Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft
File:                     DheA2BVCvjaq8H64jkhtBCcjQfQ.mft (raw, json)
Hash identifier:          GCxLlz9rulIQZmvlb6DkdENdxhctY8Bk21hvOle5GM4=
Subject key identifier:   74:F0:A7:AB:94:D9:A5:3E:B9:C8:F0:AA:D7:23:E1:94:7D:48:75:7D
Authority key identifier: 0E:17:80:D8:15:42:BE:36:AA:F0:7E:B8:8E:48:6D:04:27:23:41:F4
Certificate issuer:       /CN=0e1780d81542be36aaf07eb88e486d04272341f4
Certificate serial:       0193568A113302B917D2627D2EF140FCD7EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DheA2BVCvjaq8H64jkhtBCcjQfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft
Manifest number:          09A9
Signing time:             Sat 23 Nov 2024 01:01:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:49 +0000
Files and hashes:         1: DheA2BVCvjaq8H64jkhtBCcjQfQ.crl (hash: OWiuGLI2pgZ4Pej1ypwxKZrYNMXRy0BzzzGCdG6AtdI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DheA2BVCvjaq8H64jkhtBCcjQfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:11:33:02:b9:17:d2:62:7d:2e:f1:40:fc:d7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1780d81542be36aaf07eb88e486d04272341f4
        Validity
            Not Before: Nov 23 01:01:49 2024 GMT
            Not After : Nov 24 01:01:49 2024 GMT
        Subject: CN=74f0a7ab94d9a53eb9c8f0aad723e1947d48757d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:92:5d:be:07:cb:30:45:40:52:53:f0:60:
                    71:bb:58:40:cb:c3:51:84:e2:e4:d1:c4:b9:ea:6e:
                    57:b9:cd:5f:76:06:bb:01:09:bf:f4:e6:91:49:d3:
                    1f:da:7e:80:08:54:8c:33:b2:4c:9d:a3:98:9a:cb:
                    67:66:9d:46:e6:eb:b4:1b:41:4b:1d:02:0c:84:3c:
                    92:5e:c5:3b:ae:52:4b:17:d7:ec:26:c2:42:8f:62:
                    f2:3d:90:4a:eb:56:73:0b:85:66:7c:5c:4b:ff:96:
                    e3:c8:37:ee:f7:4e:78:51:8c:8f:bf:bc:74:d6:8d:
                    50:ec:26:2c:7b:7b:04:4b:0e:2d:ee:3b:88:a9:df:
                    5c:a8:af:aa:8e:d1:68:6b:60:f1:c4:98:22:83:26:
                    10:91:04:15:4c:99:e7:fa:d0:4d:15:9b:4d:8f:ba:
                    f1:6b:34:9c:d0:17:a8:98:d3:11:1a:82:0d:b2:49:
                    74:a1:00:d2:41:fe:2a:f8:f7:a5:d2:ff:33:a7:06:
                    83:0a:df:39:8d:dd:3d:7e:f9:74:cb:37:6c:1c:32:
                    5d:e9:d8:4e:c9:b1:7f:5b:b0:48:cb:73:6a:fa:7c:
                    fc:cc:4f:6a:e5:14:91:d1:a2:06:23:6b:5e:31:06:
                    2b:53:0a:28:cc:86:66:73:08:41:61:cf:fd:39:9c:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F0:A7:AB:94:D9:A5:3E:B9:C8:F0:AA:D7:23:E1:94:7D:48:75:7D
            X509v3 Authority Key Identifier:
                keyid:0E:17:80:D8:15:42:BE:36:AA:F0:7E:B8:8E:48:6D:04:27:23:41:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DheA2BVCvjaq8H64jkhtBCcjQfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:5c:be:94:ca:33:6c:25:6e:71:b9:6b:88:1a:55:6c:33:
         87:69:14:b7:d9:f6:5a:02:c6:ee:df:90:4d:ab:d8:ea:45:aa:
         a5:06:bf:9a:c3:78:1a:5a:6a:19:36:4f:3c:27:bf:07:94:b1:
         82:dd:a0:81:f3:9b:b0:20:f7:ca:ca:62:01:a0:cd:57:0f:c6:
         36:08:74:f2:aa:48:27:a2:64:d8:5e:59:c3:a9:55:f7:46:e9:
         72:d1:c5:32:d3:ca:d0:3e:61:fb:1c:79:30:18:3b:e9:a2:d1:
         a2:fb:73:bc:a3:08:1d:c4:ae:b4:34:2e:cf:0e:56:ea:ef:d8:
         d8:81:1a:bd:bd:1d:77:0c:a3:d0:50:c9:4a:6b:17:54:ae:6f:
         8d:2e:15:67:a3:b3:c0:3a:e9:c0:6a:0f:20:18:bf:12:fb:3e:
         fa:69:23:88:92:3f:d9:de:d4:b9:ce:fd:60:e4:62:0e:82:ca:
         ed:18:9b:fd:f8:78:36:2e:b8:f9:cf:7d:5c:cb:8c:c0:72:ce:
         d7:96:73:e1:a1:f1:a9:2a:d5:6c:ee:be:a6:56:4e:a9:e7:d1:
         f0:a4:9d:a0:28:a6:00:3c:25:ee:d0:48:d5:53:33:bf:4a:b0:
         87:90:43:cc:7e:93:87:d2:0f:89:7d:4c:15:91:86:88:24:4c:
         c3:8f:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:29 2024 by rpki-client on console-fra.rpki-client.org