Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          PbxkfTLUKbBaTxu85Nm0PsyOebIzUdfCMtkovwIIe7g=
Subject key identifier:   9D:73:F0:E3:7D:A8:46:E9:25:66:EC:5C:00:DE:97:FC:50:48:76:AB
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       019405A1B3E4F4F69DE7887BD2E2B65AD3C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          0E27
Signing time:             Fri 27 Dec 2024 01:01:10 +0000
Manifest this update:     Fri 27 Dec 2024 01:01:10 +0000
Manifest next update:     Sat 28 Dec 2024 01:01:10 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: 2hzElIK/ZHZJ2HCjEmEN0Mq34TX0j1WYtfvpT2Cxrlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:b3:e4:f4:f6:9d:e7:88:7b:d2:e2:b6:5a:d3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: Dec 27 01:01:10 2024 GMT
            Not After : Dec 28 01:01:10 2024 GMT
        Subject: CN=9d73f0e37da846e92566ec5c00de97fc504876ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:56:86:48:c4:d5:0f:fa:fd:8b:8b:7b:25:1f:
                    37:98:36:67:27:90:3b:13:62:cd:a1:c7:c0:c0:8e:
                    cc:93:fe:2a:3d:a4:c5:ee:71:56:64:87:33:c6:42:
                    51:fe:83:b7:4e:a3:22:2b:d7:ef:c7:56:9d:c5:f2:
                    4e:8e:d2:63:f5:2d:c8:6a:66:55:96:ec:20:4e:75:
                    67:aa:3f:a6:56:7b:7e:ec:3a:f3:b1:b7:a3:83:51:
                    02:55:d1:85:70:55:19:6f:47:74:30:b1:d9:1b:ab:
                    9c:39:7b:f6:5a:5a:a3:80:5b:c2:a6:be:c6:49:4e:
                    03:b7:fd:8a:a2:8c:1b:d7:a4:22:11:bf:85:2e:4b:
                    63:0c:1b:c0:ab:9a:3a:8f:f1:81:7c:41:f8:43:9a:
                    da:69:e7:c3:35:d0:4c:08:72:f6:78:58:c5:43:33:
                    c4:c6:40:7d:5f:3c:c2:cf:d5:a1:cd:9a:c9:9d:75:
                    52:32:86:d0:90:13:8e:df:18:4d:ab:8d:08:4a:fb:
                    cc:c0:05:52:d3:b1:a1:18:81:73:54:2e:9f:d6:32:
                    68:89:d6:c9:29:7f:c8:8d:be:8d:0b:07:b2:47:bc:
                    12:0f:c4:ad:b6:f4:5b:2c:ae:1c:f0:7b:fa:ae:52:
                    1c:c1:a5:a4:77:d8:93:8c:8d:65:ef:a8:c1:57:51:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:F0:E3:7D:A8:46:E9:25:66:EC:5C:00:DE:97:FC:50:48:76:AB
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:81:be:f5:99:61:66:ab:cc:71:13:b8:31:b5:7e:19:df:7e:
         24:ee:9d:bd:e2:02:89:c2:ac:a4:dc:50:2f:83:c2:4a:e9:18:
         d6:26:7c:cf:94:66:98:85:e1:2f:48:dc:aa:41:d4:4a:61:03:
         38:38:97:72:c2:a6:4f:8c:58:5a:3a:e4:f3:da:16:f5:20:b9:
         d9:ab:26:84:33:9b:b1:0d:ea:2e:cb:1c:f5:bc:e2:54:bd:a8:
         4f:fd:df:6a:fe:5a:bf:99:12:e9:e5:4b:64:fd:7c:c6:b1:43:
         d5:b8:f9:d6:9e:1a:5e:82:4f:8f:82:6e:66:dd:d7:08:70:e8:
         8d:de:60:db:bf:74:d5:46:93:98:c6:d1:f7:92:4d:cd:a5:d9:
         fa:ca:98:2e:06:36:38:b6:5c:d1:c4:0d:bc:b9:b3:0e:4f:af:
         4e:f7:c2:f9:02:54:8d:01:e3:e0:00:2f:05:1c:31:b0:b2:c3:
         c4:83:6a:ac:a0:74:58:aa:3d:f4:c0:92:fc:58:57:14:e0:02:
         6f:55:1c:2b:41:b2:d0:0c:39:d3:58:26:88:fd:93:4e:be:9c:
         ae:d0:f9:16:1f:c4:d3:25:c3:2c:62:49:46:05:1a:b5:d4:e1:
         91:5c:b3:6b:f5:90:70:47:84:c3:71:3a:15:86:70:4f:d9:03:
         59:11:b1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:59 2024 by rpki-client on console-fra.rpki-client.org