Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File:                     1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier:          7lNvC6/tjPKN1m+GDZ9NbP6wTrVDLOix/d5bIROANRU=
Subject key identifier:   D9:90:6B:35:F9:D5:6A:9E:7C:4C:28:50:77:29:2C:07:90:A8:85:43
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer:       /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial:       019357D29FB03B9C207AD45D148F1AF06177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number:          1056
Signing time:             Sat 23 Nov 2024 07:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:41 +0000
Files and hashes:         1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: 058zTUd9bpORIG35ECsgQjcW2i4EbcCv0lUJwj0Wo4I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:9f:b0:3b:9c:20:7a:d4:5d:14:8f:1a:f0:61:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
        Validity
            Not Before: Nov 23 07:00:41 2024 GMT
            Not After : Nov 24 07:00:41 2024 GMT
        Subject: CN=d9906b35f9d56a9e7c4c285077292c0790a88543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:02:eb:4e:2f:cf:51:ef:88:44:f8:83:e2:
                    2b:bf:3d:78:16:47:cf:f3:d6:2b:0b:db:cd:95:88:
                    8b:67:db:36:86:1b:fc:ff:4a:17:47:89:51:e2:48:
                    a5:84:b6:a4:1f:f5:44:ac:b6:cf:c3:b4:b8:de:97:
                    de:02:61:22:14:93:cd:11:26:7c:e8:4a:da:0b:48:
                    8f:5e:b7:be:e0:b1:1c:e8:94:bf:6a:61:81:6d:ac:
                    66:1d:f8:92:40:d8:85:57:98:0a:a1:b0:3a:43:21:
                    8e:18:14:7d:90:62:e5:14:5a:9f:aa:93:4b:7d:de:
                    44:c7:4e:e0:07:f4:0e:4b:57:2d:76:e2:e5:19:dc:
                    50:7f:5e:d4:e4:8f:c7:c6:ff:29:3d:7f:dd:58:9a:
                    cc:ea:d5:ed:8d:06:ff:91:33:98:2b:47:49:31:af:
                    7e:ce:23:17:43:cf:96:e7:dc:ee:a7:82:a8:c9:02:
                    42:f4:4c:cb:23:5d:4f:22:89:21:09:87:09:1e:f3:
                    17:57:0e:6c:b1:fe:80:4e:58:a4:a4:33:8c:fa:41:
                    4f:0b:c2:cd:64:3d:fb:ce:26:b3:3c:d4:3d:eb:a3:
                    97:86:71:47:18:f9:b6:43:eb:e7:c5:18:94:cd:1d:
                    2a:2e:a2:23:b6:48:96:d1:f6:f9:36:a9:3f:d2:17:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:90:6B:35:F9:D5:6A:9E:7C:4C:28:50:77:29:2C:07:90:A8:85:43
            X509v3 Authority Key Identifier:
                keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:57:9a:a5:c2:64:cb:7e:9b:1f:2e:2a:b8:6f:c2:c9:2f:01:
         7b:83:e9:01:b3:fe:cb:e0:66:19:c1:15:60:b5:cb:eb:58:1c:
         0d:12:9b:fb:4a:4d:79:4f:33:6c:f3:c0:a2:ee:ff:12:38:b4:
         f0:55:bd:b4:3d:8a:ed:88:3a:aa:82:09:8d:15:9f:ad:f9:73:
         b4:53:e1:ed:f1:c7:44:16:2b:2e:37:17:e1:aa:0c:59:5c:9a:
         ec:12:38:5b:1b:f9:b9:14:e2:2d:4b:2f:80:bb:ad:52:2d:87:
         f3:e6:39:24:08:9a:92:30:87:9b:92:2d:16:47:d3:d0:de:1e:
         3e:0e:35:c9:16:6b:fc:cd:23:c9:f9:61:3b:bb:87:63:7b:8e:
         b1:7f:5a:92:17:20:de:06:ff:96:1a:f0:df:98:c1:2b:8a:11:
         a2:68:7d:f3:bf:fb:62:c2:2b:b2:51:d3:a0:98:c1:e1:7a:e7:
         7f:30:0c:87:98:c0:11:31:20:18:19:04:99:cb:f5:3d:e4:c1:
         3f:d5:e1:85:00:05:a2:54:43:f9:dd:6c:9b:4f:8d:f9:ee:a8:
         0f:8a:2c:d1:75:c6:98:26:b6:eb:83:22:7b:5f:b9:cc:3c:f0:
         28:3a:59:9d:0d:8b:6d:3d:63:e5:36:37:29:00:1a:01:5e:05:
         d6:1e:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:17 2024 by rpki-client on console-fra.rpki-client.org