Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File:                     pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier:          xi2Cq7a46foj26KMz0HkDnRReJUNTtDz/o0ISmY61yc=
Subject key identifier:   67:B4:72:FF:23:E1:B0:D0:33:0A:A4:CC:3D:33:9A:95:2C:D3:25:67
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer:       /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial:       0193542C856E1E06236E95B15FF7C451B667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number:          019C
Signing time:             Fri 22 Nov 2024 14:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 14:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 14:00:24 +0000
Files and hashes:         1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: jiiQaQp9s00/VXIoPKdH+2qiEWG8+iVr5ltU5F9JgQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:2c:85:6e:1e:06:23:6e:95:b1:5f:f7:c4:51:b6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
        Validity
            Not Before: Nov 22 14:00:24 2024 GMT
            Not After : Nov 23 14:00:24 2024 GMT
        Subject: CN=67b472ff23e1b0d0330aa4cc3d339a952cd32567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:8e:83:79:3a:99:63:8b:63:37:ec:3e:3b:
                    46:4e:a1:ca:9b:a5:ab:35:53:2e:c2:9b:d6:4b:91:
                    8c:ac:ce:d8:c5:39:4b:6c:66:bf:5d:2f:c3:09:1e:
                    c9:fa:50:48:5e:8f:a5:6d:56:e4:95:ed:71:2f:b1:
                    4a:9f:bc:c3:70:a5:b0:66:7b:40:13:37:4a:04:94:
                    c4:db:5a:26:39:e1:8f:c5:b7:68:ea:5e:0a:a6:b6:
                    8f:23:57:57:22:88:11:83:b5:cf:ac:7b:19:39:c1:
                    e4:a1:29:c7:5e:ff:bb:93:bd:52:6b:77:62:85:a7:
                    f6:1b:dc:a9:f5:e6:b1:0a:e2:6d:7d:d8:71:4c:b4:
                    73:f5:8d:b0:66:f3:07:43:1d:e3:84:45:22:19:ce:
                    10:16:34:29:39:f3:32:ac:59:27:25:fb:69:7c:0c:
                    85:ce:ce:fc:0e:08:9d:4e:a2:fd:13:00:14:5f:09:
                    d1:13:51:5a:a9:62:eb:22:b6:91:12:ea:e1:89:a7:
                    f4:8f:03:e0:76:65:a4:f8:cb:5b:62:6f:bf:b4:f3:
                    a5:7b:c7:81:0a:a6:ef:49:6e:c3:bc:71:b5:95:36:
                    41:c4:58:81:d3:8c:c5:08:5c:d7:1c:e4:42:39:cd:
                    b5:81:fd:4b:16:6b:28:7a:47:92:9e:c9:3e:19:c4:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:72:FF:23:E1:B0:D0:33:0A:A4:CC:3D:33:9A:95:2C:D3:25:67
            X509v3 Authority Key Identifier:
                keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:01:4e:93:85:09:9f:a0:d1:94:e3:30:13:2f:21:4b:b8:89:
         2c:25:b8:20:b8:0d:0d:e5:ef:d2:a0:3c:a0:e0:dd:06:17:04:
         73:98:f2:f2:bc:30:66:2d:4d:52:4a:3d:bc:f6:15:d4:0e:96:
         d9:a0:4e:b6:43:b7:a8:f7:e5:a1:72:2d:bd:0f:38:eb:7e:de:
         17:59:d3:82:28:f1:6e:a4:ec:e5:c6:05:50:fb:d0:e0:e7:92:
         bd:72:6f:5a:52:38:d5:01:57:80:2c:73:ee:b0:13:3b:3d:50:
         26:53:07:6e:25:90:98:a1:8c:d8:04:0a:a1:5b:2c:a3:c3:61:
         5c:84:2a:9d:f6:e8:c6:c6:b1:3f:43:02:b5:d2:b6:5d:97:e7:
         82:25:bf:8f:1d:37:99:44:d4:34:8e:d6:6d:ab:89:d2:bb:db:
         17:dd:d9:2f:db:9d:3f:3a:27:8b:28:9d:bf:0f:34:70:82:71:
         0a:fd:07:f1:72:fc:49:14:c5:9e:0e:5f:84:8c:46:4d:a4:9e:
         ef:86:e0:83:f6:33:57:54:09:bc:fe:d3:af:58:e7:d7:6c:9c:
         d6:44:a8:d0:f1:25:56:9f:24:c3:a9:2e:56:67:74:a9:c0:1f:
         ff:7f:74:2b:a5:ee:cf:3d:8f:8f:21:d6:2e:a5:55:c1:4b:45:
         b3:78:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:31 2024 by rpki-client on console-fra.rpki-client.org