Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          7t1ggYAijpoCNTx7DA/oJiamquX+JTIWC2x1Hvc1o/o=
Subject key identifier:   BB:2A:C7:6A:DA:32:6A:F5:C5:63:01:48:E3:B3:A8:0C:56:0B:66:0F
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       019356BFAD0BBA78B98DB8BAE12DDD16B7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          AF
Signing time:             Sat 23 Nov 2024 02:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:22 +0000
Files and hashes:         1: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: FoSTm9jyTRSSdM1fauAhjEpqjM9CqloMJp+dDO76eVU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:ad:0b:ba:78:b9:8d:b8:ba:e1:2d:dd:16:b7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Nov 23 02:00:22 2024 GMT
            Not After : Nov 24 02:00:22 2024 GMT
        Subject: CN=bb2ac76ada326af5c5630148e3b3a80c560b660f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:d3:30:c3:5e:5c:4d:de:f7:f5:6e:71:12:
                    67:56:de:34:ba:a7:a7:b2:77:89:4e:87:06:cb:b8:
                    80:6c:03:4f:b8:b3:a6:30:b1:9d:0c:2d:cf:0f:14:
                    9d:ac:e7:58:bb:07:c7:66:40:73:52:20:b5:b8:a1:
                    9e:23:2a:14:9f:64:f3:92:75:62:d6:5f:e8:ec:ad:
                    ba:e5:68:bc:d0:30:d7:29:16:15:58:8b:e4:b2:6e:
                    a1:db:36:73:e9:c5:d0:56:ff:f1:44:e9:04:8a:32:
                    71:29:ff:7d:6d:63:2c:70:62:1a:53:55:96:ca:df:
                    35:5b:2b:78:d0:5f:ba:c1:83:9b:6a:d0:77:ac:4e:
                    1b:e7:27:f8:8a:f4:02:f2:2f:ee:cc:36:a3:47:aa:
                    74:67:49:7a:e1:9a:cb:b6:c5:f1:14:43:01:c9:a6:
                    29:c4:34:fa:3a:e8:c7:13:38:17:4a:71:31:4a:cb:
                    0c:bb:0f:9d:22:07:f9:72:9d:dd:b4:91:6a:ec:a8:
                    0a:3f:91:be:15:6b:b7:c1:13:a6:4e:e9:68:94:6f:
                    0c:ab:3c:b3:87:04:17:24:94:4f:5a:b7:68:b0:bc:
                    56:f1:94:b7:7a:43:5a:d7:2a:f6:64:de:8c:9e:24:
                    23:40:71:b4:24:2c:8b:c7:08:06:fb:a4:2d:e6:38:
                    19:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2A:C7:6A:DA:32:6A:F5:C5:63:01:48:E3:B3:A8:0C:56:0B:66:0F
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:18:28:c0:3e:9f:e5:f6:7d:33:65:19:64:c0:4f:ad:70:c5:
         6e:85:12:5e:79:12:53:08:3c:7c:b2:1b:cb:fb:a4:01:33:79:
         0a:fe:3d:5e:80:5e:47:2a:d1:2b:f3:c3:3a:51:0d:63:2a:eb:
         61:5a:50:97:10:fd:3d:0f:f6:6c:b1:a3:c6:4d:f6:41:75:1d:
         01:6f:8a:44:28:f3:fa:8d:67:07:86:29:ae:8e:fe:3d:00:8c:
         9e:32:06:6d:c3:68:5d:06:8a:ea:d2:3c:7f:b5:c5:ee:25:51:
         63:fa:d6:3e:54:c4:ff:ed:4a:3a:2e:18:3d:74:0a:b6:43:91:
         2b:87:f4:4b:93:6c:a4:48:56:6d:59:05:d7:85:b8:b9:9e:fb:
         66:68:46:32:ee:31:bc:6d:43:50:92:6e:69:6c:b6:9c:78:97:
         b2:31:06:d4:12:b9:a8:98:13:a4:2e:66:23:e9:1f:fa:63:52:
         bb:90:1a:03:0d:5a:91:43:90:ff:ef:3c:dd:1a:a0:a4:da:aa:
         6c:55:98:6c:1d:9e:40:3f:05:b2:2f:28:47:3b:67:41:df:b7:
         87:fd:3f:5c:e0:f3:fb:58:90:07:c2:27:f4:4d:97:e5:36:e2:
         3b:e5:96:8b:c8:71:b3:ce:54:09:e4:48:79:33:b5:50:b2:68:
         76:3c:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:36 2024 by rpki-client on console-fra.rpki-client.org