Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File:                     SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier:          J29lraii1O5gn7rBGraxsKkFlUwdxuxqmFGtwnemRlc=
Subject key identifier:   22:08:36:C2:C5:F2:88:0A:92:95:F5:47:29:BF:22:D8:CD:82:A2:5C
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer:       /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial:       019365FC0670ACD3C64E79D67DAEDB9182F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number:          0735
Signing time:             Tue 26 Nov 2024 01:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:35 +0000
Files and hashes:         1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: GePpfj3vG+jk6o8r31Ptr1keFuzVdjgj0dF6m5RUZmA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:06:70:ac:d3:c6:4e:79:d6:7d:ae:db:91:82:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
        Validity
            Not Before: Nov 26 01:00:35 2024 GMT
            Not After : Nov 27 01:00:35 2024 GMT
        Subject: CN=220836c2c5f2880a9295f54729bf22d8cd82a25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:7c:dc:c1:58:93:71:ce:6e:6b:52:1f:66:
                    14:12:d2:5e:6e:7e:96:8e:d2:50:90:aa:d0:a9:47:
                    d7:ad:ac:3e:22:dc:4b:3b:e4:72:e9:1d:d3:d9:7d:
                    f9:3f:06:aa:04:8d:e2:8e:b4:0f:71:92:ba:5d:e1:
                    15:79:85:d8:75:9d:d5:13:34:80:bf:99:49:ad:48:
                    c6:fb:21:e3:de:03:a4:f3:3a:c3:a6:88:b2:66:a5:
                    ce:a1:f5:1f:ce:33:cc:35:71:d7:3f:bb:78:f9:7f:
                    d6:36:6f:d2:6f:79:52:e0:14:f9:16:5e:73:c8:4e:
                    bb:e8:48:0e:01:36:4a:d9:7a:52:16:a2:1b:48:3b:
                    cd:14:34:50:f7:74:bb:25:bd:a1:8f:10:c2:4c:93:
                    66:3c:2f:4e:78:48:2b:0e:18:50:e7:6c:ac:8b:21:
                    4b:a4:c6:4d:f4:0b:2c:ed:a0:1d:5a:56:2c:21:b2:
                    8d:1b:89:b0:38:39:14:cf:14:4b:04:67:a3:63:32:
                    c5:c6:fb:ab:dd:16:f5:6f:29:ad:6a:cd:df:ec:a4:
                    9f:ad:04:f5:b8:04:07:6c:45:1e:8f:ee:88:7f:d5:
                    59:36:80:ae:21:c8:44:a5:22:53:fa:da:80:5c:8b:
                    ea:de:40:99:c8:f8:c2:29:7f:66:4e:1a:a3:b8:19:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:08:36:C2:C5:F2:88:0A:92:95:F5:47:29:BF:22:D8:CD:82:A2:5C
            X509v3 Authority Key Identifier:
                keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:5e:3e:d2:ab:5d:2d:d9:d4:be:8b:ba:95:81:f4:03:16:
         2d:0a:0a:90:21:63:f4:c7:d7:b4:22:19:18:1c:01:8e:61:ec:
         63:cf:ab:e5:79:55:d6:15:91:6a:75:9d:24:06:54:55:10:ae:
         12:0f:4f:f8:db:02:4e:d5:b1:43:a2:d0:98:a1:7a:6c:32:65:
         4a:68:0b:ce:04:b4:66:d8:9c:24:6e:b3:d9:b4:64:70:5c:2c:
         ed:f9:84:ce:af:2e:03:cb:f1:45:78:44:87:fd:e3:18:77:4a:
         21:8a:01:d8:b8:12:b8:ba:20:d3:c3:57:8d:5a:bc:58:7f:44:
         2a:fc:2b:b3:93:8d:d1:9c:37:b1:73:39:d2:7a:d5:69:1f:b0:
         73:f9:56:36:69:0e:6b:7f:fd:24:82:91:a0:a0:e7:2c:a3:4b:
         70:21:b3:3e:70:9a:92:12:14:23:e4:81:6f:0e:b5:17:30:2b:
         d3:a0:44:e9:68:06:c1:8d:3d:2e:9d:d8:d9:9c:c1:f5:1e:90:
         15:2e:2d:34:7b:bd:69:65:6f:1a:40:85:ee:72:fd:55:f2:5f:
         5b:11:04:d6:9d:76:ee:b0:2b:e5:f3:92:79:d9:28:ca:00:c2:
         de:ab:b9:5c:06:65:73:83:3f:fa:43:d8:37:a7:c7:44:9c:15:
         41:05:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:26:47 2024 by rpki-client on console-ams.rpki-client.org