Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft
File:                     iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft (raw, json)
Hash identifier:          ZmaT6RGamKeIW8C0IyKwbjueKHdNIohokf4iFr6DaFI=
Subject key identifier:   A3:07:B6:93:16:70:8B:DF:AD:B7:EA:79:E6:50:B5:53:05:0E:DE:CC
Authority key identifier: 88:B6:81:CE:CE:A5:85:F5:2E:57:0D:75:8F:5B:E6:27:42:16:00:55
Certificate issuer:       /CN=88b681cecea585f52e570d758f5be62742160055
Certificate serial:       0193587980D98E37F2AFEBF7DFCDDE662231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLaBzs6lhfUuVw11j1vmJ0IWAFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft
Manifest number:          0D11
Signing time:             Sat 23 Nov 2024 10:02:58 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:58 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:58 +0000
Files and hashes:         1: iLaBzs6lhfUuVw11j1vmJ0IWAFU.crl (hash: 2bwsHmdLcTXpxTvap4soJ+l6l4ZtCx5DVietmPW04QM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLaBzs6lhfUuVw11j1vmJ0IWAFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:80:d9:8e:37:f2:af:eb:f7:df:cd:de:66:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b681cecea585f52e570d758f5be62742160055
        Validity
            Not Before: Nov 23 10:02:58 2024 GMT
            Not After : Nov 24 10:02:58 2024 GMT
        Subject: CN=a307b69316708bdfadb7ea79e650b553050edecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:fb:82:4e:c6:ba:72:30:40:e3:11:43:21:
                    8f:d6:48:74:dd:d6:2d:51:d1:ee:1b:84:02:ea:98:
                    00:31:6a:41:e7:a2:c9:de:cb:09:5e:0e:f3:71:51:
                    8e:89:df:ff:75:1e:25:99:92:a7:dd:ff:28:6e:41:
                    e2:41:11:0e:1b:18:7d:c0:e2:a2:ad:63:3d:60:31:
                    00:c6:fa:49:ec:6a:40:1b:b3:84:09:df:0e:9c:27:
                    15:69:5d:85:a8:bd:8e:88:1c:66:e2:01:28:e8:16:
                    5a:0f:3d:46:01:f5:ce:b2:6a:44:c4:62:20:fc:9a:
                    cc:98:6a:af:cb:ee:5a:e3:11:91:e0:de:03:c1:fc:
                    47:33:52:94:71:22:95:c5:88:6a:62:5d:73:3e:7e:
                    36:bd:5b:31:cd:85:cc:45:d2:aa:dd:a6:c9:3e:f4:
                    2d:4e:25:79:4b:55:db:15:ef:11:fa:13:51:80:32:
                    54:ad:4c:8b:6f:28:74:8f:79:78:80:37:55:9a:e1:
                    83:0c:b3:6e:5e:8b:9f:0d:7a:3b:83:87:13:a3:0d:
                    3d:78:95:6f:7a:ae:c0:00:b2:7e:90:54:48:da:28:
                    d0:75:24:76:ce:6f:90:0f:d4:4b:04:88:d9:a9:cc:
                    35:6e:6d:ed:74:85:23:7a:89:03:63:dd:f6:28:fe:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:B6:93:16:70:8B:DF:AD:B7:EA:79:E6:50:B5:53:05:0E:DE:CC
            X509v3 Authority Key Identifier:
                keyid:88:B6:81:CE:CE:A5:85:F5:2E:57:0D:75:8F:5B:E6:27:42:16:00:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLaBzs6lhfUuVw11j1vmJ0IWAFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:d4:72:f1:e6:cc:30:22:e9:a9:16:6e:b7:83:a0:29:2a:
         ec:2b:d2:0f:0e:b4:c2:c4:db:40:da:cf:68:e9:1c:cc:08:82:
         99:78:c2:45:82:b6:13:be:58:4a:e7:1c:58:d7:cb:b3:9d:5f:
         7b:42:d3:8f:b0:59:73:25:2a:79:1f:e4:b7:b7:90:79:7b:9e:
         d3:62:3e:19:b2:f3:a4:09:49:07:88:49:15:98:5e:54:80:e1:
         23:5d:81:d3:e8:be:5d:7a:aa:62:30:0b:96:b7:99:2d:47:d9:
         f0:2a:06:14:88:4f:19:5a:e6:ef:88:bc:1a:88:a0:95:c0:31:
         3f:e7:c3:c9:41:7b:f7:7d:8a:f1:62:d5:e1:e7:7b:a9:ca:b7:
         6a:b5:5f:bb:35:1b:e2:81:6f:3f:11:8e:7a:f2:fa:65:3b:50:
         be:46:d7:92:79:50:d9:3d:2f:ed:e0:47:65:0a:44:b6:95:a2:
         b6:54:2c:56:aa:23:f3:a6:d8:b1:e2:e2:d0:22:50:b9:31:a4:
         c5:9f:fd:09:3f:23:ec:ce:d0:b0:7f:fc:50:e6:19:90:6d:83:
         2c:05:c4:32:27:fc:e4:2d:37:80:32:da:07:3a:58:b6:e8:62:
         40:88:e1:9d:32:16:b7:dc:37:c7:b2:d8:cf:61:d2:e8:f6:55:
         a8:25:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:12 2024 by rpki-client on console-fra.rpki-client.org