Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File:                     rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier:          7O4FmmDKElKkwppdv/LrgRXqYZFhvv6CBzfoxuZQewM=
Subject key identifier:   4F:7D:99:8E:75:3F:1D:3C:E0:63:90:35:A6:05:A1:61:E1:79:3F:DC
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer:       /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial:       019356898F51B2AE26A1EC2BFB62AAB24B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number:          136C
Signing time:             Sat 23 Nov 2024 01:01:15 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:15 +0000
Files and hashes:         1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: 3mJYOH7fCkhr2jzzu6xb0tp905+LV72JU3wUqo6nc/c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:8f:51:b2:ae:26:a1:ec:2b:fb:62:aa:b2:4b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
        Validity
            Not Before: Nov 23 01:01:15 2024 GMT
            Not After : Nov 24 01:01:15 2024 GMT
        Subject: CN=4f7d998e753f1d3ce0639035a605a161e1793fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:93:e5:35:9a:fa:06:2b:4c:79:32:01:94:
                    5c:bb:c9:4b:70:23:e2:c6:13:5f:5a:b9:80:c0:61:
                    b2:a7:84:15:1f:ad:85:ff:4e:c9:aa:bf:b8:df:8e:
                    84:90:73:57:79:e3:8a:b1:76:ee:ee:68:64:65:da:
                    af:b4:a6:9e:73:82:c9:26:b0:87:a0:24:f0:c9:56:
                    41:fb:4c:24:0a:97:de:be:e4:3b:c4:f7:e5:df:01:
                    04:22:e3:e6:ee:65:76:f6:71:a4:88:8a:69:db:d2:
                    c5:64:24:7d:c3:27:0e:94:b2:b8:df:cd:c2:f3:c6:
                    d1:9f:ec:5a:a5:7d:cf:a2:fd:59:5f:1c:94:64:1e:
                    f5:5d:6a:15:46:0f:fd:07:ed:43:b1:13:a8:01:6d:
                    a3:96:c5:02:aa:6e:20:db:f4:7b:12:14:81:34:93:
                    2c:48:3d:c2:92:04:df:e3:37:2a:03:24:6b:2a:60:
                    00:44:8a:24:c8:2e:d5:42:c4:eb:9a:12:b2:58:6b:
                    aa:c1:19:f5:4b:9b:9b:e9:bd:7a:0f:4e:7b:38:1f:
                    4e:ff:01:bf:03:35:48:d0:4e:01:e5:d4:c5:42:6a:
                    44:8b:79:ee:5a:17:72:db:ba:8c:58:fe:7c:02:00:
                    1d:e6:f1:4c:7c:63:1a:03:33:03:85:9a:8e:29:8b:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7D:99:8E:75:3F:1D:3C:E0:63:90:35:A6:05:A1:61:E1:79:3F:DC
            X509v3 Authority Key Identifier:
                keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:66:09:91:ef:19:92:e4:65:30:fa:ff:1d:67:57:6e:9c:98:
         00:6e:65:4b:14:b1:db:c0:e6:db:4c:e5:43:98:11:ad:fd:af:
         65:56:31:6b:bb:90:64:c4:38:0a:e0:f1:26:25:23:f1:dc:0a:
         31:ae:5c:75:2e:63:a8:30:c9:c5:8f:bd:f6:98:cf:2a:68:0a:
         44:75:07:49:60:4d:e3:4f:af:9e:a5:82:dc:96:8e:94:51:b6:
         60:8b:03:f9:af:a7:4a:5a:50:84:b8:03:d5:d8:e6:b9:90:42:
         02:cd:ae:d3:d1:15:82:08:cf:62:78:07:37:23:d1:22:de:a3:
         98:37:e1:77:a1:3e:98:67:46:87:ad:34:38:58:54:a2:a7:2f:
         bf:8b:6f:d0:7a:6b:17:3a:f7:f3:7a:98:7c:01:07:b1:1e:11:
         28:42:42:57:77:9a:0f:ad:08:0b:3e:f0:ff:61:d2:ad:78:5f:
         02:f6:a4:3b:5f:85:2b:cc:6f:eb:90:fe:dc:7c:b7:e9:28:f0:
         9d:f7:d1:fa:08:e2:e3:00:db:b6:05:02:12:d7:01:e3:7f:c9:
         2d:85:a4:5c:86:e1:6d:9e:fa:d5:97:27:df:0c:33:5e:4c:40:
         b2:a3:cc:21:2c:58:6d:fa:64:a8:0b:9e:ef:49:72:4e:5e:c1:
         71:1d:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:30 2024 by rpki-client on console-ams.rpki-client.org