:0a:e5:aa:6c:9a:df:f8:9b:92:a0:aa:67:
         f0:da:26:d1:d5:9e:4b:d7:58:c1:a1:0b:8b:f2:6f:81:f0:58:
         e7:d0:4e:10:27:21:f6:a8:6c:c0:47:b3:c9:b4:53:a9:ec:b6:
         23:87:57:9c:d0:88:b6:b8:01:86:d3:ff:2c:74:ef:9b:2e:80:
         62:e0:95:e4:65:8b:fa:a2:64:7f:60:29:c1:5b:ca:4b:ff:b7:
         53:bb:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:21:56 2024 by rpki-client on console-fra.rpki-client.org