Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File:                     at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier:          M80JxBo2H3bbi4PbNPSDN9X3NiYwIphGicZxxYsEwQ8=
Subject key identifier:   C2:30:BA:28:8E:BF:C2:0C:5F:B0:04:BC:0A:51:64:AA:D3:E5:FF:A5
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer:       /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial:       019357D2EF360EDD324534F3A4001451B4C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number:          C0
Signing time:             Sat 23 Nov 2024 07:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:01 +0000
Files and hashes:         1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: UkpR2m3wMqftkbW1V3mFltwNMZhz6fl5JAGzfvBFaBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ef:36:0e:dd:32:45:34:f3:a4:00:14:51:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
        Validity
            Not Before: Nov 23 07:01:01 2024 GMT
            Not After : Nov 24 07:01:01 2024 GMT
        Subject: CN=c230ba288ebfc20c5fb004bc0a5164aad3e5ffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:d9:2c:21:d3:79:ac:90:c6:58:a9:6d:47:
                    22:b8:f2:fd:21:c9:66:be:19:76:bd:78:9f:db:04:
                    fb:0c:85:dd:09:d8:03:a2:d6:55:2a:03:61:c6:bb:
                    7a:f2:67:f2:c4:fc:19:be:4e:12:34:9c:d2:18:4d:
                    1a:aa:01:95:d2:e9:09:55:30:93:78:12:68:1e:41:
                    f9:b2:b7:25:b7:57:00:09:3e:b6:57:f2:81:22:69:
                    ca:18:3d:a8:f2:ac:64:a8:61:61:d3:dd:b8:49:05:
                    ea:8e:73:47:ef:66:cc:09:2b:f5:25:1d:4b:73:b9:
                    5c:90:f5:38:10:b5:9c:02:42:da:b4:8a:07:cb:f6:
                    02:1e:9e:1e:9c:c8:f6:a8:6f:f5:ca:69:80:a3:80:
                    43:6b:df:65:b5:fe:7a:f0:ed:c6:78:a1:13:69:7b:
                    e0:16:83:1a:fa:bc:19:2e:2a:d1:11:1f:b5:98:00:
                    2c:d9:2e:bb:71:0c:00:04:87:a1:ba:f0:e3:70:1c:
                    8f:42:6f:1a:c3:ee:3c:d6:a2:ff:61:81:18:63:f9:
                    23:2e:92:0d:05:d7:d0:a1:eb:70:2f:d4:42:21:1a:
                    36:24:8e:49:d4:45:35:1b:0e:7f:65:d8:ea:92:3f:
                    07:06:de:8b:1f:d5:a9:88:e6:ab:dc:30:9d:2b:92:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:30:BA:28:8E:BF:C2:0C:5F:B0:04:BC:0A:51:64:AA:D3:E5:FF:A5
            X509v3 Authority Key Identifier:
                keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:20:2c:af:d6:f6:5e:a3:f7:87:c0:53:63:7f:f5:33:a4:
         8c:98:c8:14:3a:96:05:d9:e0:00:f8:03:08:03:47:2f:f6:f2:
         77:0d:b5:72:43:4d:f8:c9:be:86:4d:76:7f:be:40:24:d2:44:
         65:e9:b4:32:b0:4c:ac:d8:1c:c5:53:20:3e:d8:da:ee:f2:42:
         4d:6d:f3:4d:6f:20:9d:f6:98:74:04:c6:7b:93:e5:21:50:df:
         9b:d8:69:af:08:53:7b:2a:e1:90:d3:c9:61:7e:92:9d:e4:8c:
         b5:9b:a7:b4:0d:01:6b:0e:8c:fe:1e:9b:be:5b:d1:ea:7b:08:
         fe:b8:77:6e:a0:4b:d6:ee:3f:b0:4a:13:91:b3:75:b0:de:4a:
         f1:0c:de:ad:de:bf:36:e6:68:12:bb:36:4c:33:cc:cb:b7:1c:
         cd:a6:ce:34:65:51:0c:6e:0e:91:fe:62:64:7a:04:01:f0:b4:
         fe:9a:ce:2d:6e:ba:19:08:9c:59:ec:5b:cf:a9:bd:6e:3b:11:
         20:dd:56:f9:5f:13:f8:92:b0:36:b8:c8:e6:f8:7c:80:5a:46:
         ed:8a:e9:b8:5a:ef:ee:3d:52:38:00:54:66:f7:a9:63:4c:c1:
         ad:7b:e2:b8:1a:a6:7b:f0:de:6b:f7:4f:78:d8:12:f4:9f:ea:
         32:1e:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:04 2024 by rpki-client on console-fra.rpki-client.org