Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          v/ZTxgiryFyDtI0tb45Gbc/93ruoKXY0x86h6Iwq+Cs=
Subject key identifier:   85:C5:D2:F9:CC:3A:99:AF:54:96:AA:BA:EC:AC:39:5C:19:62:F3:03
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       019369D9B60DD4BF6273DF2DD32DFA00EAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          05F1
Signing time:             Tue 26 Nov 2024 19:01:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:35 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: RhFiIzjDCoAG4gm9eWvr66GOCHzbfJhRVu+UK7J1/0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b6:0d:d4:bf:62:73:df:2d:d3:2d:fa:00:ea:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Nov 26 19:01:35 2024 GMT
            Not After : Nov 27 19:01:35 2024 GMT
        Subject: CN=85c5d2f9cc3a99af5496aabaecac395c1962f303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:1c:90:ae:17:e2:20:5d:86:aa:f4:4c:6a:
                    5a:30:b1:16:b3:78:77:a9:e5:2a:5b:ee:05:b0:24:
                    a1:fa:0f:e4:19:c9:15:7b:9b:f8:c9:84:83:32:f4:
                    14:37:84:6d:23:63:ef:d6:b6:66:6c:ab:a4:19:03:
                    3c:e2:55:e5:a2:a7:10:14:10:cf:97:8a:d5:17:86:
                    59:2a:0a:c1:2a:3e:58:1c:97:93:c0:6e:e1:e5:bd:
                    44:56:a2:be:e3:4c:0d:74:ef:f1:6c:fa:90:d9:2d:
                    f7:45:6f:95:60:ae:da:2c:68:a7:1c:0a:01:af:1b:
                    69:ea:7c:aa:1f:9e:34:f8:b8:f0:3d:34:4e:02:16:
                    4b:7c:18:fe:2e:59:96:57:39:1e:e9:bd:e5:ca:20:
                    48:41:fe:03:22:ae:4e:62:78:e8:f7:24:1c:86:7d:
                    da:71:d4:4c:c3:1b:f4:28:1a:cb:06:f7:01:24:9b:
                    ed:53:d5:4e:99:d7:b8:a1:8e:2e:e7:7a:6a:1c:66:
                    14:ce:23:c1:7c:7a:ce:88:42:a9:a6:9b:ff:27:d3:
                    07:6a:a9:57:64:9a:4e:a0:61:ad:9d:3e:73:a3:89:
                    5e:f8:f0:27:a5:88:03:d2:f1:6b:90:d3:72:cf:45:
                    b3:36:27:6c:3d:35:d7:d8:2c:61:76:f4:6e:81:5b:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C5:D2:F9:CC:3A:99:AF:54:96:AA:BA:EC:AC:39:5C:19:62:F3:03
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:56:0e:d1:ad:a5:9e:cc:89:00:73:73:a2:df:49:78:e8:
         2f:b4:a9:d8:00:c7:8b:8f:96:ea:08:75:e3:22:b5:97:76:cc:
         2d:92:58:07:4f:e7:ad:85:34:43:d5:04:db:18:cc:23:7f:b4:
         0f:b8:64:19:45:0d:ab:2d:fc:98:7c:64:2b:06:3e:9c:2c:a1:
         07:73:6d:9b:56:00:ce:4d:7e:b2:4d:0f:c3:b4:d9:7c:c8:e1:
         6f:2f:12:16:c4:ae:b6:56:6a:65:9d:43:3f:6b:c9:c5:b0:8e:
         a0:32:92:5c:77:e3:bd:6c:cc:cb:38:4a:40:42:1c:07:ea:f6:
         f5:d7:83:fb:a2:c3:a1:7e:07:d8:bb:01:63:0e:9e:83:06:c5:
         9a:41:cf:ad:2b:3d:92:07:36:62:f5:68:dd:00:bf:51:87:66:
         f7:f7:6d:c7:d6:24:9a:31:8d:3c:9c:20:e1:29:6b:21:c8:31:
         f9:47:0f:aa:c0:9f:ea:a7:4f:54:26:f7:3e:be:fd:1a:88:49:
         66:5f:65:bf:b7:81:e6:b1:a9:f9:3c:ad:4e:f4:ca:97:6e:9e:
         50:2b:ce:92:d6:71:b7:f4:ef:2a:56:df:bb:17:46:05:fe:3c:
         a2:50:00:df:90:bf:8f:31:fd:ec:bd:19:b4:2b:a0:ff:a0:45:
         49:e5:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:44 2024 by rpki-client on console-ams.rpki-client.org