Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File:                     IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier:          wz78qIGw95Tl8l++RR+yIFFKh5CpwiWCVkWnGyZLFLk=
Subject key identifier:   88:BF:B9:7A:21:29:3E:D7:A9:EA:3C:61:2B:B6:78:EC:E9:44:3A:10
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer:       /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial:       0193568ABD0A1D7BAB991E236533A988CD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:02:33 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:33 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:33 +0000
Files and hashes:         1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: 1HNO6FLqMqPqc/bhF4Y+fCpU9nJYQh3pUe6OzNS7+ug=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:bd:0a:1d:7b:ab:99:1e:23:65:33:a9:88:cd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
        Validity
            Not Before: Nov 23 01:02:33 2024 GMT
            Not After : Nov 24 01:02:33 2024 GMT
        Subject: CN=88bfb97a21293ed7a9ea3c612bb678ece9443a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:59:3e:db:e8:cb:bb:fe:db:14:89:39:94:
                    d9:cc:8e:68:2f:ec:2a:da:82:3b:cc:82:50:9f:b0:
                    c3:e8:13:8d:f2:81:cf:fe:ed:48:72:21:5a:7b:59:
                    88:5e:09:e9:af:08:b5:46:db:ac:b9:b1:16:ae:46:
                    16:82:1e:03:69:11:15:0f:99:b5:04:c1:dd:03:dc:
                    ac:0a:e2:05:7b:2a:3f:a3:8b:15:09:f1:7f:6b:93:
                    24:b1:7f:8b:89:2e:11:47:d1:87:85:09:41:a1:c1:
                    ef:c6:71:e7:66:c9:6d:76:2c:89:03:d5:ba:49:7d:
                    43:e2:32:2d:7c:be:ae:b0:6c:56:fa:61:c7:e1:34:
                    55:9e:d4:38:ed:34:e7:34:28:69:46:9c:bd:24:d3:
                    07:f6:2b:e5:32:66:6a:20:6c:8f:89:32:d6:d7:d1:
                    4f:2d:08:ce:60:d8:dd:ee:5c:d8:a9:a1:01:86:f2:
                    02:ed:c7:af:3f:af:9d:a6:5a:29:2a:28:c4:a4:01:
                    cd:a6:fd:b4:c1:77:a1:8f:cf:80:66:05:50:93:e9:
                    b6:0d:6b:de:df:24:93:8e:5b:e5:bc:43:9b:2c:2a:
                    88:24:cd:a6:d6:d6:5b:5f:47:78:b2:8a:37:ad:b3:
                    b6:85:78:10:de:d3:16:fd:be:8a:c5:43:7d:97:14:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:B9:7A:21:29:3E:D7:A9:EA:3C:61:2B:B6:78:EC:E9:44:3A:10
            X509v3 Authority Key Identifier:
                keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:c3:bd:bf:be:a9:c0:31:9a:51:d8:46:a8:1e:9a:14:24:
         ad:91:46:e7:11:ad:3c:30:83:ce:2b:eb:c8:6c:f6:70:ad:af:
         4e:c0:bf:07:d0:09:e9:20:dc:25:2f:0d:73:1a:c5:68:95:00:
         d5:e1:6b:d5:1a:26:a0:17:1a:14:d9:74:ea:ac:26:f5:59:14:
         cb:e4:87:75:9a:98:99:1e:20:51:bf:e6:87:df:b2:14:48:91:
         e4:98:46:ce:77:ed:28:60:dc:2b:cc:76:ed:8a:cd:e9:17:37:
         62:c0:26:ec:07:34:b7:72:63:30:9d:43:06:4b:1e:a8:83:93:
         71:3b:ed:71:d1:5b:3b:41:03:d1:ae:8e:c6:ee:40:05:bb:69:
         67:25:48:e2:d8:c3:41:39:fd:4b:ae:76:f0:f8:99:e3:6a:d0:
         d8:d7:f9:d8:f7:85:49:2a:f7:f1:38:1b:68:5b:dc:3e:4e:f1:
         85:53:53:ca:7b:67:b2:aa:53:d2:e5:6a:f7:71:4b:50:6f:08:
         ba:91:75:fc:4e:1d:99:65:49:50:5a:5b:1c:9d:e9:af:df:71:
         f5:3e:75:10:02:cd:e5:bf:ba:1f:52:65:ac:63:c0:db:4d:b5:
         32:0f:0d:af:ba:84:cf:e8:ba:a4:f0:45:80:8b:80:36:61:81:
         fd:43:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:24 2024 by rpki-client on console-ams.rpki-client.org