Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
File:                     ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft (raw, json)
Hash identifier:          lvZP+QQNl0P4TKrurJWr+mex29QV0w3s9Y3WYqx+aWU=
Subject key identifier:   34:FE:17:CC:A6:56:2D:0E:37:C3:1B:90:0C:64:EB:9D:99:B0:A0:45
Authority key identifier: 12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A
Certificate issuer:       /CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
Certificate serial:       01936BC84D00E26034F6E785AA0DD84D12BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
Manifest number:          0701
Signing time:             Wed 27 Nov 2024 04:01:49 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:49 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:49 +0000
Files and hashes:         1: ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl (hash: DoUNiOGk2cxqyr/92odVFLcGexqUL2RZXiNw2zyvFVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:4d:00:e2:60:34:f6:e7:85:aa:0d:d8:4d:12:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b3008edb7cc9d61daf65f0022688ac7325f03a
        Validity
            Not Before: Nov 27 04:01:49 2024 GMT
            Not After : Nov 28 04:01:49 2024 GMT
        Subject: CN=34fe17cca6562d0e37c31b900c64eb9d99b0a045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:8b:27:16:50:23:8d:d6:83:89:3b:0a:28:
                    e0:0d:a1:fc:59:9f:a1:04:be:82:9b:af:6b:59:f7:
                    13:e5:5b:48:4b:3c:b1:fe:12:e3:a5:9d:52:13:4b:
                    29:ac:14:df:e3:fb:42:c6:72:e2:f3:da:c2:fe:e3:
                    50:5c:99:8d:15:31:11:4b:ca:be:83:a0:85:71:81:
                    8d:dc:1d:81:66:47:79:e1:e5:a9:6b:a2:ba:b2:c1:
                    13:4e:de:54:23:c4:40:b4:bd:62:58:fd:6c:4a:9a:
                    27:b9:43:47:b4:d1:fb:10:1b:1d:73:a1:ef:90:ed:
                    ff:f6:ab:1a:b2:5e:e2:fc:3b:6d:41:df:e4:83:b4:
                    85:60:99:d1:89:91:e8:c3:87:80:52:22:32:66:5d:
                    03:5a:2b:48:0f:07:4f:6d:57:be:26:4b:e9:1e:fb:
                    88:14:e7:c3:fd:bc:49:79:e4:37:96:5d:91:a7:08:
                    74:9c:b3:12:03:fd:20:b3:2c:cb:1c:a5:62:fa:81:
                    e7:82:92:bd:86:2b:a4:11:37:43:73:fd:48:38:b4:
                    6f:46:f8:77:9c:38:ef:00:f2:3d:5c:43:49:5b:7d:
                    83:76:c5:f0:e0:67:07:a5:78:e9:bc:da:42:f0:05:
                    3e:ad:e5:5d:6c:db:7e:7b:21:b5:55:c2:77:45:f8:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:17:CC:A6:56:2D:0E:37:C3:1B:90:0C:64:EB:9D:99:B0:A0:45
            X509v3 Authority Key Identifier:
                keyid:12:B3:00:8E:DB:7C:C9:D6:1D:AF:65:F0:02:26:88:AC:73:25:F0:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErMAjtt8ydYdr2XwAiaIrHMl8Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d0893a-1526-4c78-9d89-08acde32e664/1/ErMAjtt8ydYdr2XwAiaIrHMl8Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:58:c3:8f:34:e4:62:29:e7:7e:e1:b4:f3:09:8d:36:6d:d3:
         4b:03:08:93:c0:7a:48:27:96:9b:c8:fd:8c:72:eb:8f:ac:47:
         89:8b:33:2e:42:8f:5e:8d:cc:f9:9f:83:e7:9b:7c:e9:f8:04:
         ab:a7:83:89:99:b9:e3:ac:08:71:c6:46:2f:71:31:61:c0:53:
         2c:84:96:63:f8:cf:fa:7b:8c:ec:ca:15:99:e6:c6:08:09:94:
         03:aa:d2:65:a6:65:77:d2:c4:6b:f8:d8:41:91:42:77:e4:d1:
         2e:96:2e:82:28:87:a1:0e:11:be:8b:ee:2e:b4:fe:25:41:b2:
         ab:a5:48:7f:2e:63:5c:fd:2e:1a:66:af:2f:77:76:2c:51:75:
         15:0a:05:a6:ae:5e:0e:3f:8b:08:1f:e8:31:91:fc:65:98:59:
         28:a6:6b:80:4b:99:81:27:bb:5e:26:95:3d:9f:9d:52:a9:44:
         08:84:b8:06:91:33:a9:23:a0:62:d3:bf:6b:14:01:b2:a2:53:
         ee:37:af:24:c4:18:34:4b:ad:82:6b:d4:38:43:04:ec:37:95:
         10:4b:fc:d4:25:2a:81:c7:91:09:35:2c:7f:29:d2:9d:f4:dd:
         13:6b:dd:b8:a2:53:0c:97:2a:7d:f9:1b:56:98:55:92:fe:7b:
         4b:bc:56:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:22:05 2024 by rpki-client on console-ams.rpki-client.org