Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/036cbd-6ff5-4c15-bc45-dc4f13ec6726/1/_o0I7SSEUNzWIlV9nmdL7LLpnA8.mft
File:                     _o0I7SSEUNzWIlV9nmdL7LLpnA8.mft (raw, json)
Hash identifier:          9Rlu/xaB1OyQrlljHpsRqc6QKi7lJevbk1GEXNX8dgs=
Subject key identifier:   86:30:54:FE:DE:37:97:75:EF:F7:65:1D:31:F8:A4:15:65:40:4A:F8
Authority key identifier: FE:8D:08:ED:24:84:50:DC:D6:22:55:7D:9E:67:4B:EC:B2:E9:9C:0F
Certificate issuer:       /CN=fe8d08ed248450dcd622557d9e674becb2e99c0f
Certificate serial:       0193568987E2AB50B708E13D6336B603033F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_o0I7SSEUNzWIlV9nmdL7LLpnA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/036cbd-6ff5-4c15-bc45-dc4f13ec6726/1/_o0I7SSEUNzWIlV9nmdL7LLpnA8.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:01:13 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:13 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:13 +0000
Files and hashes:         1: _o0I7SSEUNzWIlV9nmdL7LLpnA8.crl (hash: XdVtv669o8p0M508kkFgdePalpDvvFprD3ppjGiWF7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/036cbd-6ff5-4c15-bc45-dc4f13ec6726/1/_o0I7SSEUNzWIlV9nmdL7LLpnA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/036cbd-6ff5-4c15-bc45-dc4f13ec6726/1/_o0I7SSEUNzWIlV9nmdL7LLpnA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_o0I7SSEUNzWIlV9nmdL7LLpnA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:87:e2:ab:50:b7:08:e1:3d:63:36:b6:03:03:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8d08ed248450dcd622557d9e674becb2e99c0f
        Validity
            Not Before: Nov 23 01:01:13 2024 GMT
            Not After : Nov 24 01:01:13 2024 GMT
        Subject: CN=863054fede379775eff7651d31f8a41565404af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:cf:e9:42:75:89:e0:62:6a:6b:dd:b9:1f:
                    af:89:d6:ae:9a:81:b4:d4:b4:f1:11:3f:b3:b8:1f:
                    49:0a:2f:01:4b:1c:2e:f8:49:4d:d8:55:42:ae:69:
                    87:e9:bc:96:2f:54:bd:d4:5a:4b:96:07:93:19:fe:
                    07:a5:b8:54:d0:d4:4b:06:a1:c7:d1:cf:2c:a7:15:
                    06:a8:e4:81:29:26:af:8a:0f:30:0d:ec:11:2a:62:
                    d9:1f:d7:b1:e2:26:c7:69:0c:6b:92:56:a5:ea:d2:
                    02:92:1b:8e:04:69:32:41:b6:dd:24:e6:04:02:78:
                    36:3c:36:de:9a:f5:b0:82:43:66:7b:88:60:37:69:
                    c3:72:01:ed:12:57:a2:86:36:6a:67:e0:18:1e:a9:
                    73:c4:81:f8:a5:38:81:35:04:ca:4b:e0:aa:e0:97:
                    d6:6b:8f:49:4d:17:49:db:a8:36:4b:a6:cb:96:75:
                    16:0a:ce:db:19:cd:13:88:9f:0a:9d:8c:74:49:55:
                    3a:b4:59:08:45:f3:24:69:75:bd:e8:49:45:30:28:
                    dd:70:38:fb:c2:00:11:fa:b4:7e:75:29:d7:68:e3:
                    66:db:78:a4:a4:37:13:bb:37:c4:e5:ba:9a:44:00:
                    ad:de:a1:1c:b3:1d:dd:3d:6f:5e:48:51:29:db:6d:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:30:54:FE:DE:37:97:75:EF:F7:65:1D:31:F8:A4:15:65:40:4A:F8
            X509v3 Authority Key Identifier:
                keyid:FE:8D:08:ED:24:84:50:DC:D6:22:55:7D:9E:67:4B:EC:B2:E9:9C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o0I7SSEUNzWIlV9nmdL7LLpnA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/036cbd-6ff5-4c15-bc45-dc4f13ec6726/1/_o0I7SSEUNzWIlV9nmdL7LLpnA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/036cbd-6ff5-4c15-bc45-dc4f13ec6726/1/_o0I7SSEUNzWIlV9nmdL7LLpnA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:79:45:50:df:c7:22:fc:bd:60:79:e1:46:25:2e:41:02:27:
         fd:2d:c7:ea:d9:5a:c5:b7:58:b5:22:15:5d:6a:3a:d7:d1:b9:
         72:03:29:e8:f5:f2:3c:c0:7a:56:d3:15:bf:de:be:72:a0:70:
         99:5c:70:87:36:cf:f3:52:24:d8:2d:3a:61:2f:26:9d:d1:eb:
         8a:ac:29:ef:f8:a0:65:0d:20:b8:4b:c0:51:e1:fc:aa:dd:b5:
         9f:b6:9d:e5:a3:77:2e:ba:72:7b:38:f5:ed:a0:2e:23:58:81:
         c0:a0:1e:fa:d9:60:00:d7:1e:ea:ad:94:a4:28:44:32:ec:89:
         df:fe:5e:ab:6b:fa:bd:1b:00:41:1f:54:51:b9:fc:ff:30:4c:
         66:fa:83:0b:0c:50:4e:ee:65:74:61:df:de:45:50:69:0b:f4:
         1b:51:09:dd:db:6c:81:1e:8e:fa:be:a3:ba:ab:a1:2c:14:db:
         ca:d4:2d:dd:dc:be:b3:3a:8b:00:58:ae:d1:04:05:c7:15:92:
         86:36:ab:50:08:7e:f8:c3:b2:3e:f7:2f:da:bf:27:98:08:d6:
         1b:3e:28:68:14:2d:dc:41:7e:6d:61:41:52:85:89:09:64:c1:
         86:4c:dd:c4:33:8a:69:b9:35:83:d0:91:c8:73:07:94:03:65:
         8c:53:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:56 2024 by rpki-client on console-ams.rpki-client.org