Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File:                     DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier:          4BDnunw0R1i16G3SLb+EzUJAEDxBu7BXJ7ro9F1CAHo=
Subject key identifier:   F6:DF:73:16:38:D8:AC:03:DD:8C:1B:53:DE:02:2C:90:F0:57:CE:82
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer:       /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial:       019356F7242851241A1BD97A0DFFE0A295EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number:          0662
Signing time:             Sat 23 Nov 2024 03:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:57 +0000
Files and hashes:         1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: 3uaGmC8hxSgCUH2V2zDtpPFNRBLXe4PZCow73flnLic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:24:28:51:24:1a:1b:d9:7a:0d:ff:e0:a2:95:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
        Validity
            Not Before: Nov 23 03:00:57 2024 GMT
            Not After : Nov 24 03:00:57 2024 GMT
        Subject: CN=f6df731638d8ac03dd8c1b53de022c90f057ce82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:36:70:b7:1a:3f:5e:2d:3f:4e:ca:20:30:
                    9f:c7:d2:4f:15:20:b0:65:da:bd:5c:ce:a1:06:bd:
                    ec:ca:1f:d4:c9:ad:a9:c3:a8:a9:ea:65:b1:2e:4b:
                    86:e0:c7:1b:86:a6:1d:d5:98:5d:e7:ec:54:11:b0:
                    4d:cb:aa:7c:f9:45:a4:89:04:34:d5:1c:59:7c:63:
                    e6:c7:c5:43:7b:d5:51:31:38:db:0c:1e:79:81:89:
                    54:f0:e6:49:c9:e1:87:b4:e5:a8:70:b7:8c:09:aa:
                    03:a9:85:b2:3a:c6:6e:8f:81:e3:5c:68:78:7c:a0:
                    db:5e:3c:cd:fc:dd:66:7e:cf:f3:3c:c1:5f:7f:ea:
                    8c:2c:6d:29:02:11:f4:d0:be:69:d0:b6:de:01:6f:
                    90:24:f3:04:bc:54:7e:67:51:e9:e1:a8:00:f4:2e:
                    20:9e:f0:cd:48:ae:7e:58:39:5b:c2:58:e6:e9:21:
                    08:ab:fd:fb:e9:cc:dd:ba:22:7a:46:74:46:fa:3b:
                    6f:f6:c0:64:b3:e3:29:54:58:c7:b7:66:bc:1a:e4:
                    52:0e:d3:6b:ba:ca:b5:db:7b:c1:4d:0d:9a:da:c0:
                    e1:8c:67:61:fb:4f:3a:1d:1d:b7:d6:cf:bf:66:8a:
                    f7:c1:11:c1:d2:83:2a:25:ae:67:9e:46:40:6a:70:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:73:16:38:D8:AC:03:DD:8C:1B:53:DE:02:2C:90:F0:57:CE:82
            X509v3 Authority Key Identifier:
                keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:88:43:ce:95:2e:2e:f0:19:0e:d0:2e:7b:1f:fd:12:0c:db:
         0c:84:89:85:12:3f:d7:29:2b:d9:80:66:53:32:ba:2f:19:85:
         39:41:77:97:26:00:47:3f:ac:c1:6e:f9:89:b2:53:87:00:65:
         c7:01:f0:e8:0c:6b:b0:da:54:03:89:ea:a3:8b:c8:a3:11:68:
         0f:2a:59:48:66:56:21:fa:c7:48:e2:d9:42:d3:e7:30:2f:dc:
         60:61:30:04:4f:ee:e7:d1:3f:17:e3:6f:9d:df:39:d1:be:22:
         ad:05:41:fa:bf:72:89:c4:e2:95:e6:8c:17:ac:88:b1:62:df:
         85:79:0a:50:1d:40:f9:bc:48:8a:f5:15:19:9b:ca:69:a0:1d:
         8d:00:fb:7d:53:9e:ba:ec:23:36:6b:d3:9c:5e:2f:c1:01:05:
         d9:73:c0:dd:9f:0e:69:56:be:66:ff:42:e3:73:b9:df:d8:62:
         42:f3:95:23:94:f7:4d:74:8d:fb:ab:a4:fd:dd:b3:5b:a8:0b:
         c8:58:9f:ea:40:44:e4:f0:c1:5e:1a:7c:6d:30:c4:17:47:21:
         9a:52:42:7b:14:df:ed:f2:01:55:4c:99:b3:4b:24:96:db:f6:
         43:85:26:90:bf:39:c1:64:ca:0c:23:67:a3:cc:4e:3f:92:2a:
         b9:5e:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:42 2024 by rpki-client on console-ams.rpki-client.org