Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File:                     FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier:          JYmYzoFmTvvkPni46rBj0pEZ9294Bt8G4gmeCzpBMOA=
Subject key identifier:   B3:32:A9:AA:99:63:F3:28:5C:41:AE:CF:55:31:82:3B:4D:80:EA:5D
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer:       /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial:       01935877860F00DEB52231298F3213D0B917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number:          1302
Signing time:             Sat 23 Nov 2024 10:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:48 +0000
Files and hashes:         1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: EvIFaS2v7VJe+643Gb9ms0q3E2WFHv/ohktjXh9OB1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:86:0f:00:de:b5:22:31:29:8f:32:13:d0:b9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
        Validity
            Not Before: Nov 23 10:00:48 2024 GMT
            Not After : Nov 24 10:00:48 2024 GMT
        Subject: CN=b332a9aa9963f3285c41aecf5531823b4d80ea5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:df:cb:02:da:15:54:15:67:96:19:d2:53:
                    4e:cf:aa:cb:39:da:f4:35:86:ab:fb:71:94:d7:87:
                    d2:c2:74:c2:e5:84:78:61:55:25:3b:a1:92:de:60:
                    31:1c:fc:13:bf:e8:41:76:5f:20:a4:22:ae:51:ac:
                    68:20:25:e9:cf:5c:ef:04:cb:5c:86:80:55:f4:53:
                    7b:e9:ac:05:06:bb:29:60:1c:ec:36:c8:db:ba:73:
                    59:e1:ae:e6:b7:bc:ec:22:2e:20:74:6e:fd:e8:c9:
                    e8:a7:a8:67:dd:df:34:f3:c8:07:32:6c:1b:44:42:
                    6d:4f:d5:ec:ad:2f:04:02:61:d1:33:6a:a3:de:13:
                    71:36:09:8b:8d:b2:05:13:45:8e:bb:f8:32:d8:b0:
                    ec:4c:50:bd:80:87:58:03:0b:de:f7:ba:ee:fa:04:
                    7b:99:86:98:cb:44:59:90:68:c0:57:e7:c6:6d:6b:
                    30:63:b0:c4:94:92:cb:a1:22:9d:75:2e:93:10:0f:
                    dd:b9:64:1b:4e:c9:63:c8:da:87:6a:2f:d1:0a:7a:
                    e9:84:cd:4a:93:63:b4:2b:3e:94:e7:40:e9:d0:ae:
                    26:67:b6:ea:3e:82:6e:ae:54:a7:2f:78:e7:b1:b6:
                    d6:15:5b:6d:dd:10:e4:1f:7b:9e:32:48:ce:62:45:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:32:A9:AA:99:63:F3:28:5C:41:AE:CF:55:31:82:3B:4D:80:EA:5D
            X509v3 Authority Key Identifier:
                keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:aa:02:47:dc:fb:90:79:f1:6f:24:31:0e:eb:5e:2f:fa:85:
         77:98:f5:f0:42:ec:82:64:1f:7b:1c:7f:2f:ae:6a:c6:90:0e:
         e5:6a:75:b5:92:3e:75:9c:ed:e7:0d:be:25:f6:1e:78:c7:ee:
         89:e4:98:38:d3:e2:0e:18:b4:9f:3c:72:ea:b4:4a:9d:35:15:
         8b:f5:cb:c4:40:5f:ce:b4:ed:be:a5:bf:8b:a8:03:22:be:30:
         1e:01:31:bb:39:a5:16:e9:a9:e8:c4:5e:d4:9f:e9:a3:5e:ec:
         96:9b:f9:4f:3e:02:6e:41:e2:47:e6:02:b8:af:b4:20:2e:5c:
         f3:0d:9b:b1:53:97:4f:02:e3:79:99:e9:11:11:25:65:3a:dd:
         e0:d6:5e:cb:f8:49:45:9f:9b:f2:76:f7:1f:7d:b3:9d:2d:0c:
         f1:26:f0:8d:c2:44:fa:4f:11:5f:f9:23:e9:40:94:03:33:dc:
         45:40:bd:73:ad:79:2d:0c:a3:54:6a:40:68:b2:01:81:6f:88:
         29:97:9c:c2:80:3c:45:bd:1a:c5:ef:4c:3a:3f:3f:a3:3d:96:
         6d:61:65:e5:7f:45:58:dc:53:18:73:4e:16:70:ea:ef:11:62:
         66:b4:c7:3b:cd:7f:cc:10:d9:87:d5:5f:57:a0:8e:88:fa:28:
         1a:ef:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:15 2024 by rpki-client on console-fra.rpki-client.org