Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File:                     Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier:          mVgJGtgTqK0tnrJc7a+NMPWlnPwE2aL2UJpaqUqH9K8=
Subject key identifier:   AC:52:35:E9:1E:2A:5C:51:07:CF:76:86:F8:8F:81:83:40:74:EB:BF
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer:       /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial:       01938F2F0F78836F7FB3DB638F6B867A67A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number:          0C3B
Signing time:             Wed 04 Dec 2024 01:00:46 +0000
Manifest this update:     Wed 04 Dec 2024 01:00:46 +0000
Manifest next update:     Thu 05 Dec 2024 01:00:46 +0000
Files and hashes:         1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: 3MSE5wcU69atxHkjxeraKmpm38Y3BEiSdDKP7J/WExQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Dec 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8f:2f:0f:78:83:6f:7f:b3:db:63:8f:6b:86:7a:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
        Validity
            Not Before: Dec  4 01:00:46 2024 GMT
            Not After : Dec  5 01:00:46 2024 GMT
        Subject: CN=ac5235e91e2a5c5107cf7686f88f81834074ebbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:5a:08:89:38:74:d8:af:7d:a7:3e:58:ea:
                    35:65:85:a8:5b:55:e1:55:1b:47:b3:93:14:25:fa:
                    81:38:0b:9a:a8:be:6d:9f:51:cd:f8:9c:9a:e3:de:
                    24:70:37:b9:26:ff:68:30:ce:96:9b:0b:44:71:23:
                    b3:3c:e9:4a:9b:b1:5a:61:99:0f:08:51:ed:14:11:
                    3e:c8:7a:39:2f:c1:90:53:23:41:a7:2f:4a:17:91:
                    75:0c:a4:41:2e:27:ff:8d:4e:82:d4:90:24:cf:52:
                    ad:92:b3:20:00:f9:46:ec:1d:82:f8:65:37:af:8f:
                    0e:b5:2d:4d:31:bb:2f:e4:43:e1:1a:d0:11:50:3d:
                    2f:39:9c:e2:d8:3b:ea:02:63:6b:51:00:5c:05:bc:
                    d3:fb:1e:bf:d8:bd:39:88:67:5f:19:b2:03:01:99:
                    f4:0c:ae:83:58:33:7f:19:22:1f:06:ac:72:84:90:
                    cd:2c:1f:30:db:67:8c:8a:8d:f8:03:87:10:d6:66:
                    8a:c8:19:56:b2:13:44:c1:8f:89:84:e0:01:f6:79:
                    90:a8:b5:ef:a2:cb:af:ed:0e:5c:99:2a:86:de:47:
                    9d:ad:a7:68:9b:f7:6a:95:28:35:ae:19:8b:db:52:
                    7f:99:f1:6b:8e:74:83:f6:00:8b:12:97:1d:70:f4:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:35:E9:1E:2A:5C:51:07:CF:76:86:F8:8F:81:83:40:74:EB:BF
            X509v3 Authority Key Identifier:
                keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8b:6b:2b:16:e7:a8:e8:b9:2b:21:4b:45:c6:52:80:48:1a:
         00:c8:ea:fa:44:a0:b8:2b:3f:48:e4:6b:5a:1d:07:1c:4a:bb:
         a7:37:a0:7c:82:1b:53:fb:3c:8c:45:73:8e:55:9f:04:5a:48:
         12:ee:a4:87:da:e1:22:27:ca:23:b7:ff:57:78:52:9f:13:cf:
         ed:73:ea:66:55:79:9d:e7:9e:44:d2:9a:e4:20:d6:a5:03:64:
         42:ab:1a:27:6b:47:30:8d:b0:56:d5:51:b2:7b:19:7e:18:be:
         be:5a:1c:42:a1:d4:4f:cd:0b:85:f4:83:50:d6:6c:b0:ba:c9:
         08:4f:2c:09:17:fb:36:68:e7:c1:f9:39:9d:fc:29:79:04:b6:
         8e:fd:d2:96:46:70:70:e6:8e:bf:80:90:a6:42:11:d6:06:85:
         15:28:77:7a:dd:1c:61:f6:17:35:a2:f9:29:40:58:85:cd:49:
         9a:f4:c4:6c:3e:f4:f5:35:63:00:95:61:f8:7d:6d:78:ec:bb:
         d9:87:7f:71:f7:1e:2b:36:06:9f:01:91:c8:a9:55:0f:17:d9:
         26:37:aa:c8:f6:2b:2a:c8:50:79:0c:95:ff:5a:d5:1d:ad:5b:
         0e:d6:53:b2:99:3a:1d:76:52:dc:2a:58:41:05:03:af:d3:0f:
         62:a7:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 09:00:57 2024 by rpki-client on console-fra.rpki-client.org