Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
File:                     1-75t-tXrSOmB5A0KS8VatHGuXdk.mft (raw, json)
Hash identifier:          Hv7JRFpNqHbABNag21QDIPCsUyku3rsQ+dC/oe8ITS0=
Subject key identifier:   60:71:B2:40:58:35:B1:72:6E:A8:52:D4:C8:44:76:99:B6:5C:B6:4C
Authority key identifier: FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
Certificate issuer:       /CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Certificate serial:       0192EF899A3F122C0ACF48427B7D6D77725E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
Manifest number:          05C3
Signing time:             Sun 03 Nov 2024 01:00:25 +0000
Manifest this update:     Sun 03 Nov 2024 01:00:25 +0000
Manifest next update:     Mon 04 Nov 2024 01:00:25 +0000
Files and hashes:         1: 1-75t-tXrSOmB5A0KS8VatHGuXdk.crl (hash: WpJe3NxFYW9IP37BlKUJ/wERh/N6fHAvhssJvuoeGp8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ef:89:9a:3f:12:2c:0a:cf:48:42:7b:7d:6d:77:72:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
        Validity
            Not Before: Nov  3 01:00:25 2024 GMT
            Not After : Nov  4 01:00:25 2024 GMT
        Subject: CN=6071b2405835b1726ea852d4c8447699b65cb64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:d5:6f:f2:eb:40:0e:3f:bb:63:25:44:15:
                    bb:f7:85:ed:b1:5d:86:27:98:6c:d8:a6:63:0c:c6:
                    6d:5f:bb:70:e6:15:c7:e8:cc:11:53:59:e1:e3:eb:
                    89:80:73:91:7a:6a:9a:8e:87:c9:62:30:65:51:af:
                    74:27:46:d9:3b:b0:b4:40:16:d2:e2:46:94:65:0f:
                    a2:4d:90:46:37:6e:df:df:8a:98:ed:92:97:01:d8:
                    29:df:e9:f6:d2:4c:6a:bf:95:5c:c9:34:b9:df:99:
                    87:0e:82:d0:ac:91:c4:94:f2:94:93:20:2b:19:66:
                    44:a1:82:04:3f:48:64:b0:55:c4:e7:2e:24:ec:09:
                    55:62:f3:34:5c:3a:05:45:4f:c4:5d:39:f3:30:7d:
                    a4:2f:a6:b3:fd:b3:42:bd:5c:5a:12:5d:89:fc:cb:
                    a5:7a:cc:8f:c2:52:7d:e0:82:25:72:57:96:33:34:
                    98:63:76:82:14:f1:cb:6f:5d:f5:5c:0e:d1:f3:85:
                    98:e9:24:00:89:b5:d4:51:6a:08:3f:6f:40:51:66:
                    86:c1:46:7e:c8:ca:1f:fd:2e:d6:fe:89:3a:bc:21:
                    a0:1e:50:34:6a:e4:b7:4f:73:a8:02:fb:b1:15:35:
                    ba:cb:99:8f:ec:2d:cb:93:29:0e:1d:5e:88:4d:4e:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:B2:40:58:35:B1:72:6E:A8:52:D4:C8:44:76:99:B6:5C:B6:4C
            X509v3 Authority Key Identifier:
                keyid:FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:95:df:d4:ce:1a:bf:42:f4:0f:78:df:6c:0f:fe:df:12:6a:
         3e:83:ad:1a:e7:5f:55:7e:c1:5f:4e:d8:43:48:00:11:af:e8:
         7f:a8:88:af:45:3b:8d:d6:8f:df:9b:e3:17:10:69:9c:8f:f8:
         d1:3e:1c:59:1a:44:25:09:86:7c:0c:0e:f5:ca:64:2b:c5:07:
         ba:3f:e6:d6:6c:31:79:bc:56:d0:34:06:3d:a1:e5:9c:86:c3:
         6a:00:3a:10:7c:4b:91:5d:48:37:63:85:12:ef:d1:e8:e1:1e:
         4b:09:05:dd:7a:f3:af:42:81:0c:50:ea:36:30:43:c1:57:27:
         2c:1a:5a:c7:7d:65:c4:47:05:58:8e:9f:7c:49:c6:c6:11:6a:
         f7:3b:74:d2:1a:65:6a:4c:75:7d:8e:ba:86:df:82:a1:74:22:
         74:3e:64:76:8b:61:73:5d:ca:19:9d:78:d6:a5:ef:d3:84:ca:
         26:b7:76:9f:45:1b:e0:f7:d7:48:e5:cb:26:7f:1b:4c:53:04:
         00:52:b3:dd:7a:0e:ed:d4:74:a4:e3:2f:64:97:0e:b8:09:51:
         df:71:e6:3d:cd:db:05:7b:68:99:44:ac:48:8d:4c:89:b7:e9:
         f8:8c:1c:d6:6f:10:d8:21:53:e5:c1:23:32:a3:1a:bd:0d:88:
         c6:89:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:41:50 2024 by rpki-client on console-fra.rpki-client.org