Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File:                     1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier:          fJZl59ExPe59/6nM7FGUAnr64jmEFDo/v1YRJ0TIq+w=
Subject key identifier:   DE:4F:61:97:48:01:C2:DD:FE:84:E3:CC:2C:37:38:2D:63:D3:9F:3C
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer:       /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial:       0193568A50640B1BD9B6ACAD920BEEEF8045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:05 +0000
Files and hashes:         1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: JDhq4c0lCOaLwuLL7I9ZAM1F3/6VOTfgR9fLs4Rj6Wc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:50:64:0b:1b:d9:b6:ac:ad:92:0b:ee:ef:80:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
        Validity
            Not Before: Nov 23 01:02:05 2024 GMT
            Not After : Nov 24 01:02:05 2024 GMT
        Subject: CN=de4f61974801c2ddfe84e3cc2c37382d63d39f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:29:30:e0:2c:6d:4a:42:35:ba:c9:9a:65:
                    c3:06:21:33:23:a3:24:2d:66:82:d5:7d:44:7d:67:
                    f3:b7:70:1f:ac:8d:27:63:61:c8:78:3f:35:c1:02:
                    f7:64:a9:52:fa:06:3f:7b:89:c0:4c:2c:70:b7:bf:
                    8c:6e:87:79:30:f7:c5:0e:71:d6:7b:af:e0:a7:a2:
                    ab:d0:50:86:00:b3:65:ff:02:e5:1c:1f:13:13:eb:
                    da:da:64:ae:14:dc:13:18:f5:90:90:24:96:73:08:
                    bd:76:00:af:c7:39:1a:99:12:00:72:87:fa:3f:a1:
                    a9:ef:a2:af:69:3c:e5:93:e9:b2:99:aa:79:a8:13:
                    f7:b3:c3:11:95:41:62:f5:f3:42:5c:d3:15:ab:ab:
                    d4:54:83:b3:d5:75:03:5b:c3:8e:b2:0f:aa:88:9f:
                    5e:dc:da:1a:0a:9c:5f:ee:fb:0a:c7:cc:98:a9:d8:
                    ca:f8:e9:c0:a4:93:6d:bd:e1:74:02:3b:92:cd:67:
                    42:c8:12:0f:72:c6:4c:49:8f:6b:6c:e8:32:34:01:
                    1a:7c:8c:67:cd:9a:23:80:54:1c:56:c9:23:76:11:
                    4f:92:8d:16:40:46:f8:fd:68:5d:6a:f3:3f:56:90:
                    0c:f8:68:5b:41:0e:26:46:8f:bc:55:61:84:83:c7:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:61:97:48:01:C2:DD:FE:84:E3:CC:2C:37:38:2D:63:D3:9F:3C
            X509v3 Authority Key Identifier:
                keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:11:34:2c:f3:3b:29:fa:2c:a6:f8:f3:a1:8c:81:90:80:eb:
         df:44:5d:9a:41:1f:f5:a8:f2:2f:b5:88:25:fe:29:32:94:76:
         ff:00:1f:3a:34:72:43:3b:12:e2:bf:33:e8:de:6c:da:4c:e8:
         5e:dd:3f:fc:a0:6b:16:b6:1b:b2:5c:4b:25:26:51:e5:dd:cf:
         18:4f:f5:25:ec:bd:5d:68:98:43:93:d6:fe:2e:75:f8:48:1f:
         ae:ea:99:b9:58:78:da:cf:1b:6d:e9:25:82:13:24:9a:cc:f8:
         3c:33:0d:2c:40:3d:30:dd:97:d4:5a:45:3d:5e:89:97:b1:e2:
         c4:73:2f:12:f2:2e:b7:0c:24:75:1f:ed:0b:e4:72:95:d2:82:
         84:1f:bd:91:4c:4d:6c:ac:a3:c7:e1:66:4a:7d:6f:91:e3:fd:
         ff:ec:a8:1e:bb:e6:11:47:9b:0e:f0:ea:da:07:5d:64:80:27:
         3c:3a:21:28:25:28:9a:47:14:f8:80:b3:99:de:22:0f:55:b7:
         25:6d:81:32:a0:2c:3b:03:e2:8c:65:73:9d:88:39:e7:c4:b2:
         71:85:9b:af:58:b8:79:c5:3c:ab:1d:ea:7d:3f:5c:1c:c8:8f:
         f5:27:05:9c:9a:86:ca:f2:5e:6c:b5:a4:30:1c:c2:e6:ee:27:
         3a:13:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:59 2024 by rpki-client on console-ams.rpki-client.org