Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File:                     20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier:          TuW0J/hKGTudD8qR0PWSJ1qsf5ji40qqWEcchkJ9HEo=
Subject key identifier:   05:46:F0:4F:E1:E3:F6:C9:33:C7:9D:3B:04:F7:7E:B7:6D:48:A3:6C
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer:       /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial:       019357D2DC05FC0605BC46B418E1D77A44E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 07:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:56 +0000
Files and hashes:         1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: coXcSnuRTKwp/tqVlWoS621cBKFGUVVSeZzOZi8C63A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:dc:05:fc:06:05:bc:46:b4:18:e1:d7:7a:44:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
        Validity
            Not Before: Nov 23 07:00:56 2024 GMT
            Not After : Nov 24 07:00:56 2024 GMT
        Subject: CN=0546f04fe1e3f6c933c79d3b04f77eb76d48a36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:63:ea:ce:34:6f:a1:d4:f2:7e:2a:7a:e8:
                    db:f1:e6:61:ad:3c:7a:8f:5c:4a:45:0c:1f:ba:96:
                    17:33:07:5d:d2:5e:9a:ff:97:e8:38:c8:65:77:d0:
                    4c:4a:af:a9:64:7b:19:f9:3a:96:27:97:0b:2e:d1:
                    1e:43:15:c5:df:8a:9c:0f:74:3f:ba:10:ee:c4:60:
                    05:a6:7d:d5:96:b2:06:ef:c3:76:d3:5b:bb:b8:cf:
                    5d:1a:35:c5:8a:e4:7d:d5:03:80:ac:ed:b3:69:c5:
                    80:86:c7:a5:91:af:b3:7f:93:5a:2e:61:0f:2e:4c:
                    d5:1f:79:24:ce:73:e3:63:d1:e5:16:e4:55:ed:af:
                    76:26:cb:9e:b8:30:c1:0e:1f:55:a5:3b:af:46:bf:
                    ee:ed:f2:5b:ed:18:86:5a:90:84:a8:f3:6a:7e:18:
                    43:df:ba:9d:04:bf:4b:48:38:46:76:28:51:d2:98:
                    82:1d:c0:37:47:5c:40:4d:4a:4e:0b:ae:80:2d:5b:
                    ac:c4:02:e3:10:83:28:c1:1b:1e:8d:1c:38:13:1d:
                    c1:0a:16:d1:a3:ab:b4:54:af:df:7c:c6:c8:17:2f:
                    0c:66:ea:9a:b4:96:ba:38:40:16:a2:2e:74:06:70:
                    86:d1:8d:ef:86:0a:4f:e7:6c:c7:d6:f8:59:1c:eb:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:F0:4F:E1:E3:F6:C9:33:C7:9D:3B:04:F7:7E:B7:6D:48:A3:6C
            X509v3 Authority Key Identifier:
                keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:06:0c:7e:7c:92:d7:16:f6:9d:ea:c1:23:99:b6:6d:b4:3f:
         20:58:8a:4a:29:db:64:bc:07:64:15:a8:9b:44:55:0a:36:ea:
         91:cc:54:bd:86:aa:03:c6:7b:cf:1c:59:0b:83:9d:26:0a:25:
         d1:ad:48:69:62:9e:ea:b2:58:0a:2c:e4:b7:d3:43:41:fa:ac:
         84:2e:7a:b4:e8:43:86:71:0a:cb:71:eb:40:d1:10:c6:ee:bc:
         0e:39:d1:8d:c1:56:9e:d0:2f:04:22:6e:44:27:0c:42:7c:2d:
         81:9b:15:9d:1b:0b:53:50:4d:6c:cf:44:45:8d:3c:33:3a:22:
         b6:e6:5a:9a:5a:79:2b:91:9c:ea:bf:1d:78:94:de:a7:de:b8:
         bb:d4:db:04:d8:1e:ed:62:80:0e:54:96:5f:f2:9a:d7:32:6c:
         31:08:68:24:81:6c:ed:e2:88:10:ab:76:d6:54:66:9f:7a:d1:
         29:85:a5:dd:2c:40:18:d2:63:34:bb:92:ae:ef:fc:4e:47:06:
         3d:90:2d:fa:a4:ff:ba:7b:f2:1c:19:7c:78:8d:e7:c4:4f:35:
         87:8c:ad:46:33:35:b4:f5:9b:22:00:80:66:a3:8f:cf:7c:a3:
         38:ae:ce:0b:49:9c:e9:18:8d:08:9d:43:5b:3c:a8:c8:a4:42:
         4c:e6:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:05 2024 by rpki-client on console-fra.rpki-client.org