Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
File:                     AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json)
Hash identifier:          w4ZXNSseWwmw+edwGi64OkH6RhveleUWpAD/7wscrOc=
Subject key identifier:   6A:91:0C:DF:F3:0A:55:C1:E3:A6:D3:75:11:D0:D4:20:26:EB:56:01
Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99
Certificate issuer:       /CN=025637d4888ee0058de9ad3a70c42dc469969a99
Certificate serial:       01936A46C2422D12E8B7A19EB7D4A8CF4EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
Manifest number:          07F1
Signing time:             Tue 26 Nov 2024 21:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:42 +0000
Files and hashes:         1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: E0g4meMtmKXqKocuh4QWqzviCIzr8m/UA/RI3q5eKFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:c2:42:2d:12:e8:b7:a1:9e:b7:d4:a8:cf:4e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99
        Validity
            Not Before: Nov 26 21:00:42 2024 GMT
            Not After : Nov 27 21:00:42 2024 GMT
        Subject: CN=6a910cdff30a55c1e3a6d37511d0d42026eb5601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:1f:11:70:eb:5a:17:e8:d7:4b:ba:9f:47:
                    fc:fc:3c:0b:51:8e:88:c0:84:b7:ae:c5:65:99:db:
                    8e:e6:69:3b:4d:9f:0c:fe:32:38:04:74:63:e7:ff:
                    77:ed:c8:ca:fd:af:3b:b6:6f:7b:98:88:c9:e0:22:
                    0a:18:02:d7:a2:60:50:2d:d4:af:63:57:ae:2d:64:
                    e3:45:44:25:dc:83:d2:01:c8:7b:f3:7a:c4:01:d6:
                    be:1e:ab:95:fb:3b:7a:b3:bb:a0:0b:ec:49:ce:b2:
                    35:81:e7:94:43:ce:39:46:47:30:41:25:75:7b:3f:
                    6f:8d:e4:4d:38:06:ef:0b:22:96:17:05:2c:cb:85:
                    14:2b:7f:b4:24:f8:a0:84:67:48:31:a6:96:0a:ae:
                    dd:36:cf:4e:29:25:86:91:93:3e:d1:47:ef:6d:1b:
                    96:ec:2e:98:52:dd:fc:fa:a4:e2:96:22:5f:59:91:
                    fe:2f:bd:fc:da:2f:5c:f6:8c:8e:c2:46:4f:66:41:
                    30:c7:e7:39:5f:2b:81:01:57:3d:31:72:b0:54:c2:
                    8d:b1:9c:fd:b6:05:f8:34:1c:88:6b:3e:ad:fe:cd:
                    6e:ac:14:45:82:a3:b1:65:be:a1:28:b2:2e:ba:7c:
                    29:58:d2:d0:a5:31:27:3c:a3:6f:2e:08:17:df:a6:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:0C:DF:F3:0A:55:C1:E3:A6:D3:75:11:D0:D4:20:26:EB:56:01
            X509v3 Authority Key Identifier:
                keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6d:d3:1d:99:ab:e1:80:de:04:d2:02:63:1d:18:02:3f:31:
         3d:aa:5e:ac:2f:49:56:fe:f7:d2:0b:7f:6d:9c:fd:64:d6:9a:
         cf:f2:64:9b:45:e0:1a:ac:b9:e7:b2:62:4c:11:25:38:64:81:
         ad:b2:b0:da:25:58:7a:56:3d:ee:93:ad:86:3a:b0:c2:6c:eb:
         80:76:10:49:74:64:c7:06:e3:17:37:d2:55:91:be:67:39:1e:
         d9:75:c3:fd:9c:d7:71:22:e9:f7:cb:a4:d2:bd:08:7d:d2:cb:
         06:57:fd:3d:00:4e:44:60:37:2f:84:36:b0:63:33:4a:ff:82:
         c3:6d:70:f7:e0:a2:57:e6:74:57:30:9e:72:95:4d:fb:55:42:
         d8:fa:d5:8e:f5:1c:a7:d3:bb:1b:fd:9f:5a:c5:f0:59:cf:a3:
         56:60:22:10:db:12:8e:22:ae:51:8c:0f:88:4a:15:be:68:70:
         4d:84:81:c4:8a:d2:5e:6a:f7:01:b7:67:b5:7f:d9:bf:99:41:
         5b:96:e1:30:3f:8a:0f:da:f1:9a:61:62:d2:fa:f2:d7:36:d2:
         3a:8f:65:aa:2a:d5:7b:25:c6:7d:02:c4:6a:50:69:bc:cf:27:
         73:8e:1f:14:62:49:c3:f9:ae:31:89:ef:95:28:74:1b:36:59:
         c3:58:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:01:07 2024 by rpki-client on console-fra.rpki-client.org