Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File:                     1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier:          ENfsz/MMLzVYrv2lsuTGxoKc0AGgAS9ZL6uep8jyGbc=
Subject key identifier:   AB:E8:8E:2C:8D:F2:FA:6C:92:FA:73:AE:81:5B:6D:4E:D6:59:06:61
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer:       /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial:       01940721C21C5974852A9FDE38CB95783019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 08:00:40 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:40 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:40 +0000
Files and hashes:         1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: r+11aHsgHx4gEkq9ZpRzlOUkGM4f9UVLBVwlQ18mecc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:c2:1c:59:74:85:2a:9f:de:38:cb:95:78:30:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
        Validity
            Not Before: Dec 27 08:00:40 2024 GMT
            Not After : Dec 28 08:00:40 2024 GMT
        Subject: CN=abe88e2c8df2fa6c92fa73ae815b6d4ed6590661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:c0:07:71:0a:12:b4:39:83:6c:ed:c5:8b:
                    cc:4b:b7:86:75:a2:55:f1:c0:21:8e:79:25:92:45:
                    a6:4b:e0:56:63:a1:61:36:27:22:c0:c5:f9:e1:4d:
                    95:18:8a:89:bf:db:ed:f0:9e:27:28:5c:7a:78:29:
                    e9:0d:78:69:cf:ab:13:48:54:4a:7e:e6:70:35:d0:
                    cd:a9:e8:27:b3:9a:72:38:1e:bb:a4:f9:e9:ab:9a:
                    09:7a:e9:18:02:53:eb:ea:9d:6d:d1:95:ea:c1:bb:
                    25:7a:7b:31:01:bf:cc:5b:27:30:0b:53:bf:d7:69:
                    0e:a2:59:47:39:83:78:0d:4b:c5:37:ff:0c:77:46:
                    67:19:ad:82:9a:cf:9f:7f:ba:06:74:34:4b:3d:e7:
                    21:78:2c:1b:29:bd:14:d0:ec:a0:25:16:b8:1a:92:
                    11:39:f3:c8:1c:45:98:b7:92:15:71:63:3e:81:4e:
                    3d:82:d7:e7:74:0b:fa:92:38:5f:a1:d4:eb:95:e7:
                    27:16:d4:6c:fb:36:6a:f5:9c:29:15:fc:d1:6f:29:
                    f2:ef:34:b6:97:54:74:2e:8c:b4:08:4b:67:d0:67:
                    de:07:31:14:3c:a5:c3:30:3b:19:38:a7:e1:d0:a8:
                    be:a6:64:17:7b:ac:4a:3c:b1:6b:45:12:89:b8:d7:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E8:8E:2C:8D:F2:FA:6C:92:FA:73:AE:81:5B:6D:4E:D6:59:06:61
            X509v3 Authority Key Identifier:
                keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:33:a4:94:61:3b:61:41:8e:04:d6:41:b4:9e:15:81:ba:
         4b:a1:44:00:35:be:05:46:f3:52:c5:3e:70:33:63:60:50:16:
         7c:1f:f0:3b:d7:0f:b7:09:25:36:d6:a0:d8:d0:c4:53:0d:d5:
         3f:f2:49:2b:8c:f8:a1:70:e3:1e:c8:d2:06:22:15:01:ed:a5:
         52:4c:af:95:74:13:a8:0c:59:bf:fa:4f:0a:ac:9e:13:5c:3c:
         ad:c4:61:ae:6c:7e:64:f4:74:68:7a:ce:f2:13:18:64:0b:7a:
         27:07:80:3c:ca:11:06:b5:1f:e4:fe:0a:02:84:3c:43:13:10:
         7e:c8:53:72:e7:cf:9c:b3:50:0c:a2:b7:6e:ea:87:e9:72:05:
         4e:83:a8:f4:e2:07:e9:35:c6:de:78:2b:4f:2c:31:e4:ab:2c:
         7d:65:5e:a7:f5:2a:25:68:9e:c1:55:c3:1e:e8:57:37:a9:fd:
         2c:5c:b4:94:d0:ff:82:38:22:21:52:2b:4f:65:b8:07:d1:70:
         1b:a6:a0:2a:20:f6:81:70:47:9d:6f:11:08:54:0d:ea:11:bf:
         b2:63:8d:d2:a4:f4:b8:e3:a8:68:bd:f5:57:37:f3:6e:e7:ea:
         5a:9a:f1:19:95:6a:c0:c1:c3:ae:da:f3:d6:65:dd:e5:58:03:
         dd:3d:43:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:07:10 2024 by rpki-client on console-fra.rpki-client.org