Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File:                     4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier:          7Epva719azpUijsHQ2hnb3fphUs4cpfg6ZoOr4cs21c=
Subject key identifier:   F4:61:30:A1:D8:C4:48:0F:BC:64:E9:91:18:1F:29:0B:98:A1:BF:FB
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer:       /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial:       019356F6CEEC9148438E6BB4506F689A7F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number:          0A56
Signing time:             Sat 23 Nov 2024 03:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:35 +0000
Files and hashes:         1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: UCj7+FHP0uBaf9NW31Y/3CNFBL7lG8lpSnm06xVAuQA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ce:ec:91:48:43:8e:6b:b4:50:6f:68:9a:7f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
        Validity
            Not Before: Nov 23 03:00:35 2024 GMT
            Not After : Nov 24 03:00:35 2024 GMT
        Subject: CN=f46130a1d8c4480fbc64e991181f290b98a1bffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:35:71:f1:63:48:85:73:bd:9e:1e:77:a1:
                    9a:f8:76:09:e3:55:8c:86:f1:19:51:d1:6f:67:70:
                    f4:7d:fe:53:27:61:d7:44:49:31:84:7c:33:a4:33:
                    31:d2:a8:ae:56:37:10:9f:32:87:13:4f:3d:4a:ee:
                    0e:e1:01:47:82:0e:ba:d9:f7:1c:a8:7b:86:39:8b:
                    37:9a:01:05:10:1c:db:5b:f5:55:dc:dc:e1:cf:6b:
                    a2:2c:74:e0:33:3e:da:ff:05:9d:33:97:15:5a:7f:
                    2f:2b:77:7c:fa:5b:33:ce:bc:79:f4:49:3c:0d:c7:
                    d1:cc:1d:ba:61:6d:b0:44:e5:6c:01:ef:bb:45:3b:
                    e2:87:7a:69:30:cf:a7:cb:ec:02:2a:ba:e0:c7:0d:
                    30:f6:2b:9e:8a:ea:81:57:da:c9:e6:ee:03:1e:3c:
                    a8:2a:7a:bc:b6:4b:c5:fe:51:bf:52:60:20:5c:01:
                    e4:0b:25:d7:ba:eb:08:ea:1e:1d:85:ba:64:66:2a:
                    df:5e:b2:e2:63:97:31:88:5f:fa:fc:6e:31:53:07:
                    c0:36:dc:b7:fa:0c:de:e5:f5:ee:45:85:a2:f0:9a:
                    99:59:b7:d1:f7:bf:11:97:3e:20:ec:28:51:20:d8:
                    64:53:85:19:8c:c8:68:a6:8a:58:36:82:a2:f0:57:
                    95:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:61:30:A1:D8:C4:48:0F:BC:64:E9:91:18:1F:29:0B:98:A1:BF:FB
            X509v3 Authority Key Identifier:
                keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:28:df:c4:fb:db:8a:be:f3:ed:97:a6:55:eb:3f:42:97:
         2a:c5:c5:f7:09:5e:75:63:9c:ca:f5:96:20:82:d9:6d:c1:8b:
         2b:fa:25:1b:d6:41:c0:93:f7:04:e5:a5:0f:3a:99:da:a7:37:
         6d:e8:c6:46:c4:7e:25:49:60:16:56:37:f1:da:d7:22:b5:93:
         2b:4f:8a:ff:eb:11:4b:bc:ee:8e:9e:55:38:d6:2a:60:5c:aa:
         1f:67:aa:63:2d:e1:73:2d:97:e1:5c:e5:52:00:04:9e:e5:9c:
         2f:13:59:d1:2b:04:8f:10:3c:c5:88:24:2b:6d:e5:dc:e8:ce:
         bc:68:a7:98:31:a5:8c:96:34:34:b8:73:59:37:95:9e:d7:04:
         44:f3:0f:71:7a:dd:80:87:25:e0:c0:b4:f1:ba:5e:47:f7:a0:
         df:54:eb:08:58:e2:2f:05:81:b0:f7:dc:ec:b5:91:79:4c:91:
         53:44:50:93:fd:b8:2c:22:a7:1c:ed:8a:c8:8d:e7:62:de:69:
         69:91:52:99:f8:79:1b:e0:e2:3b:17:a0:42:51:9c:be:8b:2b:
         02:cb:c3:a9:41:c1:48:4e:9f:c6:e2:9c:64:dc:cf:ee:a6:8c:
         b1:4f:db:f4:ff:4d:91:da:d9:a6:46:55:f4:cb:3e:fe:1b:54:
         cf:d1:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:25 2024 by rpki-client on console-fra.rpki-client.org