Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File:                     cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier:          kxIbTYbY0IDj3vjl+g9Mv07hZOwxozKDqDS9592foy0=
Subject key identifier:   73:CC:E9:49:57:E5:73:C2:AD:A0:55:82:32:6F:EE:BF:DF:C9:FB:55
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019359C15FD27508110CD00973DF8068F574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 16:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 16:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 16:01:05 +0000
Files and hashes:         1: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: /883lDr7UlcKp5wYlZCRMUCV6ctCOBEyPtXOGBebsD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:5f:d2:75:08:11:0c:d0:09:73:df:80:68:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Nov 23 16:01:05 2024 GMT
            Not After : Nov 24 16:01:05 2024 GMT
        Subject: CN=73cce94957e573c2ada05582326feebfdfc9fb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:01:d5:e9:d0:75:8f:65:81:ab:53:d3:b6:
                    a5:68:35:ec:e1:be:0b:dc:ce:dc:62:76:8a:25:14:
                    c9:a7:04:4f:75:94:e9:bd:93:16:63:16:09:66:53:
                    e7:b4:5a:21:67:7a:ec:0f:ce:ae:fc:38:4c:ad:1f:
                    63:0f:3c:03:ce:91:e7:b8:31:9b:9b:c6:7d:1f:52:
                    f4:87:49:3e:d9:ca:2f:9f:78:0c:58:3c:96:c8:f5:
                    66:be:e2:15:7d:85:9b:53:84:a4:bb:93:5e:18:d9:
                    d8:f1:52:ef:c4:f8:49:4a:be:95:28:58:32:4b:78:
                    71:10:25:61:03:28:23:5a:8c:6d:11:b4:f6:6d:31:
                    a7:ab:88:58:e3:12:53:1c:56:68:d2:27:93:3e:74:
                    6d:8d:33:c0:d0:62:dd:09:59:65:0a:72:e0:bb:4a:
                    1e:74:c2:84:c6:d0:7b:14:63:90:de:61:2b:86:79:
                    ff:b2:33:42:5c:f0:47:e7:04:85:ef:43:cb:8c:a7:
                    66:8b:e2:21:f1:69:86:f6:b8:08:93:8e:61:49:eb:
                    d0:b6:a0:cf:8f:f8:af:65:f6:ae:df:b9:33:3a:fe:
                    a2:69:12:ac:8b:3c:19:bc:bb:d5:94:ae:00:ea:f8:
                    ea:8a:c5:0d:16:d3:05:5b:d5:33:ca:4e:0e:53:c1:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:E9:49:57:E5:73:C2:AD:A0:55:82:32:6F:EE:BF:DF:C9:FB:55
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:f2:18:c6:73:c5:b8:63:bf:7d:54:31:ba:55:5d:64:b0:
         47:1d:42:de:3d:a2:f1:cb:71:40:60:f2:a7:b3:45:27:40:8c:
         1c:da:ec:c8:e9:b2:b2:01:06:0b:2c:24:70:47:f9:d9:3c:3c:
         b7:94:96:cd:ae:ff:f6:78:d3:02:e0:0a:a6:7c:25:66:94:39:
         2f:4a:29:b9:2a:66:2c:46:cf:d3:2f:82:3d:89:3e:dd:77:db:
         e7:59:8f:7f:0a:76:17:e1:fd:f0:8a:3a:1f:ee:cb:34:7e:74:
         08:33:ff:1d:20:db:67:2a:e0:2e:2e:48:86:d4:f8:b1:66:31:
         9e:5f:be:74:21:9f:33:4e:37:80:77:38:c1:b1:80:df:90:b8:
         6b:8c:22:01:3e:e4:be:ff:37:2d:d0:46:89:24:48:98:a0:b3:
         6c:58:fb:cd:1d:72:d6:1f:69:54:41:07:cc:2f:03:4d:5f:20:
         b8:d2:38:6b:e4:09:19:c4:93:d5:e5:55:cd:af:c6:0a:57:0d:
         34:e1:23:10:ab:8b:d3:4e:a0:20:3a:19:59:dd:7b:7d:66:fe:
         a4:9a:83:65:58:18:42:bf:56:77:cb:9b:06:1a:e4:a1:4b:85:
         82:89:57:b3:a6:84:c9:b8:47:bb:aa:05:90:cb:60:9d:8b:c1:
         77:c8:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:32 2024 by rpki-client on console-fra.rpki-client.org