Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File:                     dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier:          AbdEEynqZcP9ikrwsQ/weL5aw+20J9sqXTVEjMGyX44=
Subject key identifier:   05:32:6A:BB:E7:D5:0C:7A:94:DE:A2:2A:3C:C8:A0:2B:D0:80:E4:B3
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer:       /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial:       0193568AA0F4F7358BDF0C02BF2B1A526237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:02:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:25 +0000
Files and hashes:         1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: /IAtne0YhhnVPmWPXWmbCmPiWo6lbRroAQrNHKGraPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:a0:f4:f7:35:8b:df:0c:02:bf:2b:1a:52:62:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
        Validity
            Not Before: Nov 23 01:02:25 2024 GMT
            Not After : Nov 24 01:02:25 2024 GMT
        Subject: CN=05326abbe7d50c7a94dea22a3cc8a02bd080e4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:64:3b:96:68:2f:88:84:c3:5f:1b:45:6b:
                    a7:69:28:3a:fb:ec:0f:c8:57:d8:f2:54:f1:93:46:
                    d0:73:a0:5f:92:cb:43:93:b0:db:7c:1d:5c:8f:ab:
                    48:92:58:e9:e4:70:c3:9e:6a:80:fc:0a:5b:77:68:
                    43:cd:f5:eb:ce:23:e1:0b:1f:85:ec:0f:9c:10:86:
                    75:e8:b5:92:c0:b6:0b:27:13:f8:0f:7e:0e:62:66:
                    9e:72:01:b2:09:62:27:4c:14:28:19:6a:c8:cb:e1:
                    7b:e0:ed:e7:2f:77:ec:63:33:85:8d:ba:08:a9:0a:
                    b5:62:22:14:dc:da:2b:c4:63:bd:71:26:de:c4:56:
                    d0:e1:d4:1d:16:60:13:04:5c:b5:ca:0e:a4:e1:0e:
                    f6:ec:e7:bf:5f:96:6f:5a:83:11:d2:36:e4:9d:84:
                    e7:7e:4d:dd:0c:e7:3f:b8:fb:83:d4:e5:38:fd:db:
                    a3:9a:82:da:5c:65:eb:9e:44:8d:ba:7f:bf:9b:17:
                    94:86:26:f5:57:48:38:8c:78:dd:46:8a:da:e5:03:
                    18:da:55:3e:8c:03:81:2f:0f:f5:10:86:63:a2:56:
                    94:a9:6b:dd:9c:82:33:f8:8a:9b:ca:2c:f2:7f:53:
                    56:f5:99:61:8c:f3:c1:87:55:a4:e0:5f:6e:8f:72:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:32:6A:BB:E7:D5:0C:7A:94:DE:A2:2A:3C:C8:A0:2B:D0:80:E4:B3
            X509v3 Authority Key Identifier:
                keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:73:d3:e3:7d:7c:97:34:ee:6e:be:31:1a:d5:ce:ba:35:8a:
         f8:24:cd:b2:5a:4e:75:cd:cb:dd:11:ca:cb:4b:3f:67:48:3a:
         d4:6c:31:16:00:07:43:b7:17:2c:bf:51:83:76:87:97:70:0f:
         38:7d:45:81:b8:7d:71:8e:75:dd:87:8e:a3:c6:dd:a5:e8:c8:
         6b:fa:30:be:07:c3:17:27:0c:89:de:20:e6:6a:1b:3a:05:7e:
         79:18:2f:b8:28:d8:04:d4:b1:ec:db:dd:48:ee:d1:e6:d1:09:
         ab:4c:01:aa:90:58:9b:55:0a:4c:34:f8:1c:12:8a:33:e5:1f:
         97:e5:4f:73:d1:a2:01:62:1e:ca:f3:ac:96:e1:ed:48:7b:d5:
         c2:5d:5c:bb:61:cb:7f:d6:a4:89:9a:78:1f:60:01:e3:0b:78:
         d5:41:59:4d:47:5b:e6:08:50:4a:09:5a:e5:8a:eb:9c:fc:ad:
         b2:ba:57:ba:b4:0d:d6:0d:d1:27:77:85:fb:2b:7e:ad:0f:7f:
         3d:15:0c:e1:42:93:84:ef:a6:8a:39:fb:af:bb:60:73:8b:2b:
         73:9b:b5:f0:9d:5d:f3:34:c1:12:25:06:33:26:9c:0b:d7:97:
         05:cd:8f:a7:17:69:59:0a:63:b6:e8:3c:ff:6f:e7:29:92:d8:
         6f:5f:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:25 2024 by rpki-client on console-ams.rpki-client.org