Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
File:                     8_oS39r89zk5o5gPNSsF1Li6jYw.mft (raw, json)
Hash identifier:          AzV6uNArqpuh+e4z+A7cbyNUYPhdq5VwZQjmHCfRya8=
Subject key identifier:   1F:8D:3A:D1:F4:A5:4C:1D:C4:6F:E0:1A:12:82:1A:E4:52:AE:7C:18
Authority key identifier: F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C
Certificate issuer:       /CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
Certificate serial:       019357D2DC55400A402E1AEFA36594608BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
Manifest number:          07D2
Signing time:             Sat 23 Nov 2024 07:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:56 +0000
Files and hashes:         1: 8_oS39r89zk5o5gPNSsF1Li6jYw.crl (hash: +GB4piY//IwX6w+Od83eXzikqKmxe5GQ3tPG+HhOf1Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:dc:55:40:0a:40:2e:1a:ef:a3:65:94:60:8b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
        Validity
            Not Before: Nov 23 07:00:56 2024 GMT
            Not After : Nov 24 07:00:56 2024 GMT
        Subject: CN=1f8d3ad1f4a54c1dc46fe01a12821ae452ae7c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:93:ab:31:3a:31:06:86:fe:ed:de:0a:f5:f0:
                    ff:c7:e8:67:f0:ee:55:66:e6:9e:26:8b:16:96:ce:
                    2d:6a:82:ae:11:e7:3b:97:10:47:15:67:41:be:80:
                    54:45:cf:16:92:0e:e1:af:b7:96:79:23:f7:a6:99:
                    88:e2:3c:78:c9:2d:27:1f:f0:3a:f4:3b:73:ec:f4:
                    6a:6f:76:ca:fd:56:0e:72:6d:2d:8c:55:60:6f:ca:
                    b5:52:25:1b:8e:a4:3c:13:d5:7e:9b:56:9a:16:aa:
                    06:97:b4:47:df:f2:5d:95:60:07:3e:d1:de:7f:c6:
                    33:ae:f0:68:b8:03:d2:f5:ea:53:32:d1:4c:01:bd:
                    72:54:f8:75:52:64:63:68:77:b4:c4:e8:99:4f:cb:
                    27:45:3b:6b:df:00:0c:f0:6c:f0:f0:89:15:45:65:
                    0d:81:3a:c1:15:56:56:d9:18:11:43:21:25:49:e1:
                    9e:e2:59:99:a7:0f:03:6c:04:18:7e:a0:f0:90:54:
                    7e:d4:53:9a:78:67:0e:f9:c6:50:a0:9d:64:7e:fc:
                    2b:1f:26:5a:55:70:80:e7:cc:34:ef:4b:15:15:2d:
                    05:aa:e0:4f:8c:3a:90:1a:16:fd:00:44:90:5e:8a:
                    6b:3e:cb:f8:5d:e1:92:7a:42:d5:7d:e0:ff:04:25:
                    05:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8D:3A:D1:F4:A5:4C:1D:C4:6F:E0:1A:12:82:1A:E4:52:AE:7C:18
            X509v3 Authority Key Identifier:
                keyid:F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:19:7c:9b:6c:06:41:35:6c:c5:f9:7b:27:04:99:1a:51:a5:
         e1:24:e8:92:2e:e4:67:9d:af:b9:4c:f1:aa:e8:22:e4:73:f6:
         c7:aa:fd:f4:d6:3c:fa:5f:6d:56:a7:44:9e:d0:09:5f:d6:b2:
         e0:d1:75:d1:94:db:91:8c:f0:4f:6f:d6:51:e3:79:46:f1:75:
         37:34:fa:12:9f:d1:16:40:9b:b9:e7:04:16:9a:1c:f8:e7:98:
         1e:58:13:21:0c:9c:14:4c:5d:dd:50:46:b6:14:1e:7a:6e:ed:
         57:04:9b:36:37:56:36:cb:db:c1:c2:e0:2e:a6:47:ab:10:f8:
         1c:6d:a8:ca:12:5b:0c:8a:d3:f9:b6:7c:8f:06:29:53:35:0d:
         1e:c7:ab:a3:eb:6c:0e:78:7a:8c:69:b5:f2:92:1f:ac:a6:34:
         67:53:ba:0a:3f:3a:ab:7b:4e:0d:82:46:53:2a:02:dd:36:79:
         40:91:0b:62:fa:c7:7b:28:ba:e9:22:f2:83:3e:13:8f:53:84:
         0d:d2:68:4a:36:2e:c8:b0:26:7d:b1:46:e3:35:77:a4:6d:f4:
         7b:64:e1:5c:f1:68:8b:ab:45:c1:98:24:f4:16:3a:a4:24:de:
         11:1a:52:b1:45:3e:f4:f6:cc:ee:06:97:9f:ad:07:e6:ba:2a:
         c5:e2:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:42 2024 by rpki-client on console-ams.rpki-client.org