Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File:                     g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier:          0Y9F0ZUEi8lb5fB2qE4rG96j7rhvV6lLuo1o9r2MNLs=
Subject key identifier:   C0:D3:D3:59:DF:01:0F:61:E7:DE:57:E9:89:48:73:73:C8:55:B0:34
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer:       /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial:       019369DA6CBF0B84A375C3C39B3ED031C2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:02:22 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:22 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:22 +0000
Files and hashes:         1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: 2M2LDmLDL/VjZzoMJs8CRfSJ1xKoYUt0OYrqk9bpa+E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:6c:bf:0b:84:a3:75:c3:c3:9b:3e:d0:31:c2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
        Validity
            Not Before: Nov 26 19:02:22 2024 GMT
            Not After : Nov 27 19:02:22 2024 GMT
        Subject: CN=c0d3d359df010f61e7de57e989487373c855b034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:ea:83:30:20:a8:b7:f6:8c:52:e2:f9:69:
                    3a:cf:06:21:12:83:e4:18:63:2f:7f:9f:5e:d6:aa:
                    6b:5f:b3:49:a3:93:54:c2:12:8e:ff:7d:c0:5d:f9:
                    ca:b2:20:4f:a9:fd:4d:c7:52:87:fb:22:39:95:23:
                    7c:03:18:ce:c0:b7:12:70:27:11:ea:1b:8a:eb:83:
                    69:55:eb:4a:44:94:eb:a7:ea:67:9e:2e:92:c2:f1:
                    14:55:40:53:e0:29:4c:77:f2:20:79:cf:ee:1c:32:
                    c2:95:b5:b8:d5:c9:65:42:57:77:87:c0:a3:52:1f:
                    3a:ed:d1:c6:84:bd:64:4a:a9:19:77:a4:25:5c:65:
                    d3:3c:c0:34:7c:ce:12:6f:e4:c5:b0:1a:f6:a9:b4:
                    f3:f1:4e:f2:e9:73:79:14:6a:ea:d2:1f:9a:0b:14:
                    65:c0:34:25:6a:d3:de:23:db:30:67:3f:b2:19:79:
                    d1:60:97:64:8f:ce:cf:ac:84:29:a9:ed:e4:17:2d:
                    f0:e4:ec:93:fc:39:9d:f9:7e:6b:5c:b5:38:8b:07:
                    21:86:b6:91:2c:fb:ca:f5:44:aa:cb:06:f8:f9:b2:
                    e6:25:a1:87:e6:23:2a:46:fe:53:b1:c0:af:b1:a5:
                    92:74:a1:b3:35:77:49:e3:35:b8:df:58:22:b2:00:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D3:D3:59:DF:01:0F:61:E7:DE:57:E9:89:48:73:73:C8:55:B0:34
            X509v3 Authority Key Identifier:
                keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:fe:e8:30:7b:43:93:a2:5c:86:06:03:d5:e5:c3:af:11:
         74:50:14:b4:3f:69:e8:e5:75:2d:ec:32:5e:be:e1:77:74:d6:
         fb:ce:7e:b3:d7:ed:5a:6c:4b:d1:6b:7e:92:f5:9d:bb:87:72:
         cf:75:27:dc:4d:3a:24:2a:da:fe:76:36:ce:a5:f8:f2:3c:2a:
         ee:c3:27:e7:19:4d:27:f9:d1:16:9e:78:15:27:9f:2c:76:e2:
         e8:4e:48:d9:54:79:57:0b:a2:8d:d2:05:4c:79:85:f6:5f:7b:
         db:eb:01:90:de:49:72:bf:61:bc:eb:99:aa:24:33:13:8c:2d:
         37:ec:d7:fc:b4:e1:70:a7:ed:fe:d5:65:27:b7:9b:c5:49:a1:
         a4:f9:5d:a7:c6:00:ca:99:61:08:75:ef:18:44:67:7b:59:db:
         bb:b8:9c:b6:4b:3a:5f:a7:92:e1:06:c9:c5:19:86:11:9b:67:
         fc:01:39:dc:0c:4e:aa:74:64:2e:96:ff:e9:0f:5b:1f:3f:79:
         9b:b3:d0:68:09:98:44:d2:1d:c5:41:62:50:81:6c:6d:b1:f0:
         29:c0:46:14:bc:06:0d:74:36:61:0e:97:e3:16:a3:d3:ef:59:
         ad:2b:72:42:dd:05:f6:db:29:6a:d3:e5:08:94:ca:dd:c6:d7:
         73:17:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:52 2024 by rpki-client on console-fra.rpki-client.org