Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File:                     JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier:          6xHXSQAV+tvTlWDee0nWjuMfQjRm5PPMVAJ93nlmr2I=
Subject key identifier:   71:59:92:41:66:57:9B:CF:4D:CB:48:42:5B:21:FA:48:3F:46:CD:13
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer:       /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial:       0191F9D9ACE51E7FB3881C179811B659D972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number:          0426
Signing time:             Mon 16 Sep 2024 08:01:17 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:17 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:17 +0000
Files and hashes:         1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: ZAZH4nJ9y8Va6vUAKr9olmqKPyDpzNPdghvuqcm4e8w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:ac:e5:1e:7f:b3:88:1c:17:98:11:b6:59:d9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
        Validity
            Not Before: Sep 16 08:01:17 2024 GMT
            Not After : Sep 17 08:01:17 2024 GMT
        Subject: CN=7159924166579bcf4dcb48425b21fa483f46cd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:0f:d0:8b:e0:6a:d7:fa:cb:8e:ff:cc:7d:
                    ab:87:bc:0f:8b:18:cd:bf:a0:fa:0f:35:5a:1a:54:
                    b1:5e:bf:dd:5b:9e:8a:87:95:9b:4f:46:85:4f:a9:
                    03:08:02:88:97:c8:98:0f:a2:0e:ff:d8:5b:67:cb:
                    96:17:22:97:28:c3:af:d3:84:f8:1a:6f:a3:ad:9f:
                    46:77:8e:3c:d3:c1:e3:68:05:dc:11:3b:dd:e9:05:
                    b2:1f:46:a8:75:27:08:bc:89:ca:01:db:9b:9e:5f:
                    a4:5c:1a:9a:0a:0b:46:b8:2a:c8:9b:0c:07:1a:a8:
                    69:f9:5f:5e:72:6e:31:26:bc:81:29:02:36:b6:eb:
                    fc:6d:f0:be:08:8a:e7:4d:cf:f5:56:38:56:13:79:
                    ca:4a:f5:ba:cb:06:e4:1a:b3:d6:5d:c9:9b:20:c8:
                    08:6c:15:6e:9f:60:77:c2:ff:d9:bc:e1:13:5c:ac:
                    73:3e:a9:a4:ff:9f:0f:90:d0:89:e8:90:41:b9:9b:
                    0f:8f:8e:56:30:fd:dd:7b:05:33:c7:7e:74:fb:2b:
                    fd:01:d9:f7:91:d8:b2:ea:ab:9f:cb:2c:1b:61:68:
                    5c:f7:6d:e2:13:2c:fb:2c:10:64:dc:ef:a8:80:b6:
                    29:b2:0f:45:fa:a0:df:47:50:53:70:c7:d2:d2:f2:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:92:41:66:57:9B:CF:4D:CB:48:42:5B:21:FA:48:3F:46:CD:13
            X509v3 Authority Key Identifier:
                keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:06:7b:9f:41:7e:56:c9:07:88:f8:fe:e9:74:8e:25:bb:0b:
         bd:f4:13:ac:e2:db:3d:5f:bf:fc:a4:d4:41:c7:51:c3:d1:88:
         00:72:b7:d9:b5:27:9f:ae:fe:8d:ff:fb:97:a4:8a:c3:de:5a:
         c2:32:20:db:ac:09:59:a0:ea:55:71:ca:a5:82:98:34:90:ac:
         84:c6:90:76:26:a6:35:f4:30:14:14:e2:1d:23:ac:67:5b:95:
         57:d4:b0:dc:01:44:69:88:21:30:15:ab:f3:c3:8f:19:29:98:
         55:32:10:00:b5:00:15:88:f8:60:83:96:8a:e9:cd:67:b6:1b:
         22:77:73:31:d2:73:9d:c4:d5:a8:ef:a5:59:b8:b7:7a:ad:85:
         fe:4d:8d:2e:ea:cd:82:1e:67:17:8e:d7:a6:53:ba:10:f7:c8:
         4c:b6:50:b1:29:e3:c7:50:97:33:02:8a:2d:4c:42:5a:87:b6:
         73:f9:ea:28:9d:fb:17:96:6f:7e:32:0c:8a:25:7f:eb:3d:e1:
         db:f1:0f:90:4a:e5:93:87:10:a4:c1:5a:0b:6c:b8:db:29:02:
         33:c1:b1:e2:96:e3:5c:c0:d8:5e:84:0f:2f:cb:0a:a1:e3:50:
         00:78:be:01:45:fb:25:df:d1:05:0e:02:30:d2:17:7f:6d:f2:
         49:cc:79:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:33:17 2024 by rpki-client on console-fra.rpki-client.org