Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1b712f-bcd1-4ce8-b4c7-072128409974/1/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.mft
File:                     pQfCoLbihC5LQ_Vmy2NeU_RGCAc.mft (raw, json)
Hash identifier:          jby0E3Fov6fkb/yX2udJ71qyFdhnYuK+CarI6W+y3yM=
Subject key identifier:   2B:B7:14:E8:9C:0C:8D:9A:92:41:24:7F:04:40:FD:14:A2:35:BA:93
Authority key identifier: A5:07:C2:A0:B6:E2:84:2E:4B:43:F5:66:CB:63:5E:53:F4:46:08:07
Certificate issuer:       /CN=a507c2a0b6e2842e4b43f566cb635e53f4460807
Certificate serial:       01936B223FF651C346461D99045104264243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/1b712f-bcd1-4ce8-b4c7-072128409974/1/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.mft
Manifest number:          0D55
Signing time:             Wed 27 Nov 2024 01:00:26 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:26 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:26 +0000
Files and hashes:         1: pQfCoLbihC5LQ_Vmy2NeU_RGCAc.crl (hash: a5Vu91CtWfvR9Bcd+ipNpT8OjiC9LBNoCZNrKO+/xYg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/1b712f-bcd1-4ce8-b4c7-072128409974/1/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/1b712f-bcd1-4ce8-b4c7-072128409974/1/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:3f:f6:51:c3:46:46:1d:99:04:51:04:26:42:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a507c2a0b6e2842e4b43f566cb635e53f4460807
        Validity
            Not Before: Nov 27 01:00:26 2024 GMT
            Not After : Nov 28 01:00:26 2024 GMT
        Subject: CN=2bb714e89c0c8d9a9241247f0440fd14a235ba93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6d:57:c3:a9:f6:86:d4:d3:26:57:3d:f6:27:
                    87:58:93:0e:90:7d:a5:67:a9:05:96:c3:89:4d:84:
                    1a:f3:cd:6c:8e:77:62:eb:c3:cd:e2:83:6b:12:ce:
                    60:56:21:a1:98:6b:b9:a9:5f:94:bb:0f:78:a2:43:
                    3b:03:b7:67:2d:05:0f:4c:f7:77:5c:76:2f:60:9f:
                    87:88:3e:92:01:6e:45:bf:55:ea:50:71:01:52:fe:
                    2c:c5:66:1b:87:c0:67:66:fe:de:92:c9:37:c1:cd:
                    ff:44:cb:67:59:e2:2c:b4:97:6a:38:3a:04:d5:0e:
                    b2:2c:c1:53:e2:a9:2f:59:c4:54:7c:7d:a0:0e:f9:
                    41:bd:30:71:12:47:47:ff:a7:37:8a:f2:d0:93:7d:
                    73:31:a9:77:f1:a6:c1:1e:7e:3a:86:83:ff:62:13:
                    db:b2:d7:50:ca:0e:70:8e:33:b7:16:b2:cf:05:9e:
                    b3:2a:1b:3a:89:22:a6:c1:18:9f:aa:d0:10:01:47:
                    0e:92:4d:73:9b:3c:6b:29:48:17:57:66:f0:3b:6b:
                    33:bf:ae:d4:70:32:c4:ae:62:5b:36:0f:42:eb:05:
                    41:5f:35:60:4a:c5:a7:32:8a:b4:cb:61:84:42:7e:
                    46:a3:89:27:ee:19:4c:67:25:14:4a:77:30:a0:07:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B7:14:E8:9C:0C:8D:9A:92:41:24:7F:04:40:FD:14:A2:35:BA:93
            X509v3 Authority Key Identifier:
                keyid:A5:07:C2:A0:B6:E2:84:2E:4B:43:F5:66:CB:63:5E:53:F4:46:08:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1b712f-bcd1-4ce8-b4c7-072128409974/1/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1b712f-bcd1-4ce8-b4c7-072128409974/1/pQfCoLbihC5LQ_Vmy2NeU_RGCAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:c3:00:91:84:7a:7f:65:4e:2f:50:58:6c:ac:70:d0:5b:
         3b:6c:e5:ee:aa:1a:9e:6e:9e:6f:59:c1:c8:39:86:a4:95:c7:
         30:dd:9d:e0:83:04:fe:79:96:26:8c:17:83:d3:82:64:63:12:
         49:75:81:a9:d4:8c:50:6e:52:f8:0e:46:36:18:9b:68:aa:d0:
         f1:e9:08:ad:3d:d6:40:39:0e:b7:26:08:c8:54:08:3c:fa:b5:
         7e:81:b9:09:91:ff:8b:20:16:1f:b9:5e:3f:9a:6c:55:33:73:
         92:d9:d9:db:9d:5d:5a:38:a5:2a:b9:10:da:42:8a:4a:b3:bc:
         bb:48:47:19:39:96:b4:03:07:51:ff:ea:3b:b4:02:0a:49:f7:
         e1:fc:d8:71:f7:a8:c9:2f:a6:a7:9d:8b:12:34:89:77:49:39:
         32:de:70:36:60:0d:13:76:29:18:0b:b9:7a:9e:76:69:98:68:
         27:31:42:b1:c4:a4:37:37:95:8d:99:c0:38:27:8b:17:2e:ce:
         8a:4b:dc:18:c7:03:b3:e0:b4:6f:eb:a7:32:0a:9c:63:4f:1f:
         bc:2f:46:3f:23:f5:c8:de:d7:58:2c:f9:6e:48:9a:8b:3c:65:
         cd:88:65:55:38:ca:9a:97:bd:22:94:b2:59:7d:b8:14:8d:5e:
         c0:aa:ad:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:52:37 2024 by rpki-client on console-fra.rpki-client.org