Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File:                     nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier:          GetH65o7X+gYR9LLp726FqTL0rz4BtQTP4Fjj7Kv+4k=
Subject key identifier:   49:AC:89:F0:25:23:6B:52:22:13:7B:53:FD:73:8F:39:36:79:10:7F
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer:       /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial:       0193576484B3B98E90E76286034FBF631451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number:          0E19
Signing time:             Sat 23 Nov 2024 05:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:25 +0000
Files and hashes:         1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: 9HJMfqwvU7Lcq/4ZJ8nq6dPiuYNFHH41odFlJb07Lxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:84:b3:b9:8e:90:e7:62:86:03:4f:bf:63:14:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
        Validity
            Not Before: Nov 23 05:00:25 2024 GMT
            Not After : Nov 24 05:00:25 2024 GMT
        Subject: CN=49ac89f025236b5222137b53fd738f393679107f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:08:9d:16:67:aa:ee:c5:55:9d:6a:89:e5:
                    4e:44:8d:85:85:75:6f:a5:e0:46:6f:18:bf:02:5a:
                    92:23:ed:e3:53:61:21:aa:66:8d:be:d1:2f:46:da:
                    47:bc:a5:7a:f7:5a:2d:89:5b:fb:1d:8f:a9:61:2c:
                    8b:46:ec:4e:0d:1e:d6:45:f9:03:a6:8b:43:81:97:
                    2a:84:cc:92:b2:ab:aa:6a:83:ff:36:4c:0c:42:63:
                    f2:ef:47:68:44:a2:31:06:a6:23:db:f2:2b:f2:86:
                    83:e0:de:f3:c4:f7:16:22:e8:f2:e0:9d:5a:e0:c5:
                    c2:63:b2:2c:f5:e5:12:05:c8:9f:c2:f5:4b:96:68:
                    72:64:dc:72:81:75:f6:82:4d:45:d6:a4:eb:3b:df:
                    5b:56:79:1c:cc:aa:6f:90:0b:b8:37:30:33:27:96:
                    60:e1:7c:92:8f:3b:62:70:7e:06:87:d8:fd:de:f5:
                    e9:5a:4e:93:fd:8b:c3:76:46:92:d7:1f:eb:e9:5e:
                    6b:46:30:e7:a4:d1:62:57:da:c2:7f:99:74:30:4a:
                    78:f7:ac:4f:39:05:96:de:21:10:2c:f9:6f:55:d1:
                    3b:10:3e:a3:a7:c3:06:b8:65:72:59:df:cf:87:54:
                    bb:36:77:9d:3a:a6:f9:c2:c0:56:25:af:b1:70:74:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AC:89:F0:25:23:6B:52:22:13:7B:53:FD:73:8F:39:36:79:10:7F
            X509v3 Authority Key Identifier:
                keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:db:8d:21:c8:fe:12:df:30:3c:4e:f8:41:24:ad:a0:3b:
         e9:cb:00:ee:b2:43:1e:c7:c9:4c:7f:5a:e0:7f:97:af:d6:56:
         aa:3d:11:42:59:36:c9:2c:46:c0:ee:62:7f:bf:94:2c:57:25:
         3d:aa:b1:61:f6:d0:85:de:83:af:97:35:23:03:ea:df:e0:a6:
         37:01:0b:c3:ce:08:03:ea:f2:82:8a:16:37:10:84:2a:10:a6:
         1f:ad:43:33:ca:50:81:78:61:52:92:2e:d1:21:c9:ff:5e:34:
         9d:05:b8:98:35:a9:f0:fa:42:43:b4:9c:5a:1e:92:be:3a:1e:
         43:b1:a1:03:21:29:00:d1:ff:91:d7:d8:26:b4:2e:1a:9c:fe:
         7a:7f:bd:6d:46:0a:2d:e9:16:93:09:2e:09:57:c7:2a:c7:30:
         53:80:7f:2f:af:4a:82:bc:cd:5f:5e:20:98:29:18:90:bb:fe:
         46:bd:27:39:62:c9:6a:ce:07:ee:5b:86:1e:5c:ad:9d:19:d6:
         44:ff:48:ad:05:c2:1f:95:ff:ca:c0:7e:c8:87:54:d4:31:96:
         03:5e:7d:8c:42:b5:00:9c:22:4f:c0:65:1c:68:ee:0a:e1:46:
         08:b1:2b:71:fb:2b:a9:62:cb:d4:bc:0b:c7:b8:6e:75:37:d0:
         8b:b5:1c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:20 2024 by rpki-client on console-fra.rpki-client.org