Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File:                     8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier:          w3waP6xIjjcK4nVw9Jr1IZaYyBwc+7q4Qvn1E7xpAUo=
Subject key identifier:   37:B5:7F:7D:67:BB:C0:4F:18:47:25:CF:89:EE:15:E8:BC:9C:C1:BB
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer:       /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial:       01938C647C004333D4248574632B84CB2E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number:          02C4
Signing time:             Tue 03 Dec 2024 12:00:15 +0000
Manifest this update:     Tue 03 Dec 2024 12:00:15 +0000
Manifest next update:     Wed 04 Dec 2024 12:00:15 +0000
Files and hashes:         1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: g8i3xGpQZ1Wn8TRJOFM7NRMOBpB9XmyJSZl10Lcf6Rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:64:7c:00:43:33:d4:24:85:74:63:2b:84:cb:2e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
        Validity
            Not Before: Dec  3 12:00:15 2024 GMT
            Not After : Dec  4 12:00:15 2024 GMT
        Subject: CN=37b57f7d67bbc04f184725cf89ee15e8bc9cc1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:04:37:d2:5d:3b:f5:1c:a8:6b:d6:42:ae:
                    57:0e:94:7c:6d:8e:a1:91:72:49:06:21:b3:f7:29:
                    73:df:ab:69:6e:c1:cf:0c:57:e7:a4:3d:03:92:11:
                    dd:50:5a:7f:f2:8a:54:9f:a2:80:fd:9c:2a:79:00:
                    68:83:b6:0e:54:ac:e9:e0:f8:d8:90:f3:83:b9:b6:
                    92:74:f1:dc:d5:f6:8d:5a:e6:d6:05:7c:bd:11:93:
                    0d:c7:7b:56:c2:55:a7:33:9b:cb:c0:37:66:75:27:
                    dc:35:22:72:02:39:f6:c7:8b:d6:f1:e6:ed:7d:7e:
                    f2:41:83:fa:2f:f6:c6:86:b6:0f:93:85:71:58:3a:
                    85:1e:13:ec:a7:e0:eb:b7:e7:f4:93:11:30:72:a7:
                    c2:37:21:40:a4:00:3d:3e:4c:35:7d:3b:92:5a:cb:
                    67:63:2f:a4:07:7a:c8:85:2c:0b:5f:bd:c3:9d:a1:
                    d6:22:94:62:01:ca:a6:e5:e9:68:29:21:b1:23:f0:
                    d0:98:68:46:22:0a:e4:9e:cf:9d:42:bc:68:6a:6f:
                    3e:d9:9e:ca:7e:f6:c5:b0:75:18:5c:86:f8:d4:22:
                    1a:51:9b:22:51:de:21:9a:0a:9e:33:ba:93:06:db:
                    e4:f2:6f:be:d0:9e:92:f0:48:13:42:e4:75:6e:a8:
                    84:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:7F:7D:67:BB:C0:4F:18:47:25:CF:89:EE:15:E8:BC:9C:C1:BB
            X509v3 Authority Key Identifier:
                keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a7:57:4a:44:70:1a:64:b6:97:54:2e:76:6d:54:c4:84:ee:
         44:0d:9f:70:51:f3:ab:26:f1:22:12:64:ea:e8:be:c5:e6:9d:
         b0:e4:14:56:8b:52:fd:38:71:68:af:85:83:31:de:80:18:db:
         52:4a:48:36:84:7e:09:32:a7:d6:de:6d:e8:67:3f:7f:1c:26:
         6f:c9:cb:47:be:7e:b8:f9:ed:a0:33:3e:10:23:e9:1d:4d:b2:
         8a:79:92:08:64:6a:78:8d:85:75:d6:5e:85:f1:13:21:43:a2:
         dd:d6:fa:bd:a0:76:dc:86:b1:23:9b:ae:36:f9:f0:36:16:57:
         bd:31:7d:48:93:d0:35:8f:4f:90:e6:75:b3:be:b4:bc:b7:78:
         66:63:4d:2c:d3:3f:a8:85:a8:60:15:83:16:d6:45:9f:46:57:
         bc:9b:8a:40:2d:7a:7e:19:11:c7:45:d1:c4:99:d5:48:1d:72:
         6d:f3:c6:c2:bd:c5:cb:02:23:8d:d8:65:73:e8:5a:94:de:18:
         81:78:bc:aa:78:89:d3:70:3c:6d:69:f5:5c:64:92:ab:d7:85:
         04:72:2e:82:ba:cc:60:71:01:f4:8d:ff:5e:bf:0f:0e:aa:bc:
         02:b6:ac:dd:e8:5c:71:27:53:45:a2:43:d9:91:ac:15:56:2a:
         17:91:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:38:28 2024 by rpki-client on console-ams.rpki-client.org