Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
File:                     YXe1tkvknoGZlf7n8-NiG9ymrow.mft (raw, json)
Hash identifier:          rhwNmvJjpoQ8tBbE7r01LWUhlbOVKBi/S5qiqqVtP2c=
Subject key identifier:   33:D0:5A:51:95:8A:8C:BC:8A:8C:00:F5:2B:1A:56:68:6B:47:CD:BD
Authority key identifier: 61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C
Certificate issuer:       /CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
Certificate serial:       0193696A9EF92E54A5683CC5F2C215EC5318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 17:00:15 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:15 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:15 +0000
Files and hashes:         1: YXe1tkvknoGZlf7n8-NiG9ymrow.crl (hash: oI4nRJzkUZMhGcpi8uP35vxtCQwFQpzsP9y4+V1B3pA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:9e:f9:2e:54:a5:68:3c:c5:f2:c2:15:ec:53:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6177b5b64be49e819995fee7f3e3621bdca6ae8c
        Validity
            Not Before: Nov 26 17:00:15 2024 GMT
            Not After : Nov 27 17:00:15 2024 GMT
        Subject: CN=33d05a51958a8cbc8a8c00f52b1a56686b47cdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:7f:e9:51:99:f9:73:08:a6:86:13:fd:43:
                    a2:cd:58:95:79:23:08:ab:88:ce:65:8e:6b:16:28:
                    89:9f:c5:4a:43:13:d3:46:b7:71:84:4e:b2:1d:5b:
                    4e:7a:09:2c:71:c2:02:db:9d:b6:9c:43:43:13:e3:
                    0d:36:6c:ef:1a:26:16:8a:99:a2:52:8e:84:a0:31:
                    d6:f9:5a:2d:61:93:5f:37:81:44:f8:98:2a:31:31:
                    b8:ff:de:49:89:53:2d:a3:3b:5e:96:2f:ce:d3:e3:
                    44:0f:b3:b7:52:27:f7:5c:e0:dc:bd:4d:78:11:b1:
                    7d:ca:09:67:b0:cb:1b:92:28:6f:9a:41:c7:df:da:
                    87:f6:1f:bc:96:06:4e:19:1a:f0:44:f4:58:fe:fa:
                    0c:16:b4:f9:40:e3:d3:90:a7:4d:b2:f9:7e:af:bd:
                    5c:89:10:6d:d7:5b:e3:15:8c:ba:0b:c1:8e:3c:61:
                    d0:7c:02:73:bc:bd:99:90:82:3e:d5:a5:36:50:47:
                    54:23:db:bd:1d:02:b6:eb:5a:2d:c2:30:99:e4:16:
                    a6:bb:53:a5:31:09:4b:ba:60:bb:be:14:81:d2:22:
                    45:75:e4:de:fe:ad:44:b8:5e:e0:cd:57:63:8a:74:
                    4c:d4:92:6d:dc:61:f6:8a:81:0e:d2:62:b0:a4:a6:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D0:5A:51:95:8A:8C:BC:8A:8C:00:F5:2B:1A:56:68:6B:47:CD:BD
            X509v3 Authority Key Identifier:
                keyid:61:77:B5:B6:4B:E4:9E:81:99:95:FE:E7:F3:E3:62:1B:DC:A6:AE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXe1tkvknoGZlf7n8-NiG9ymrow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d9c11-e1ad-47b6-af09-1713fd3ef7a7/1/YXe1tkvknoGZlf7n8-NiG9ymrow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:c1:67:ac:34:53:7f:fb:b2:42:07:64:3a:22:3f:36:fe:
         63:09:ce:5a:e3:f1:ce:64:9c:b7:1b:19:63:58:51:5e:ac:2d:
         07:f9:bf:95:6d:34:38:ed:06:02:b3:9b:30:f6:52:9b:94:10:
         3a:af:ad:0b:95:eb:a2:cb:01:45:88:59:be:2d:2b:31:51:0b:
         34:8d:8b:9b:c6:23:bd:da:91:79:2d:58:c8:63:56:49:1d:32:
         0a:96:69:49:bd:90:81:3f:e2:a1:b3:d6:4f:93:c6:9f:a5:fe:
         c8:d8:7f:b9:c3:71:06:c3:7c:ce:8c:20:21:24:c5:c5:86:56:
         9d:8e:1e:26:10:a7:3a:a8:c8:13:34:7c:e6:05:c3:22:3c:7f:
         22:ba:77:24:27:8e:21:8d:7f:dd:0f:81:87:62:ff:42:d7:e3:
         fd:02:8d:9c:25:c5:35:af:76:cb:0d:e5:38:86:e7:99:f2:68:
         1e:37:d1:b3:ee:04:54:59:93:7b:92:6e:79:4d:18:61:3d:55:
         e5:79:39:a9:dc:d0:32:99:7b:af:9c:52:51:87:71:1c:24:1a:
         fe:df:03:95:88:ec:85:0a:ca:b9:12:da:bd:15:34:ff:8c:7f:
         6f:43:c7:d3:7f:89:4f:cd:f4:9b:b7:d6:41:d1:8b:ac:96:44:
         95:77:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:09 2024 by rpki-client on console-ams.rpki-client.org