Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File:                     B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier:          +2cwP1nAYuG70QHhB8EGp/7WYuIvgKOsvhnDnrUL2nE=
Subject key identifier:   2F:05:84:29:8A:7A:57:14:D4:21:DD:5C:46:6D:E0:FA:8C:75:E5:04
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer:       /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial:       019356890923D8FED968138251C4D058874B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:41 +0000
Files and hashes:         1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: cs5hYBrnnIbbV2JSjXlWtrblGYgCdrAFZ/Wn5+3O6Ws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:09:23:d8:fe:d9:68:13:82:51:c4:d0:58:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
        Validity
            Not Before: Nov 23 01:00:41 2024 GMT
            Not After : Nov 24 01:00:41 2024 GMT
        Subject: CN=2f0584298a7a5714d421dd5c466de0fa8c75e504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:38:2c:56:a0:7a:ba:da:c2:a7:75:c7:15:
                    59:b5:33:d7:91:1f:b3:39:b9:3c:3f:14:16:0a:55:
                    0c:0c:88:67:6d:8a:d0:8f:58:72:57:d9:be:d9:14:
                    31:8f:e3:65:ee:3c:f9:be:36:59:67:09:e6:af:e6:
                    fc:72:01:13:18:c6:5e:f8:b4:ea:96:f2:ca:85:be:
                    0f:7b:45:8c:b5:a1:da:59:09:d2:51:21:b0:79:2f:
                    b9:ce:97:70:ce:db:09:c6:e5:ae:3f:3f:29:ef:0c:
                    8f:32:7f:34:c5:f7:e3:e3:d5:eb:e6:9b:50:f6:93:
                    80:ee:b2:e7:26:03:3e:58:f1:fc:b1:8a:61:a5:67:
                    f5:e3:2a:57:b6:49:e8:b9:1a:2f:52:d7:36:31:f3:
                    01:d0:0b:f6:06:c3:26:00:29:3e:9b:a1:75:c6:16:
                    a0:23:99:db:e6:cd:27:a0:07:a7:aa:2e:10:55:74:
                    9d:c8:75:fd:cb:51:c6:e5:a5:91:3f:d1:be:77:43:
                    84:5b:84:c0:4a:cb:be:0c:14:1e:dc:85:ae:7b:d4:
                    72:6a:02:9e:13:b0:dd:e4:6b:5a:60:cb:e2:8d:66:
                    85:ba:3a:ca:60:fb:91:c8:29:cb:5f:35:05:51:a3:
                    63:d3:db:fa:8c:a3:64:42:aa:80:a0:aa:32:47:7b:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:84:29:8A:7A:57:14:D4:21:DD:5C:46:6D:E0:FA:8C:75:E5:04
            X509v3 Authority Key Identifier:
                keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:18:d5:5e:aa:b0:c1:4d:75:48:44:cf:04:cd:ac:b1:ff:70:
         7f:57:53:de:f8:4d:c4:ab:a6:12:ef:a0:af:5c:fc:d6:69:40:
         17:b6:cd:2c:b7:6d:19:91:16:14:9d:0e:f0:be:fd:f1:bd:fb:
         ed:61:ef:07:5c:07:c0:ea:2c:5c:1b:3e:fd:fb:e1:cb:64:24:
         ba:70:da:08:d6:8e:ed:d2:e6:32:f6:1c:a0:cc:82:68:20:e2:
         1f:28:fb:0f:67:68:4e:b1:33:e0:91:51:b8:01:67:5c:68:c9:
         d8:68:a0:bd:9f:de:a8:ad:03:1e:b4:da:16:89:7a:a5:be:10:
         c0:9f:23:1a:d4:aa:06:c2:94:c7:a8:8d:72:5b:a9:e3:47:20:
         66:d2:7e:45:d1:d3:d7:ec:15:8e:9b:a1:8c:a7:1c:d3:1b:2a:
         ed:22:8f:fd:0c:f2:75:89:4a:f8:0d:4e:7b:45:39:8f:17:ce:
         71:26:27:3e:4f:de:30:e5:db:b8:80:51:fe:4c:86:e3:f0:75:
         fc:2e:43:82:81:fa:44:5c:14:cc:77:2c:9e:4e:7d:c8:c6:59:
         44:1a:ea:fb:5e:90:ff:45:64:0d:a7:2e:54:8d:5b:e2:69:7a:
         3e:5c:4d:ee:30:3e:36:d9:56:7c:ab:ea:95:bc:29:1c:ad:5f:
         fb:9a:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:47 2024 by rpki-client on console-ams.rpki-client.org