Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File:                     2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier:          lzbo8Fyw1zf8jofPMv92pxpNMvYJEysdiOoJA/eq/Xs=
Subject key identifier:   97:F2:0F:B8:37:DB:88:C8:61:0E:53:C8:8B:59:31:1A:D0:5A:7C:5A
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer:       /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial:       019405A1875CD4A7B5E42F0A1A391E392169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number:          114F
Signing time:             Fri 27 Dec 2024 01:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:59 +0000
Files and hashes:         1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: HtiiLwh0dvj6IY+i3rT8cAdiH56V/1QOywp+I6FDql4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:87:5c:d4:a7:b5:e4:2f:0a:1a:39:1e:39:21:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
        Validity
            Not Before: Dec 27 01:00:59 2024 GMT
            Not After : Dec 28 01:00:59 2024 GMT
        Subject: CN=97f20fb837db88c8610e53c88b59311ad05a7c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:88:7e:6d:45:7c:74:71:61:28:cf:10:cd:
                    54:c9:c4:66:93:e5:e1:f5:76:4f:84:0f:fa:c7:b4:
                    f5:fd:97:ca:f9:3d:05:17:ff:74:97:e6:ed:a0:9c:
                    8b:b8:6d:de:51:46:1e:7b:33:77:79:87:25:52:4c:
                    9b:75:bc:e1:bf:79:cd:37:85:10:1a:74:4a:46:0b:
                    f8:4a:73:be:8b:0f:ba:85:c7:c7:04:4d:24:d6:4a:
                    4c:8e:5d:d5:27:b5:ac:3d:90:4e:d2:bc:77:b7:1e:
                    d2:df:6f:01:4c:a8:9b:4a:94:e9:63:23:d8:1e:0b:
                    44:7d:0a:27:6e:de:46:ff:14:93:4e:91:c2:95:fa:
                    11:4c:31:18:84:6d:23:d5:3a:2f:30:15:e8:78:95:
                    93:f1:69:c8:04:56:19:ad:a4:bc:18:c9:ba:be:1a:
                    58:6a:99:42:05:1a:ce:ad:af:e6:6e:06:eb:dc:2d:
                    7c:ea:58:af:32:11:d1:e6:6f:b6:f3:4f:3c:eb:0e:
                    2e:b8:85:d7:08:28:7a:f7:45:1c:0d:73:b4:f5:05:
                    fa:9b:1f:bc:3b:83:8b:14:38:15:72:7e:2a:28:78:
                    bd:0a:c7:13:14:ee:c9:f0:ce:62:ee:2d:6b:de:91:
                    2e:16:78:23:14:b5:cb:01:20:e9:fb:03:03:fc:2d:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:0F:B8:37:DB:88:C8:61:0E:53:C8:8B:59:31:1A:D0:5A:7C:5A
            X509v3 Authority Key Identifier:
                keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:65:46:17:91:9e:9b:97:e3:84:1e:6a:d5:95:83:1b:cc:
         0c:85:4e:2c:0a:d7:cf:aa:8a:0e:1e:94:bf:5a:5f:f3:0a:e9:
         a8:d1:5a:46:12:77:83:e4:59:44:72:75:c4:01:09:d3:0a:8c:
         8d:dd:ff:49:58:30:d9:0a:84:33:a6:59:d8:56:e2:c6:5a:fd:
         20:81:a6:52:2e:9a:9f:ef:c7:68:82:22:d6:32:d7:9b:b5:f6:
         74:dc:cc:5e:ee:88:14:db:24:2d:a5:30:a9:d6:dc:57:d3:51:
         af:ab:08:4c:2c:3d:b5:d1:65:c4:e7:cd:8c:8a:68:7f:50:6e:
         0b:29:8d:e4:26:6a:c0:fa:2e:5f:d0:d9:5c:83:b7:fe:fb:7c:
         b3:e4:c9:d0:02:ad:06:5f:ce:a9:d7:f3:e9:05:07:7c:c5:52:
         81:12:32:a9:cc:df:0f:b1:22:34:8a:c4:74:e7:cd:0d:20:23:
         f5:54:c6:0a:80:03:24:95:3b:fb:09:67:5e:e8:87:79:19:03:
         e2:99:b8:a6:59:e0:eb:bd:5b:71:f0:43:61:ea:df:b7:f3:d8:
         3e:0f:5d:55:b0:b2:b1:1c:c1:fa:f8:4c:2b:1f:b6:1b:94:e0:
         c6:1c:4d:27:f0:b1:a6:dd:ba:93:51:1a:ef:48:9e:8d:05:5d:
         0b:40:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:16 2024 by rpki-client on console-fra.rpki-client.org