Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File:                     SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier:          JS6K89jIsN4QEtFiduEV5ELv0fR0fgfXWihz6liEPAk=
Subject key identifier:   02:AA:CA:9C:41:40:8B:09:BF:AD:BE:EB:C1:F0:D7:08:3B:83:05:4D
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer:       /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial:       01935689F64A612054E1A16455113E3F80BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number:          136B
Signing time:             Sat 23 Nov 2024 01:01:42 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:42 +0000
Files and hashes:         1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: 3MlstmXEVmxkccWTw9SKBSZzuQ07qpAcf7fXgMeoQ6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:f6:4a:61:20:54:e1:a1:64:55:11:3e:3f:80:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
        Validity
            Not Before: Nov 23 01:01:42 2024 GMT
            Not After : Nov 24 01:01:42 2024 GMT
        Subject: CN=02aaca9c41408b09bfadbeebc1f0d7083b83054d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:85:21:7c:cd:94:f5:4c:47:50:ef:33:39:
                    df:8b:d5:a5:2c:bb:52:35:3a:0b:94:77:54:f2:bd:
                    7d:d5:2c:18:ad:4b:61:20:12:e4:e1:64:1f:01:b7:
                    2e:63:e7:c5:93:36:1d:d2:b7:07:97:77:9f:7d:86:
                    94:b3:46:88:a6:60:55:b9:a5:f5:84:68:af:99:99:
                    84:df:e2:ce:10:3e:e5:82:e4:e8:e9:86:c5:cb:a1:
                    12:89:18:dc:6d:3d:69:88:2a:63:3c:ec:02:76:a3:
                    3f:d3:af:35:84:f7:74:32:4f:1c:5e:eb:22:30:ff:
                    3a:54:ed:99:f3:cb:96:da:42:9d:cd:c1:41:60:bb:
                    c2:43:05:8b:32:31:58:f6:e9:e6:d2:cc:8e:51:dd:
                    76:c4:17:e2:40:c5:77:ab:40:c5:8f:8d:73:c1:ec:
                    b7:b0:96:b6:97:99:36:5a:9b:44:a4:eb:de:55:ce:
                    a1:c0:85:20:99:17:52:5b:37:8b:52:3c:eb:bd:01:
                    80:85:e3:82:22:67:38:c0:e2:7e:bd:40:89:8e:ec:
                    ca:be:10:49:f2:61:93:f8:8b:70:f8:ee:4e:dc:7f:
                    03:e1:1e:80:8b:4c:cd:7d:da:f4:b4:cf:82:16:fa:
                    f3:26:f9:82:a2:d2:84:6e:76:f2:0a:4c:dc:34:3b:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AA:CA:9C:41:40:8B:09:BF:AD:BE:EB:C1:F0:D7:08:3B:83:05:4D
            X509v3 Authority Key Identifier:
                keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:f4:dd:76:88:61:e9:3c:01:87:15:b8:1d:29:c5:a0:45:
         a8:a7:68:c4:0a:2b:5b:f0:a7:da:1d:09:05:04:98:eb:74:db:
         14:b5:b2:0d:b1:ce:18:8f:82:05:06:5a:15:a2:ca:d6:96:f7:
         f9:d5:98:fb:5d:d4:d3:c5:2b:e0:69:da:23:aa:a8:8e:56:88:
         d3:c2:6f:d0:1f:2f:35:25:00:61:c6:cf:3a:ee:af:9c:81:19:
         b6:fd:52:7c:09:7c:f4:9b:72:2a:09:93:1f:ec:d8:94:74:df:
         0d:97:03:11:0e:e5:82:be:ff:94:dd:35:8b:fa:b0:19:d1:19:
         d9:28:7e:29:38:8e:21:7a:82:c7:0a:c4:2f:81:c6:c3:c4:b9:
         cf:ef:bf:22:fa:76:51:d2:f8:1e:4f:1b:10:4c:fb:4c:d1:94:
         3a:00:49:f7:22:21:71:64:0d:c2:27:71:4c:d8:22:fc:84:25:
         69:31:c2:59:28:71:d9:03:b3:20:ab:db:05:ac:1b:bd:ca:e6:
         44:cc:76:bf:b9:53:63:67:22:b0:0b:ee:7e:b5:aa:d5:ec:f6:
         ca:6a:4c:43:fe:5a:b1:5d:b1:4c:f6:27:c9:6e:94:97:14:f3:
         97:a3:b6:14:73:48:53:4c:6e:a6:77:0a:45:28:a1:3e:b8:12:
         30:08:c3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:24 2024 by rpki-client on console-fra.rpki-client.org