Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File:                     2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier:          EZ5eZFMv3e0D8haIff1CDgakkirbI15Mf46P6GCMf3U=
Subject key identifier:   E5:77:09:6D:B9:5B:C9:A9:F3:5F:0D:0E:4C:F8:40:01:C8:8C:81:89
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer:       /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial:       019367EC1EB620C319E9997CD0799A01BCCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 10:02:27 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:27 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:27 +0000
Files and hashes:         1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: 3ri2K40BfS25kyiJLeuYupwCXNOCvf4x9MZEPJxjl10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:1e:b6:20:c3:19:e9:99:7c:d0:79:9a:01:bc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
        Validity
            Not Before: Nov 26 10:02:27 2024 GMT
            Not After : Nov 27 10:02:27 2024 GMT
        Subject: CN=e577096db95bc9a9f35f0d0e4cf84001c88c8189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:dd:96:f1:64:a9:98:19:b1:78:5a:5f:b3:
                    c7:68:ef:85:c4:cd:ff:1a:8e:1b:dd:76:1f:53:54:
                    48:62:6b:d7:b9:99:4f:ac:ca:31:9b:98:d1:86:08:
                    4b:48:64:51:06:39:97:ab:e8:e6:b0:c1:ca:d6:1d:
                    6e:4a:12:79:a3:65:1a:0b:dc:99:28:96:ea:32:22:
                    49:59:d7:71:07:36:92:94:13:57:70:14:c9:36:7f:
                    0c:45:b3:85:4d:3f:61:b3:e7:f1:18:fe:5a:00:3c:
                    76:fb:ed:ba:95:0a:1e:fb:8c:75:20:0c:16:d2:19:
                    8e:2b:b2:83:96:c6:29:2c:5e:47:7f:3a:b7:9e:bb:
                    a0:5d:fd:c4:c5:9e:a3:6a:2c:95:86:39:55:9a:e0:
                    bb:82:e7:f3:74:7a:75:9c:30:67:c7:2c:58:86:c1:
                    1f:1f:7f:08:50:df:4f:23:66:dd:bf:2f:d3:d8:1f:
                    c4:26:a0:46:37:d6:8a:95:a9:87:26:e7:e0:5f:48:
                    61:f0:65:06:1e:93:67:b1:15:2e:57:4d:cf:66:c6:
                    d7:11:8a:ba:0e:3c:c9:79:36:4a:0c:af:2c:a2:c2:
                    ef:bc:70:56:22:ac:57:f2:18:07:e8:23:33:cb:8f:
                    ed:db:3c:71:b8:5b:6c:bb:1a:76:fe:14:9b:8e:c1:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:77:09:6D:B9:5B:C9:A9:F3:5F:0D:0E:4C:F8:40:01:C8:8C:81:89
            X509v3 Authority Key Identifier:
                keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:d2:a6:d0:78:8f:81:a9:a5:44:b2:b9:ec:22:ee:f7:ae:
         01:e7:a6:df:fd:49:69:2a:99:56:21:21:16:d6:a7:d8:67:5e:
         cd:29:5a:54:06:7d:26:43:1c:9b:50:d7:a9:39:f7:22:ff:6e:
         0c:63:b2:bb:04:e8:49:e5:3d:27:ec:41:2f:80:87:dc:e5:ff:
         4a:88:42:93:19:17:84:95:24:f5:a2:6e:fc:26:56:85:d0:a1:
         c0:c3:f7:7f:f2:f7:28:83:9a:4c:b2:14:79:ad:04:f6:89:18:
         41:61:be:8d:68:8c:78:35:d0:01:3f:6b:fc:38:8f:36:7f:43:
         f5:1e:ed:57:c2:77:a2:a3:7b:48:f0:57:a2:5b:95:58:b1:6d:
         bd:69:b7:b8:a4:5e:a8:1d:83:47:30:5a:9e:de:cc:77:7b:58:
         d6:2f:e4:71:c5:7c:e8:be:a8:12:37:89:1b:8a:e3:cd:60:4d:
         a1:d0:a0:bf:d7:7a:5d:ce:95:7d:79:4f:c7:62:6d:06:a4:96:
         8b:5f:e2:91:2f:81:db:2a:e9:53:ff:6d:61:b1:c0:0e:37:30:
         e0:7a:a4:4d:16:c8:b4:b6:96:24:6d:fa:e7:4c:0e:b1:fb:cf:
         dc:34:7a:76:3f:99:cb:2b:23:35:8b:19:1c:c5:5d:3c:ba:fb:
         5b:bd:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:54 2024 by rpki-client on console-ams.rpki-client.org