Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
File:                     H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft (raw, json)
Hash identifier:          oPMTPYYZTP1aXNoPyxG7N8OvKqveatO5eiKZd6FcFFY=
Subject key identifier:   24:65:4E:28:4A:A6:09:81:6D:62:CB:71:72:74:97:A1:66:60:C4:53
Authority key identifier: 1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26
Certificate issuer:       /CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
Certificate serial:       0193568A3F3697520F11C8614C2EC72C51D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:00 +0000
Files and hashes:         1: H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl (hash: oiJSrXN5Tne5S6Q1Wmha16KeposFUccOt5CWx4fkA0M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:3f:36:97:52:0f:11:c8:61:4c:2e:c7:2c:51:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd9d9e85dc2571fd36b1b474630f58eb90cff26
        Validity
            Not Before: Nov 23 01:02:00 2024 GMT
            Not After : Nov 24 01:02:00 2024 GMT
        Subject: CN=24654e284aa609816d62cb71727497a16660c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:88:4b:ea:6b:e5:aa:2e:cc:c7:f7:3f:29:
                    43:89:15:0a:9c:97:e9:2f:7d:37:e8:2b:32:47:1b:
                    b2:20:95:38:2b:f8:af:04:39:a0:4a:7f:78:4b:20:
                    35:4a:c9:04:33:54:15:5d:39:6f:2f:82:8b:18:49:
                    79:35:ca:03:5e:5a:12:23:a2:22:c7:99:00:28:f6:
                    5b:95:92:77:8b:55:db:6e:43:db:04:4d:3d:5e:03:
                    89:15:a3:a9:89:68:b4:f9:1e:ab:67:af:f2:59:15:
                    80:b2:45:fd:ae:c3:e4:d6:cc:56:03:ab:09:33:f2:
                    07:9e:d3:4a:aa:02:b5:bf:08:80:0d:09:d2:24:7d:
                    d4:b2:95:a0:84:08:ed:8b:9e:8f:87:97:69:75:fe:
                    43:c3:b7:e9:84:94:e3:2b:3e:67:24:ae:8a:74:10:
                    86:76:32:51:29:76:7a:5f:53:7a:ea:d7:4d:b6:06:
                    18:c2:c2:5c:6c:56:c2:c8:41:c2:cc:a0:34:e8:f6:
                    ae:37:2d:bd:a6:dc:18:37:93:ab:72:52:1f:cc:07:
                    c4:4b:75:e7:55:12:59:ab:5d:e2:06:6a:dd:e1:ea:
                    6a:f4:bb:e7:0d:9e:fa:7f:6a:e8:f2:cb:be:98:b9:
                    44:6b:25:a7:02:83:9e:45:19:56:59:d6:a5:f0:d2:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:65:4E:28:4A:A6:09:81:6D:62:CB:71:72:74:97:A1:66:60:C4:53
            X509v3 Authority Key Identifier:
                keyid:1F:D9:D9:E8:5D:C2:57:1F:D3:6B:1B:47:46:30:F5:8E:B9:0C:FF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/26afa2-6436-443c-b7af-c08b17f99993/1/H9nZ6F3CVx_TaxtHRjD1jrkM_yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e9:70:92:47:a4:7c:26:e2:9a:23:cd:96:47:b9:ba:f4:c3:
         76:c8:66:0b:d7:25:b2:5e:cd:5d:2c:96:fa:98:00:ab:42:88:
         58:8d:a1:cf:73:cf:3f:ee:5e:ca:ff:33:0f:0f:c0:57:4b:f2:
         2b:1a:5b:b9:f0:72:d5:d2:bc:60:30:6d:94:84:ae:3f:ea:fd:
         1e:1f:d5:bf:36:30:e4:7d:f5:16:24:60:cc:0f:74:3d:ac:44:
         27:2f:88:fa:48:d0:e0:5d:e8:ae:6a:9c:01:5d:3d:c9:f1:a6:
         90:13:aa:08:ec:10:84:2d:49:b0:85:79:20:a4:84:b3:b4:cd:
         9b:e5:b2:62:f0:ab:60:9d:90:b4:34:5e:c0:2b:0d:12:4b:ad:
         74:d2:1b:0f:f7:9e:31:f7:68:99:e8:8d:8b:8e:6e:fe:24:d0:
         fc:e6:54:f5:1b:7e:16:c9:70:20:1f:96:de:c6:a8:b7:16:0a:
         07:10:c4:da:ed:7c:43:f7:04:ab:5b:54:6c:89:35:52:e6:33:
         66:d5:b9:d9:2c:a5:0b:27:ed:d7:bf:b1:4a:2a:96:6e:a4:4a:
         71:74:48:87:6b:29:00:0b:8b:38:15:11:48:dc:24:a4:25:bf:
         3c:fb:35:92:27:99:ad:f1:fa:1e:10:65:be:39:99:94:77:f0:
         57:a7:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:23 2024 by rpki-client on console-ams.rpki-client.org