Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File:                     ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier:          iuVpt+UdhW1aOFRl3luuYH3zaE6n23HKTGzUaL35f94=
Subject key identifier:   98:C4:23:0D:E3:DE:E7:B9:B7:57:7C:88:E1:CD:58:FA:9E:40:8B:83
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer:       /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial:       019369D8C9DB87942160E152C56175CAB588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number:          0E67
Signing time:             Tue 26 Nov 2024 19:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:35 +0000
Files and hashes:         1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: LRKiQQHyxbPHSjJ9/beSnuWbB8L4aVWgNntUaoDE+S0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:c9:db:87:94:21:60:e1:52:c5:61:75:ca:b5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
        Validity
            Not Before: Nov 26 19:00:35 2024 GMT
            Not After : Nov 27 19:00:35 2024 GMT
        Subject: CN=98c4230de3dee7b9b7577c88e1cd58fa9e408b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:de:f2:14:b4:f0:dc:bd:56:bf:8b:f2:ea:
                    47:11:7b:81:be:8b:99:0c:4e:bc:b8:41:f0:27:96:
                    0a:ef:3e:2c:16:bc:bc:8d:c1:e0:a2:3e:04:6c:8c:
                    f7:89:94:be:e2:fa:e9:17:d0:36:73:bc:2f:de:36:
                    ec:dd:c2:23:60:5e:25:80:3c:9d:78:67:36:44:37:
                    9b:c5:41:18:2f:06:80:6b:2e:71:43:59:1f:54:ee:
                    4f:39:25:de:de:2d:fd:1b:6c:75:44:26:11:a0:0e:
                    a6:ae:a9:35:ce:13:d5:6d:ea:a2:a8:c2:fb:09:6e:
                    97:c9:16:c0:50:21:d8:1d:6f:3a:05:30:85:74:c7:
                    47:eb:fa:85:94:06:bd:22:db:9d:06:a4:75:b3:64:
                    a7:33:1f:28:f0:c8:15:f0:98:c2:58:0b:85:77:94:
                    8f:ef:87:77:54:b9:b0:93:de:5b:17:82:78:5b:67:
                    d4:5a:08:fc:88:45:f3:9a:bf:75:18:5d:60:ff:4a:
                    97:1b:9c:ab:06:55:6f:cb:41:b1:93:f2:d8:f0:b4:
                    92:27:92:e1:eb:f6:5f:51:80:16:87:be:1f:5e:7e:
                    a9:70:f4:bb:21:5c:e1:86:88:f2:7d:2d:d6:3b:b0:
                    9c:ca:f3:ec:65:d8:f1:a5:6d:ed:4e:39:aa:3b:e1:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C4:23:0D:E3:DE:E7:B9:B7:57:7C:88:E1:CD:58:FA:9E:40:8B:83
            X509v3 Authority Key Identifier:
                keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:32:e6:ce:e2:87:06:1b:e6:cd:de:c1:05:c7:69:aa:aa:
         55:94:bc:fd:bb:31:71:71:a1:3f:af:7f:8c:b1:22:99:26:a4:
         f8:1a:29:7d:fd:23:af:e1:d7:21:7c:e1:1a:6d:9f:a7:6e:f9:
         53:64:da:53:33:49:bb:b0:fc:af:43:26:11:ff:e3:ff:29:12:
         b3:e7:f7:a9:48:8d:fb:5f:c8:cf:67:64:0a:0d:40:6e:d5:83:
         df:92:79:bf:79:26:f1:a0:46:54:74:2a:eb:d5:2b:60:dd:b7:
         6c:0a:3c:bb:dc:c6:a2:0c:95:12:86:1a:56:73:5d:97:91:28:
         d0:7a:a3:83:ff:34:05:ac:20:1a:17:56:d6:36:01:e9:26:24:
         13:ac:0b:f5:b7:53:44:84:74:12:b7:2f:d1:84:a4:4a:2b:d6:
         06:e6:40:d4:b2:17:34:11:fc:1c:e1:e2:8c:50:e8:7c:62:8d:
         32:01:cf:31:27:db:65:04:94:ca:e3:bb:8a:2d:7b:16:1d:13:
         f9:d8:f8:c9:87:1e:5d:30:00:bb:5c:9d:be:a0:b9:b7:ed:54:
         d2:77:40:bd:4a:fe:47:b7:ba:3c:45:fa:0f:2c:e7:4d:fd:7b:
         46:ef:2d:89:01:f7:40:c8:8c:d0:ee:cf:80:12:87:24:e2:42:
         e4:75:11:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:47 2024 by rpki-client on console-ams.rpki-client.org