Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File:                     t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier:          Un3CJibUPnQ/FQX0kZBXSdYdxOMqMLJAAo1NL1kK/Ko=
Subject key identifier:   3C:54:88:6F:D9:11:8E:BD:94:A9:B6:93:A0:D2:3B:E4:34:D8:97:45
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer:       /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial:       019360D59CE01DB036519C938F423B3C51B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number:          0BF9
Signing time:             Mon 25 Nov 2024 01:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 01:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 01:00:32 +0000
Files and hashes:         1: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: EqU5vvxfZ+GXiosG8/8s9JQqT1q8N+HOepmlLajeJAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:d5:9c:e0:1d:b0:36:51:9c:93:8f:42:3b:3c:51:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
        Validity
            Not Before: Nov 25 01:00:32 2024 GMT
            Not After : Nov 26 01:00:32 2024 GMT
        Subject: CN=3c54886fd9118ebd94a9b693a0d23be434d89745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:a9:98:f6:64:e4:39:92:40:9a:6b:63:30:
                    51:59:e4:7d:dc:ce:29:41:b3:21:2d:38:4a:ad:d8:
                    d7:e6:51:83:ac:04:ab:95:49:77:22:11:ad:dd:ce:
                    85:83:ba:3c:84:ae:94:ab:3e:7b:ab:e0:84:8a:2f:
                    e7:99:e3:42:9e:19:8f:9e:8b:bc:b2:6d:3a:6f:7a:
                    9c:4b:51:b1:5e:02:b9:b3:59:db:26:98:10:6f:8c:
                    80:45:d3:c2:c2:31:b4:60:68:e0:13:78:e1:ec:dd:
                    2a:d7:c0:06:88:ad:0b:88:30:8b:10:87:af:f7:fb:
                    40:22:1e:b7:41:94:b3:b1:c7:a1:fb:9a:de:ee:1a:
                    b1:1b:a7:0c:6a:a4:83:8a:5d:77:99:19:e1:32:ed:
                    60:5b:0e:b3:ed:d4:c8:01:72:30:e6:9d:2c:16:43:
                    18:d5:48:b7:d2:ce:d4:95:00:7b:ba:47:13:c0:a4:
                    c1:4f:30:8d:23:97:a7:bd:74:b2:a8:2d:e5:cc:93:
                    ae:f1:47:58:46:d7:46:c9:14:b1:36:78:f2:61:24:
                    f3:e7:bb:eb:5f:48:8b:d0:5e:77:d8:b4:e2:dd:59:
                    cc:ab:e5:6a:8d:c3:a2:80:e1:cc:1b:22:d9:ba:db:
                    4d:76:b5:1b:11:01:f0:ec:29:d3:34:ea:ed:3a:16:
                    b5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:54:88:6F:D9:11:8E:BD:94:A9:B6:93:A0:D2:3B:E4:34:D8:97:45
            X509v3 Authority Key Identifier:
                keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:b8:c6:74:80:bb:90:ec:08:4b:26:2e:47:6b:41:37:9b:
         24:a6:82:b8:02:13:30:77:f8:eb:0c:af:2b:be:b5:7f:d7:b2:
         91:0f:15:9e:12:cd:ec:94:a4:e0:79:db:22:53:f0:2b:e7:ec:
         71:6a:90:bf:e0:fa:d7:e5:74:e6:97:de:a6:69:4f:3f:96:37:
         1c:07:ff:5a:01:48:5b:3d:0d:45:26:ae:83:7b:8e:fb:47:9d:
         01:c5:97:1d:48:d4:9d:3d:89:2f:0f:af:24:d9:67:8e:6e:0a:
         5a:34:27:e5:7d:2f:86:61:f1:a3:1a:ff:23:6f:47:df:b0:be:
         82:97:b9:5a:6a:5c:02:f7:f2:a7:00:98:13:d8:54:6f:11:c7:
         3e:6b:f6:c9:d3:7e:a5:50:6d:d5:fb:55:4c:b9:cf:a5:3d:33:
         f5:e0:b3:d9:d1:d9:d5:59:f4:47:ee:7a:a9:4a:66:79:d1:0b:
         95:2f:91:dc:60:45:5d:13:c4:ce:5c:7e:16:72:22:2d:fc:da:
         76:0d:b5:d8:4c:f8:5a:2c:dc:5e:be:0e:76:77:c3:47:31:6f:
         a6:b9:df:85:c8:5a:b6:f6:41:4f:2e:a0:b9:12:ce:4c:bc:52:
         75:a0:67:22:7c:85:7e:e5:29:44:67:38:9d:af:3b:b6:5b:71:
         7b:29:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:19 2024 by rpki-client on console-fra.rpki-client.org