Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File:                     7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier:          43EJVbSjwP7oUvNNqPI8R1dRl/+OiXvFnwbQlPPFISI=
Subject key identifier:   75:1C:D6:65:70:10:24:B4:82:14:3D:9A:C7:88:46:01:C0:00:D6:87
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer:       /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial:       0193568B0CB296412752A8FC38B47EFB6C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:02:53 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:53 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:53 +0000
Files and hashes:         1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: y1Ffz6e7X2J7E1gIYOfxXaZIHmOmD0CfO2PGP7tEqeo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:0c:b2:96:41:27:52:a8:fc:38:b4:7e:fb:6c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Validity
            Not Before: Nov 23 01:02:53 2024 GMT
            Not After : Nov 24 01:02:53 2024 GMT
        Subject: CN=751cd665701024b482143d9ac7884601c000d687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:85:a7:86:1c:f5:20:3f:4f:84:2d:d5:39:
                    6e:93:d6:56:22:aa:63:29:d5:4a:a7:17:6f:a7:80:
                    12:a2:10:42:69:ae:80:ce:6b:15:b1:1b:c1:08:28:
                    f5:b6:fe:2e:e0:92:19:6d:f9:07:68:62:f1:8b:d4:
                    03:b4:cf:03:e3:67:5a:2e:ec:bb:7e:2a:8b:ad:d5:
                    4f:ed:ec:88:bf:29:8e:cc:cd:b8:c9:3a:d0:a6:3c:
                    31:ab:4b:ea:26:0c:60:a8:ce:46:db:c5:4b:dd:86:
                    04:c9:ea:8e:6f:9c:b7:95:6f:29:bd:24:74:28:04:
                    fb:e5:f1:16:ef:6e:5e:90:8d:2f:45:e3:49:98:ea:
                    5e:33:74:f7:5e:c7:73:a8:27:90:fd:df:cd:a5:c3:
                    7b:cc:76:cd:25:94:79:23:92:a6:53:b9:36:59:c5:
                    74:3d:b3:c0:04:c7:7c:6f:32:96:21:d7:88:34:93:
                    94:ad:ae:5c:ab:ef:c5:a7:03:a8:4b:89:f1:d9:68:
                    bc:83:97:1c:dc:55:56:1d:fc:38:5e:8b:4f:3b:b4:
                    92:29:51:65:04:bf:cc:51:87:19:c2:2d:87:a7:ea:
                    81:80:b9:93:0e:b3:06:da:86:8a:bd:a9:2c:4a:2c:
                    9b:f0:59:6c:bc:32:b8:46:c6:1a:78:38:f2:41:c5:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:D6:65:70:10:24:B4:82:14:3D:9A:C7:88:46:01:C0:00:D6:87
            X509v3 Authority Key Identifier:
                keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:62:c6:f1:e0:c1:f1:c5:18:53:d1:7c:bd:58:ce:9f:99:
         f9:46:94:3d:57:4c:43:2a:fb:cb:f5:85:76:71:36:83:d0:db:
         99:c5:f5:06:bd:82:d4:57:0a:99:ce:8c:d9:54:99:27:f9:ae:
         ff:8c:76:ec:4c:00:f9:ca:96:4a:a5:f8:dc:f6:fd:e1:44:bd:
         6d:fa:f4:0f:ec:d3:6e:69:74:93:64:0c:c6:5b:27:f3:03:21:
         b7:27:44:bd:3d:eb:15:00:30:04:b3:0c:fd:8a:73:2b:db:6f:
         6d:35:a5:1a:31:b6:c4:3b:9e:4f:9f:b3:73:63:99:44:fb:56:
         82:cf:12:ec:df:40:39:8a:1d:97:a5:da:bd:7f:42:77:4d:20:
         da:a6:d2:ed:11:e4:db:ca:d5:9d:e4:f6:a1:bb:68:d1:49:55:
         59:2f:4a:93:0b:53:72:96:a6:49:29:58:ae:57:1d:6e:d9:93:
         72:d0:6d:d7:3b:00:a4:7c:40:5c:35:c5:27:41:66:81:ed:55:
         c5:7b:38:eb:bd:70:e4:6b:d2:81:05:c8:a7:81:29:4c:7b:6c:
         e7:85:dc:21:bc:ac:95:45:73:9f:f7:af:b9:64:60:6e:63:42:
         f9:90:ed:13:d2:3f:6e:47:38:a0:f3:f3:b3:ad:85:87:7c:9e:
         20:e2:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:56 2024 by rpki-client on console-ams.rpki-client.org