Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
File:                     zywUDr4TKWR_SFiMjgjHP_2q4vU.mft (raw, json)
Hash identifier:          npcdSwSk4TvPf0tUiB0LHgDwN4Xb/65PPvSxSuUqyMc=
Subject key identifier:   08:00:13:91:AB:06:68:F3:EE:69:45:2D:D9:18:0F:F8:AF:9B:75:34
Authority key identifier: CF:2C:14:0E:BE:13:29:64:7F:48:58:8C:8E:08:C7:3F:FD:AA:E2:F5
Certificate issuer:       /CN=cf2c140ebe1329647f48588c8e08c73ffdaae2f5
Certificate serial:       019357647F7346DC4832C33D8C2D37B0BFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
Manifest number:          0654
Signing time:             Sat 23 Nov 2024 05:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:24 +0000
Files and hashes:         1: zywUDr4TKWR_SFiMjgjHP_2q4vU.crl (hash: uDY+sYR2FrdB0OuP5kWtWLMUW3JiH0Pa9mU1RnnDtfg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:7f:73:46:dc:48:32:c3:3d:8c:2d:37:b0:bf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c140ebe1329647f48588c8e08c73ffdaae2f5
        Validity
            Not Before: Nov 23 05:00:24 2024 GMT
            Not After : Nov 24 05:00:24 2024 GMT
        Subject: CN=08001391ab0668f3ee69452dd9180ff8af9b7534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:57:6c:0a:75:79:61:69:10:a0:78:e2:e3:
                    41:91:07:1a:25:3d:4b:27:66:69:71:68:f8:7f:a9:
                    fd:96:bd:cb:eb:e2:0b:b8:a3:5c:eb:be:67:65:95:
                    3c:69:fc:8b:90:2f:a6:16:f2:19:4a:ec:b1:3a:f9:
                    c6:c0:de:3c:11:20:2b:8a:61:56:8b:a0:ad:00:a0:
                    ce:02:24:c5:4c:bd:13:fc:fe:8e:27:6e:09:1b:97:
                    07:62:a4:23:e0:90:20:28:97:19:33:8a:4b:31:21:
                    c1:7a:fd:c1:69:e4:10:eb:b7:84:ac:8c:18:0c:c2:
                    8f:68:08:28:63:9b:84:79:82:4e:5a:ba:af:e1:21:
                    b7:f7:34:02:2a:31:81:e8:42:12:c4:0f:4c:90:73:
                    7e:92:49:2d:fc:77:87:23:25:66:f0:53:f1:43:47:
                    9d:f3:48:0a:a5:d0:5c:87:91:e7:11:dd:c1:07:ec:
                    34:64:8d:eb:5c:c4:55:7b:8b:15:80:42:a2:15:fc:
                    b7:61:df:fc:d1:93:14:26:46:73:73:f4:7d:ec:94:
                    42:3b:0d:bc:83:29:0f:4d:0a:03:fb:4e:f9:e5:0f:
                    b1:23:ea:f7:b4:d8:85:d0:63:45:bf:a3:48:38:61:
                    59:40:2d:93:c7:e6:f2:36:73:22:83:bb:3f:6b:15:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:00:13:91:AB:06:68:F3:EE:69:45:2D:D9:18:0F:F8:AF:9B:75:34
            X509v3 Authority Key Identifier:
                keyid:CF:2C:14:0E:BE:13:29:64:7F:48:58:8C:8E:08:C7:3F:FD:AA:E2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zywUDr4TKWR_SFiMjgjHP_2q4vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba5c9a-8105-4be1-bcf3-6c395a6c7420/1/zywUDr4TKWR_SFiMjgjHP_2q4vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:6c:70:2c:f5:59:6a:aa:fa:e5:0f:62:19:e1:57:41:57:
         9e:5c:0a:c6:16:41:01:be:a7:0c:d9:24:35:d9:53:60:97:c2:
         f1:d9:ac:d2:de:ea:27:16:6a:a5:14:60:25:9a:2a:22:89:4e:
         87:0e:50:5b:bc:e5:39:af:94:b9:c6:33:04:53:e4:a9:49:a4:
         0d:b2:23:3b:3c:81:04:1d:70:ae:93:62:dc:f2:3c:ff:43:45:
         ee:d7:7b:cb:1e:40:bc:86:4d:bc:10:7c:bd:3d:48:b7:6b:4d:
         ca:10:e9:58:2b:65:5b:db:0f:59:42:e2:56:09:56:f5:d7:77:
         e7:0f:91:87:3c:39:b6:6b:c2:78:51:5c:ff:64:b8:f0:34:27:
         d5:75:83:d5:6c:b9:d2:f4:63:b9:9e:95:9a:65:c9:b2:57:73:
         96:0e:93:69:36:2e:6d:da:94:43:71:f2:f5:b1:10:b2:b1:e4:
         6a:b9:69:5e:e1:db:f7:d2:ac:f5:79:38:57:1a:18:aa:ac:e7:
         5d:3a:35:29:e5:79:99:5f:94:3c:52:f5:b7:5c:91:89:34:95:
         3f:64:e6:43:92:ac:e7:e3:8b:27:0d:68:1b:a0:42:91:d3:80:
         fd:33:5e:2c:eb:e6:1c:90:cc:d0:bc:4c:25:9a:a2:4f:d1:83:
         a2:ec:af:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:55 2024 by rpki-client on console-ams.rpki-client.org