Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File:                     0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier:          wwfojrFMTP/ujZc7rN9Tm1OMjhhlnnergLqMDM83Ohs=
Subject key identifier:   EE:7A:13:65:E4:0E:A6:3E:F6:9F:A3:76:1C:F8:C1:AC:D2:C7:99:01
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer:       /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial:       01935688C8C529372983311954B932A728F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number:          0E6F
Signing time:             Sat 23 Nov 2024 01:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:25 +0000
Files and hashes:         1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: XOXTG+xBKU4ds2NyMQxePCugklETSBCSVRjkxZBD1tk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c8:c5:29:37:29:83:31:19:54:b9:32:a7:28:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
        Validity
            Not Before: Nov 23 01:00:25 2024 GMT
            Not After : Nov 24 01:00:25 2024 GMT
        Subject: CN=ee7a1365e40ea63ef69fa3761cf8c1acd2c79901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e7:f3:e0:41:f7:9d:e8:24:d8:cb:26:29:33:
                    93:0c:07:39:62:ab:42:c4:b2:2d:69:3b:75:d4:53:
                    e7:28:33:d3:4e:e0:49:82:52:0d:0f:0f:8d:e5:13:
                    81:65:90:31:11:67:cb:09:26:15:a3:22:66:96:05:
                    ba:64:c5:19:56:b4:f8:26:ea:80:36:26:a0:2b:16:
                    f5:83:bf:36:cf:2d:0a:d1:5f:f3:32:11:ed:58:64:
                    aa:32:e1:f6:52:b8:a6:d7:6d:c9:80:9c:22:6b:a4:
                    f8:da:bd:03:d7:79:bd:17:00:0d:8e:2e:7c:07:d1:
                    64:cb:fb:e6:65:de:51:db:dd:72:08:94:83:9a:59:
                    96:89:e5:64:62:16:9f:4d:a1:7f:48:51:33:43:d5:
                    74:7a:a5:5e:a5:25:77:02:9c:ac:45:19:93:13:bc:
                    78:e2:72:56:46:a4:d7:f5:18:7f:70:bf:d2:d7:fa:
                    68:bd:d0:68:4e:ab:a2:a2:c4:6c:8b:24:c1:1a:78:
                    82:43:df:7e:1b:e8:aa:67:a9:19:78:f1:21:94:fe:
                    67:a5:38:d2:04:c4:70:0d:dd:59:f5:7f:32:e9:fd:
                    d5:35:c5:62:12:5a:3e:32:d3:af:5c:83:34:f3:47:
                    9e:8c:fd:c6:32:73:70:26:da:2c:5d:a2:c4:bf:01:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:13:65:E4:0E:A6:3E:F6:9F:A3:76:1C:F8:C1:AC:D2:C7:99:01
            X509v3 Authority Key Identifier:
                keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:66:f9:4b:43:59:9b:21:f9:58:d2:e7:3a:dd:1b:b2:d2:
         cc:58:de:c9:ea:79:df:b4:a9:d9:71:3b:f6:67:92:6b:dd:c8:
         69:b1:a6:61:c3:24:83:8c:8f:20:58:01:48:40:f1:54:84:98:
         b1:c7:f4:6d:cd:40:c5:31:cb:65:08:54:54:4c:fe:9e:a2:21:
         0f:0d:6b:96:50:4c:83:4e:61:13:84:a9:60:56:e8:12:47:ab:
         c4:fe:3f:0b:fc:c6:1f:63:08:42:76:52:4d:37:70:30:6e:2b:
         81:0c:08:d3:c2:7c:80:08:c2:17:f5:31:6a:e9:35:a7:e9:66:
         15:e3:db:df:61:0b:6b:70:34:cd:4f:7f:1b:e0:8b:dd:ba:d3:
         c0:3c:4d:ac:f0:70:5e:b7:c5:a4:7d:6d:a4:21:ab:f0:91:fb:
         eb:e2:3e:0d:7b:66:77:ee:0e:9c:a5:e2:4c:8d:63:08:22:b9:
         1c:e1:17:d1:d9:0b:c4:dd:d4:3a:05:b6:0d:e2:eb:6e:e2:f6:
         32:ed:ca:90:9f:41:d3:1f:25:69:6a:9f:ff:cc:3a:77:33:2b:
         5f:5c:a1:e7:a9:3a:22:d5:ba:73:52:11:5d:bd:8b:35:fd:a1:
         22:76:84:9b:38:97:09:c5:ce:21:d7:a7:31:59:2c:d8:3e:0f:
         93:00:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:12 2024 by rpki-client on console-fra.rpki-client.org