Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/72231f-3b7e-47b8-8b3b-cd1211b3f0ca/1/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.mft
File:                     Ry2YBrY0iG7jqt4nU0qXlpiOfTo.mft (raw, json)
Hash identifier:          /lZ9bgDlzdNJL2BqKFYL8jXqf+GnH4Yd6xSAh1Q0DbM=
Subject key identifier:   BE:7E:E7:AB:EC:E4:A6:D1:73:51:09:97:D4:40:AC:42:36:13:32:14
Authority key identifier: 47:2D:98:06:B6:34:88:6E:E3:AA:DE:27:53:4A:97:96:98:8E:7D:3A
Certificate issuer:       /CN=472d9806b634886ee3aade27534a9796988e7d3a
Certificate serial:       01923AA7B0F10542632ECE597A4F0B56AA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/72231f-3b7e-47b8-8b3b-cd1211b3f0ca/1/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.mft
Manifest number:          056B
Signing time:             Sat 28 Sep 2024 22:02:01 +0000
Manifest this update:     Sat 28 Sep 2024 22:02:01 +0000
Manifest next update:     Sun 29 Sep 2024 22:02:01 +0000
Files and hashes:         1: Ry2YBrY0iG7jqt4nU0qXlpiOfTo.crl (hash: OxiRCx7z1lGSTlHYR5SDxzLkj4NGr1RMpL/gP+Qxx5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/72231f-3b7e-47b8-8b3b-cd1211b3f0ca/1/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/72231f-3b7e-47b8-8b3b-cd1211b3f0ca/1/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:b0:f1:05:42:63:2e:ce:59:7a:4f:0b:56:aa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472d9806b634886ee3aade27534a9796988e7d3a
        Validity
            Not Before: Sep 28 22:02:01 2024 GMT
            Not After : Sep 29 22:02:01 2024 GMT
        Subject: CN=be7ee7abece4a6d173510997d440ac4236133214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:bd:7b:f4:21:64:3e:e4:ca:e9:db:1e:b1:
                    0b:62:07:77:84:d5:b2:08:7b:68:41:41:c5:5e:bc:
                    cc:fe:99:50:70:52:42:5d:8a:b4:bc:e5:c6:68:ed:
                    ba:9b:1f:91:3d:68:45:d7:53:1f:9a:3d:8a:29:8a:
                    45:a6:36:a1:64:a1:9f:42:b6:4e:43:6f:39:7c:b1:
                    38:df:f6:5e:c9:f7:84:0e:ee:6e:ec:d6:d1:d5:c5:
                    f1:05:96:aa:16:94:67:17:b2:b6:dc:a2:73:87:2a:
                    06:7b:af:d6:90:27:62:83:86:8d:2b:d1:b8:27:34:
                    ab:5f:12:15:11:15:1a:95:e7:ac:fc:67:18:ac:e1:
                    00:0f:e9:d9:3d:85:b4:1e:51:4f:b4:22:49:6e:fb:
                    26:83:26:d0:f0:28:91:fc:9d:a4:32:83:32:63:36:
                    8b:ee:d4:f3:b2:aa:13:8e:e2:71:1c:3a:5b:6e:52:
                    98:4f:69:ad:c4:a4:16:39:df:3d:96:06:f0:9f:62:
                    48:5d:ad:76:7c:fa:34:d0:5a:60:0b:e6:9b:5c:31:
                    ae:e4:94:31:70:df:c6:04:f5:f8:a2:d3:a5:85:42:
                    98:1f:27:56:f6:ca:9d:30:f4:58:cc:f5:b0:91:e5:
                    34:77:d4:f6:bd:8d:bb:2a:58:c8:6a:a0:33:e7:fd:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7E:E7:AB:EC:E4:A6:D1:73:51:09:97:D4:40:AC:42:36:13:32:14
            X509v3 Authority Key Identifier:
                keyid:47:2D:98:06:B6:34:88:6E:E3:AA:DE:27:53:4A:97:96:98:8E:7D:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/72231f-3b7e-47b8-8b3b-cd1211b3f0ca/1/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/72231f-3b7e-47b8-8b3b-cd1211b3f0ca/1/Ry2YBrY0iG7jqt4nU0qXlpiOfTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:52:35:5e:71:f2:bb:3c:15:38:ec:82:15:cd:ea:31:c3:73:
         58:cd:77:77:9d:23:f3:6e:24:20:7a:10:8f:a6:18:a2:c1:49:
         36:2d:a0:a3:80:62:f6:cc:7d:b3:e3:ad:68:d1:0e:26:16:8e:
         69:9a:a0:1b:fb:33:b9:27:89:89:fe:4c:73:b9:7f:13:a6:73:
         a7:7c:c2:4c:60:63:58:57:ac:dd:c7:fd:9d:b3:f9:4b:63:47:
         d3:57:50:f6:c1:88:bd:e7:09:34:2c:bd:d6:80:ad:13:e4:cf:
         ca:9f:fb:0c:a5:63:77:41:99:44:ca:e8:20:df:67:46:8a:53:
         27:9f:1e:d3:30:2a:67:9f:76:14:04:83:95:3e:a3:7d:b7:b2:
         6e:d8:9b:9e:b8:85:a6:77:e0:ec:c7:53:89:b9:ff:ee:37:1f:
         7b:59:4a:ae:0c:ff:8d:25:29:fb:a7:05:8d:ba:c9:5f:d8:63:
         fd:de:38:7a:90:73:75:3f:af:d2:08:33:d5:f1:4a:89:e3:e9:
         9d:ba:01:e9:a4:6e:f8:89:6c:a0:9d:9d:0b:e3:6d:94:33:9e:
         c2:f1:b8:da:89:20:5e:62:68:73:5b:a7:07:51:71:4d:95:e9:
         89:26:07:16:ba:ce:90:c7:07:38:d7:38:e0:2c:81:1f:0d:48:
         1f:cc:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:29:57 2024 by rpki-client on console-fra.rpki-client.org