Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File:                     3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier:          bcHD55hAGNPl9nOCYSHl9AkqLYSD1M1vofOnSrKHhWs=
Subject key identifier:   F9:CD:C8:CD:DB:79:C4:FF:35:94:66:53:85:56:84:F6:9E:3C:93:40
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer:       /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial:       01940646F706B07A002DEC9092E7D6C9AD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number:          1087
Signing time:             Fri 27 Dec 2024 04:01:41 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:41 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:41 +0000
Files and hashes:         1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: FGVcZFqYZ/r+h9whU6wbjRBEfhRY33bbqDQTG8U/Gho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:f7:06:b0:7a:00:2d:ec:90:92:e7:d6:c9:ad:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
        Validity
            Not Before: Dec 27 04:01:41 2024 GMT
            Not After : Dec 28 04:01:41 2024 GMT
        Subject: CN=f9cdc8cddb79c4ff35946653855684f69e3c9340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:4f:9b:33:36:a4:03:13:57:99:e4:0b:37:
                    0f:fa:23:56:92:e3:bd:b6:fe:d8:43:38:7a:2d:b4:
                    24:b5:72:8e:c3:13:e4:91:3b:a7:2c:a6:95:49:ce:
                    a0:76:53:8e:e6:c7:22:57:19:1f:05:1d:38:52:64:
                    ab:0c:c7:f5:f4:3d:32:6c:e5:09:a9:75:10:58:1b:
                    b9:da:d4:a3:c7:e3:c6:7f:6c:99:f2:8e:e7:ed:6a:
                    c5:bc:a3:fe:9f:c2:92:05:10:d7:5b:b2:ee:ef:7a:
                    74:58:e7:68:81:23:e2:0e:72:bb:7e:c3:8a:40:64:
                    51:b3:ef:ff:09:6c:9d:95:96:9f:59:2e:0b:d0:57:
                    ab:df:f7:e6:21:62:88:e0:ba:f8:f8:45:96:1b:4a:
                    5e:06:02:1d:33:56:2e:d5:f1:17:9c:7c:19:c1:2d:
                    a6:c5:be:33:99:21:5a:d1:ba:b1:6e:60:c8:31:f8:
                    22:bc:60:6d:04:c8:1e:8b:19:40:d3:55:52:e0:32:
                    aa:c1:c5:43:79:a7:5c:85:ac:02:c1:e8:2c:f8:cd:
                    dc:e7:2d:cd:b3:ee:62:cc:be:24:1a:1d:72:22:7d:
                    9b:24:8b:3a:cf:06:35:1e:f6:e3:37:47:00:53:8d:
                    f5:12:7b:02:e0:7f:26:7d:44:5d:39:7b:2f:48:e0:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CD:C8:CD:DB:79:C4:FF:35:94:66:53:85:56:84:F6:9E:3C:93:40
            X509v3 Authority Key Identifier:
                keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:15:3e:e4:ed:76:e5:4e:55:f8:78:dc:2a:ff:07:6a:68:
         0b:7e:de:6c:09:64:99:ce:98:9a:f9:f9:99:98:5e:4f:6b:f9:
         ee:cd:ab:f7:10:89:88:08:d5:fc:04:f0:39:23:c3:8a:7c:9b:
         90:f5:a5:68:82:c9:71:c1:b6:2c:ca:b7:12:63:b9:3a:63:f5:
         12:6d:93:f1:64:f1:82:ba:18:3d:39:ee:a9:6e:d1:8c:b1:21:
         b3:3c:8b:17:18:b6:7a:3a:fe:fd:21:0b:c3:e6:45:dd:d2:09:
         44:2d:52:55:c4:91:69:40:96:93:45:ae:fd:9f:c5:51:be:29:
         32:b7:bf:09:8a:76:e8:d6:e7:24:3f:68:dc:ac:64:f9:97:64:
         40:ff:1b:3d:39:52:cc:e6:69:d7:1e:56:58:fc:9f:e1:2d:68:
         04:7d:e0:93:c9:04:b2:d9:31:94:8c:11:f0:51:e6:7f:af:ea:
         cc:60:e0:2d:f5:bb:ff:e3:05:26:39:ba:f9:30:a0:9b:55:6b:
         23:ed:54:f8:be:41:b2:7f:db:c3:6f:98:1b:20:71:0d:f3:3f:
         db:20:0d:4e:39:ae:a1:c2:19:5e:7f:65:74:e1:62:53:00:a9:
         01:6b:4e:83:4a:0e:bb:21:4d:de:31:f7:34:a4:65:9a:d1:80:
         b3:fa:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:56:11 2024 by rpki-client on console-fra.rpki-client.org