Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File:                     4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier:          DHTo849NHWIDeuvOKO4iFVpq5EHsICDH7APNX/IXIYg=
Subject key identifier:   C4:37:6F:54:56:DA:6C:16:C9:F7:CD:07:E1:9B:61:8B:28:59:E7:9D
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer:       /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial:       019356F6B61B41E7469DA8E0B4F3F9453F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:29 +0000
Files and hashes:         1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: jlpy4fUXKxnBEZJvADfZ/vhLqq9iMXr2lPxtdjMe47E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b6:1b:41:e7:46:9d:a8:e0:b4:f3:f9:45:3f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
        Validity
            Not Before: Nov 23 03:00:29 2024 GMT
            Not After : Nov 24 03:00:29 2024 GMT
        Subject: CN=c4376f5456da6c16c9f7cd07e19b618b2859e79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:a6:21:8f:ea:dc:b1:2f:fa:09:01:67:d1:
                    c5:3b:57:92:6a:f3:ef:23:d2:31:15:26:fb:cb:ab:
                    e8:d5:a6:12:7c:b8:c9:dc:69:41:15:c6:df:32:c4:
                    9b:2a:dc:80:c9:80:da:04:61:b8:46:4a:d4:7d:27:
                    c1:44:a7:86:77:40:23:5c:de:d3:97:73:d8:85:fb:
                    b5:22:fc:60:26:3e:33:cb:17:d0:4b:85:e2:83:62:
                    04:ff:94:d6:a4:c2:9e:27:58:4a:09:af:14:37:a2:
                    54:f9:65:02:fe:6e:92:00:34:f8:6f:52:89:a0:b9:
                    b8:ad:c4:02:95:de:ad:56:5d:50:f7:2f:4f:fc:6b:
                    72:3c:9e:e0:5e:bc:4b:86:c8:85:8b:98:0c:dd:89:
                    52:55:61:c0:d1:37:43:c3:2f:b4:c4:4b:9b:c5:ca:
                    3a:70:9e:ff:6d:a2:47:73:f9:1d:fc:62:72:94:c4:
                    47:03:c7:b0:ff:a7:f3:8d:4c:5c:b3:6f:5b:ec:40:
                    01:32:a3:fa:73:13:65:35:60:0b:de:c0:e1:af:e0:
                    37:98:92:d3:93:4b:f7:0a:43:40:bc:9f:29:e0:4a:
                    57:14:72:3a:31:f4:1c:e4:9a:28:c7:17:16:f2:af:
                    7e:bf:72:db:b7:e7:e9:97:45:8f:0a:cd:a8:0c:31:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:37:6F:54:56:DA:6C:16:C9:F7:CD:07:E1:9B:61:8B:28:59:E7:9D
            X509v3 Authority Key Identifier:
                keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:08:a7:48:e7:03:a2:a3:69:a4:d6:80:4b:7b:48:07:68:e0:
         f7:ee:3e:04:cf:d8:1d:d0:d4:c8:0c:cd:16:5e:af:99:65:84:
         79:db:93:44:8b:e8:0b:04:59:b6:56:a2:bd:b0:08:7f:fe:95:
         55:d4:04:94:92:25:57:cb:fa:ab:62:f6:29:d1:1f:8f:c7:8f:
         c2:7b:28:cb:38:fe:89:3a:24:b1:05:e1:b9:22:f4:34:79:9a:
         88:fc:5e:1a:4c:43:20:fd:d7:b9:a9:5c:c7:44:2f:83:c8:37:
         17:29:16:d7:73:a7:01:9a:80:89:6a:22:bf:ad:48:5f:f4:47:
         c3:0b:a3:7f:05:11:7b:25:e0:53:48:1b:10:10:50:14:05:ae:
         20:94:86:48:f0:de:e4:e6:f2:98:09:58:bf:3a:f7:b9:32:ad:
         29:54:2b:e9:76:a4:06:50:84:0f:ba:08:64:8c:e3:7e:d7:3f:
         e2:ac:16:9b:d0:91:45:07:84:f5:0e:db:5d:2f:d0:8b:74:86:
         c9:4d:f8:a4:32:97:35:3d:38:a7:ac:a5:c2:94:4c:d9:30:51:
         c3:5a:3c:1f:8e:a2:26:40:99:d7:94:4d:8f:98:25:ed:86:4f:
         9a:67:18:e0:6e:65:15:e7:f7:ab:c4:a9:19:9f:6d:3f:dd:1b:
         b4:1e:e3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:34 2024 by rpki-client on console-fra.rpki-client.org