Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          PsbTOrw261qEErOjuGr0Gushe1sov47WlcadkuonIPk=
Subject key identifier:   FF:7D:01:0C:83:E0:39:3D:87:A5:A4:D4:5D:3B:B0:5B:E0:61:98:0D
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       0193576480366C6CF57D2F7DA252CBE8C0D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 05:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:24 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: wRE4OWo87yEVFJ77Jbi+/7cacbl4e5njGdsXyrbOJPI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:80:36:6c:6c:f5:7d:2f:7d:a2:52:cb:e8:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Nov 23 05:00:24 2024 GMT
            Not After : Nov 24 05:00:24 2024 GMT
        Subject: CN=ff7d010c83e0393d87a5a4d45d3bb05be061980d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:81:98:b5:29:71:ba:df:db:5d:c7:5c:de:
                    01:ce:47:16:c5:b6:54:6a:ce:82:24:5d:96:a0:1f:
                    4b:8a:2d:f4:22:31:54:2a:38:87:85:7c:50:af:41:
                    1c:71:0e:81:a3:09:3c:af:eb:6b:af:97:dd:87:3e:
                    2f:ad:e9:4b:80:65:ae:e4:50:2e:a5:59:fb:92:23:
                    65:92:dd:c6:6b:2f:a7:0b:85:f5:b0:35:7a:06:e1:
                    32:f4:e5:f8:26:49:55:de:6b:11:b3:e8:14:40:0b:
                    06:4a:b3:11:68:5c:a9:cc:7d:aa:ee:b1:e3:99:8d:
                    7a:d4:5a:3b:b1:3c:d6:93:71:72:93:42:5b:eb:32:
                    5a:e9:8c:17:24:16:bb:bc:d3:aa:f9:e8:62:e8:d7:
                    50:d1:f8:5e:6f:b8:ee:ad:4f:a6:86:72:02:ec:93:
                    1b:30:b7:c7:a9:ca:b4:9d:99:e7:13:4a:4d:88:4c:
                    f1:aa:89:5b:76:a0:ee:86:6a:b1:1f:a3:9e:52:b5:
                    a6:6b:7f:56:8c:30:04:43:ee:1f:08:51:69:ab:e3:
                    9d:76:5e:98:c7:67:da:5d:83:3b:7c:0b:26:36:0e:
                    d0:94:d0:56:2f:20:b1:26:5d:7a:4a:05:cb:3a:97:
                    f3:d1:70:68:b5:dc:ab:ea:8c:fb:35:34:9e:96:bd:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7D:01:0C:83:E0:39:3D:87:A5:A4:D4:5D:3B:B0:5B:E0:61:98:0D
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:6a:de:d7:6b:73:b5:f4:d3:6a:a5:fb:cf:16:7f:69:bb:
         28:df:bf:29:73:8d:5c:a0:b5:9d:e3:34:4c:9e:5f:33:58:f1:
         61:3e:38:30:cb:17:33:75:26:e4:f1:e9:f2:37:c9:49:1f:a5:
         f9:6d:af:94:e0:7d:4a:fa:71:71:88:6d:49:fe:65:d2:e2:cc:
         1e:ea:da:59:31:c3:01:ae:4a:bc:52:89:38:3f:4b:04:76:63:
         26:78:93:17:97:29:70:57:57:a5:35:94:ac:2c:a4:9e:1d:08:
         3d:94:6e:1f:11:a2:08:1c:6a:ee:00:00:6f:3a:5d:b9:50:9e:
         37:24:00:5e:74:e2:92:bf:1c:9b:7e:61:95:79:44:73:2f:19:
         ff:20:c2:9c:4f:84:cf:30:ac:59:b2:17:ff:27:22:a6:07:b4:
         13:f7:65:11:c7:48:4e:d5:d6:d8:f0:ec:a7:c7:7a:de:f6:56:
         da:e5:89:eb:c4:12:50:6f:d7:84:d5:d9:2d:59:54:ec:70:c1:
         bd:e5:95:8f:be:e4:3f:35:2d:84:17:46:a9:73:83:63:86:c0:
         08:89:a6:34:52:02:d0:45:ba:34:21:20:08:1c:5f:48:91:36:
         f6:02:00:d1:b7:ef:f2:de:84:59:60:a8:bf:ee:df:d3:fd:81:
         7d:3f:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:12 2024 by rpki-client on console-fra.rpki-client.org