Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          ze+eU/7j5aS5xfLry5a0WwfpHoQsCcEAt3bPS2R4V5k=
Subject key identifier:   04:45:A5:73:F7:21:10:29:CC:58:62:88:C1:BE:82:15:E7:C2:30:2A
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       01936B2286CFC1DDC3B25D0BBA9C72FFE5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          1378
Signing time:             Wed 27 Nov 2024 01:00:44 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:44 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:44 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: gk+7zN9m+r20lRNTBFMZerMaijHeVeB53BpSYnvJKBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:86:cf:c1:dd:c3:b2:5d:0b:ba:9c:72:ff:e5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: Nov 27 01:00:44 2024 GMT
            Not After : Nov 28 01:00:44 2024 GMT
        Subject: CN=0445a573f7211029cc586288c1be8215e7c2302a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:97:46:86:30:72:de:0e:ed:8e:6b:33:9f:
                    8b:b1:df:79:3c:d9:2a:fa:67:3e:7b:66:99:aa:d1:
                    29:06:f7:03:de:82:4f:0a:88:30:76:ad:7f:35:ee:
                    2e:57:e7:26:62:11:be:85:9a:e3:8e:12:63:3d:25:
                    1c:2e:a6:61:8c:d5:af:2e:1d:8c:c2:23:24:b7:26:
                    d3:ba:3d:d9:b4:51:2a:27:c9:fd:bb:6e:86:98:f4:
                    4b:69:78:d2:8d:fd:da:80:b6:cc:14:1a:4d:aa:67:
                    4d:16:67:a6:5a:39:da:ed:e7:6c:c8:7a:29:ca:41:
                    d1:54:b2:52:a0:a5:b2:77:c2:5a:89:67:37:04:bc:
                    56:a0:6c:b4:bc:46:3d:27:b0:f1:e5:dd:06:71:2a:
                    d9:e2:9e:3c:80:59:9a:7a:2e:f5:bd:09:9c:98:01:
                    8d:73:bc:2d:aa:ea:2a:13:81:61:30:ab:8f:35:bb:
                    ec:62:01:0e:ff:b4:8e:35:11:7a:3e:4b:27:2e:2d:
                    bc:3c:d5:67:31:54:64:13:57:a8:76:75:eb:a0:cc:
                    6e:0d:ca:1f:22:97:41:be:6b:fe:a7:b7:6e:d9:f7:
                    c8:20:9b:f9:50:62:99:61:33:ed:84:95:d5:a9:28:
                    92:8d:9b:d5:8b:ed:f6:87:20:55:33:b3:fc:eb:ff:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:45:A5:73:F7:21:10:29:CC:58:62:88:C1:BE:82:15:E7:C2:30:2A
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:36:01:7f:8f:35:88:18:12:7c:51:0d:08:27:8d:81:4b:
         94:c8:8b:97:13:8f:6a:ca:f3:fa:cb:78:0f:83:8b:63:47:b2:
         2d:ff:10:44:60:60:e4:56:65:6a:09:e4:c5:09:ea:7e:70:32:
         19:3c:71:8b:bb:ed:94:5b:17:1f:b4:aa:aa:da:90:36:dd:21:
         d3:63:b8:03:0e:9d:0d:48:b4:3c:51:1e:40:10:ad:37:26:08:
         89:0a:df:77:39:1c:b8:1f:1e:d3:34:ef:61:a9:bc:e0:d6:38:
         cc:b2:78:52:80:5e:f5:15:ed:92:e2:54:a0:76:d4:74:92:87:
         02:f4:48:cc:04:6b:93:30:8a:0a:31:b0:cf:97:f8:67:01:a1:
         92:b7:cb:4d:7e:de:53:82:3b:7d:82:0b:ec:d3:41:59:d2:e3:
         79:38:c5:4c:cd:65:91:d6:9f:93:37:b7:ce:88:77:9f:66:72:
         97:e5:cf:4f:60:d3:8e:9a:aa:f2:e4:37:5e:93:e7:67:31:3d:
         93:03:1b:70:d7:64:b0:15:48:3b:2f:b9:2b:56:1e:01:f8:bd:
         04:32:ea:46:e5:83:e4:1b:1a:8d:eb:29:9f:7e:88:9f:c1:47:
         7f:d7:d7:2e:0c:3b:9e:ca:14:e5:f2:8a:29:97:e7:e8:0c:e4:
         8d:56:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:00 2024 by rpki-client on console-ams.rpki-client.org