Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          WqQksvDSUXoqOnBXs3FMlRre04Kk+r5vi+Gb5eRk5L4=
Subject key identifier:   B1:90:A3:34:DA:66:FD:B1:72:3D:FF:1E:6F:27:FC:50:80:26:2E:14
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       019358789E243B3972C628C69036D85A6EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          0A57
Signing time:             Sat 23 Nov 2024 10:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:00 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: BaDRWa1LNp3IYh1kxsV5qaNI6n8Axzo9eeaQb2Q77kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:9e:24:3b:39:72:c6:28:c6:90:36:d8:5a:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: Nov 23 10:02:00 2024 GMT
            Not After : Nov 24 10:02:00 2024 GMT
        Subject: CN=b190a334da66fdb1723dff1e6f27fc5080262e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:a0:61:79:6a:18:c0:ad:bc:1e:91:d1:33:
                    c2:10:83:28:de:20:65:1a:5a:42:97:41:f4:bf:5a:
                    86:57:d4:b5:7f:a3:ac:c6:ea:26:2a:dc:02:2a:df:
                    8c:f0:59:65:8c:bb:e6:26:99:0c:41:55:06:ce:a3:
                    72:a0:f2:56:81:4c:db:e2:67:00:c4:f7:fc:10:38:
                    cc:63:f9:56:49:bc:ef:5d:83:83:58:04:af:3a:2f:
                    4d:d9:e1:58:0e:b0:d3:45:65:cb:c5:b0:f8:17:3f:
                    13:02:89:40:0b:23:85:06:91:1d:b3:43:e1:83:15:
                    6a:cf:4d:22:a8:ca:ba:3e:2f:23:fd:cf:eb:5e:ec:
                    e0:35:05:9b:22:47:53:6c:a3:18:3f:c8:fc:6e:ed:
                    4e:a3:42:e1:8f:bb:d6:e0:71:16:4e:03:00:39:42:
                    bb:52:4b:92:fa:b6:fc:69:ca:09:87:3d:fb:88:f7:
                    70:c8:46:8e:07:0e:1b:ac:8b:5d:a0:91:f1:f7:ac:
                    01:a1:05:c1:d6:19:7c:0e:f4:85:fb:6f:1c:7c:b7:
                    3c:2a:41:f0:fd:be:de:21:01:e2:6c:40:8c:d0:70:
                    50:e3:91:86:ca:e8:44:58:4d:cf:6f:8b:89:03:7f:
                    72:2b:3b:29:97:9f:91:8e:ee:bf:6b:c1:83:8e:fa:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:90:A3:34:DA:66:FD:B1:72:3D:FF:1E:6F:27:FC:50:80:26:2E:14
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:f3:c9:12:31:9c:c7:35:c4:a6:94:77:4d:d7:6e:c3:cb:
         ee:46:58:7b:b0:59:df:af:38:04:cc:c2:67:1b:ab:db:3b:0d:
         b5:5a:af:20:18:2b:ed:a5:34:09:d9:c0:23:ed:92:c4:8c:0e:
         07:bd:0c:00:b6:3b:12:4a:9a:bc:01:eb:c4:79:07:36:3b:dc:
         4c:80:5a:96:5d:5d:6c:90:d2:5e:69:58:6d:4a:e1:32:46:f5:
         31:37:2d:bc:b4:75:a6:28:cc:89:f7:31:72:f0:c8:7c:78:79:
         ad:11:54:11:1d:b6:62:56:14:20:af:9e:a6:35:f8:b8:c5:7f:
         80:d8:44:e4:e3:69:92:b9:79:96:8b:33:54:c5:2a:68:79:eb:
         36:73:7e:be:48:7b:6d:16:1e:6a:77:a6:a6:b4:b9:b8:c3:e9:
         f2:1b:3f:6a:c1:4b:2e:a5:2d:db:1c:5a:21:fa:85:5d:57:5d:
         ef:24:1d:78:05:30:de:b6:01:06:af:c6:be:eb:b2:57:58:fc:
         ab:b4:6f:95:c6:f2:33:62:d2:ee:0d:c2:5c:9c:5c:25:b9:9d:
         e3:a4:7c:ee:11:34:77:fe:26:99:63:c6:49:37:a1:0c:95:02:
         ff:e5:6c:79:98:da:58:44:8c:02:9d:b6:45:42:3c:ac:09:14:
         9a:ff:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:20 2024 by rpki-client on console-fra.rpki-client.org