Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
File:                     IInyGLYJHgA8yVGa-JSqojzdjEI.mft (raw, json)
Hash identifier:          2ReBD13kf1IuYqRbfMgASA4x5Xle+UEZoPm9nPycpoA=
Subject key identifier:   24:EC:14:92:F1:29:D7:E1:11:4F:F0:69:6D:9A:1F:10:50:7E:D9:DA
Authority key identifier: 20:89:F2:18:B6:09:1E:00:3C:C9:51:9A:F8:94:AA:A2:3C:DD:8C:42
Certificate issuer:       /CN=2089f218b6091e003cc9519af894aaa23cdd8c42
Certificate serial:       019364445CBBF659E48B25B19B369D9925F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IInyGLYJHgA8yVGa-JSqojzdjEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
Manifest number:          84
Signing time:             Mon 25 Nov 2024 17:00:21 +0000
Manifest this update:     Mon 25 Nov 2024 17:00:21 +0000
Manifest next update:     Tue 26 Nov 2024 17:00:21 +0000
Files and hashes:         1: IInyGLYJHgA8yVGa-JSqojzdjEI.crl (hash: YWO3j41JE3fLxGJ0JmhpXnA940pRkbg9fAXIrMjEVwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IInyGLYJHgA8yVGa-JSqojzdjEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:44:5c:bb:f6:59:e4:8b:25:b1:9b:36:9d:99:25:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2089f218b6091e003cc9519af894aaa23cdd8c42
        Validity
            Not Before: Nov 25 17:00:21 2024 GMT
            Not After : Nov 26 17:00:21 2024 GMT
        Subject: CN=24ec1492f129d7e1114ff0696d9a1f10507ed9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:c5:f2:e6:fc:00:9d:73:19:08:4f:31:83:
                    8e:3f:07:f7:41:43:98:8b:dc:b4:17:66:8c:ee:db:
                    17:4c:8c:4f:e8:53:aa:85:92:17:59:07:cb:d6:29:
                    eb:a8:de:dc:c1:e5:ad:af:ac:a2:78:55:6f:f2:92:
                    4a:48:62:ec:d5:54:70:2c:86:f6:25:09:ab:f1:40:
                    a6:1a:7e:d0:a0:a6:72:92:05:7d:05:1d:c7:91:d8:
                    a3:9a:00:db:eb:ce:90:47:2c:8a:26:45:76:3c:19:
                    84:0f:13:49:30:3d:75:88:7e:35:33:91:54:45:07:
                    e7:26:5a:fc:92:0c:11:b2:2f:86:7c:66:74:79:6a:
                    6a:c3:e1:c6:58:d7:ac:92:69:3b:92:c6:ef:6e:c8:
                    55:1e:c4:5b:04:07:96:2c:65:d9:ec:b0:09:eb:9a:
                    45:ef:d9:f7:d8:6a:22:70:f6:25:9c:d0:97:5d:75:
                    5d:3a:0e:37:b6:df:ba:f4:87:8a:53:4f:77:66:7e:
                    1f:24:1b:91:0f:b9:27:a6:76:d9:9e:68:dd:fe:25:
                    1e:85:14:2e:b3:0b:06:15:e9:57:ac:03:f2:fa:ac:
                    36:f9:1f:af:1e:91:05:3f:77:4f:a3:36:dc:04:00:
                    a3:d4:88:12:8a:8f:af:5b:31:e0:43:15:b9:84:7d:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:14:92:F1:29:D7:E1:11:4F:F0:69:6D:9A:1F:10:50:7E:D9:DA
            X509v3 Authority Key Identifier:
                keyid:20:89:F2:18:B6:09:1E:00:3C:C9:51:9A:F8:94:AA:A2:3C:DD:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IInyGLYJHgA8yVGa-JSqojzdjEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:30:42:1c:97:1c:4a:45:f0:21:22:12:79:2c:63:5d:e7:02:
         52:a6:09:08:5c:db:1c:13:f0:ed:6b:1d:b2:98:64:be:03:52:
         46:a9:53:65:5b:12:7b:ba:b3:95:89:49:3e:f6:0b:88:ff:73:
         3b:9d:15:7f:ca:49:e0:81:61:5c:ee:1a:6f:66:93:a7:de:b2:
         b6:c9:b3:ff:90:e1:ba:a8:73:44:2f:d5:f5:b2:fc:0e:fd:a1:
         c1:28:61:2e:89:79:18:84:f9:2f:36:7e:92:f7:5e:40:fb:52:
         f5:0d:0e:2b:1c:dc:9c:cd:4c:dc:f2:50:4d:5d:59:24:10:a9:
         8c:c0:93:e3:bc:4a:47:65:42:29:0c:02:94:78:75:f2:74:41:
         8c:53:95:04:e9:7d:8f:8f:6d:f9:e6:2a:b8:75:9c:36:17:c9:
         ae:3a:b6:33:ec:9f:cd:6a:ba:1d:f2:2c:1f:52:bb:bc:09:5f:
         92:50:72:dc:eb:9c:88:f4:2f:d9:eb:5b:32:8c:f8:bd:a8:77:
         09:0c:9a:04:70:10:fe:6f:ac:32:ff:87:fd:6b:e0:bc:44:6e:
         1a:5d:ff:d5:80:2b:54:96:94:9d:41:7e:34:3b:f9:ab:d3:85:
         88:72:5a:51:e9:32:6d:da:a4:e6:b2:95:3f:0f:65:c3:e7:6d:
         fb:a9:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:23:31 2024 by rpki-client on console-ams.rpki-client.org