Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
File:                     YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json)
Hash identifier:          9phm7WLRGP8pP9Wpu2HfvLM6EOe3cptNbwBM6bR0ZkA=
Subject key identifier:   5F:15:14:C1:3E:8C:5C:62:C7:44:6E:F9:FD:B5:B5:1D:46:F2:54:9B
Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD
Certificate issuer:       /CN=615ddb77c7926f577b00abcd3d52f42c920279cd
Certificate serial:       0193568A1E6F0DA803C06A9DA93BC9C1A4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: XlrTUuWMQbiBimJ0Eye2v+gx7/WwXyAxJ59Ypw34WQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1e:6f:0d:a8:03:c0:6a:9d:a9:3b:c9:c1:a4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=5f1514c13e8c5c62c7446ef9fdb5b51d46f2549b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:0e:d7:e7:6a:95:82:a1:e7:35:0b:53:b4:
                    9c:02:f8:65:94:3e:c9:ab:78:d1:1e:9e:38:ed:11:
                    dd:a3:9c:fb:7b:99:ca:ca:17:22:ca:09:62:c3:61:
                    7d:5f:36:83:a2:93:9b:7b:1d:f5:40:b0:e9:37:fd:
                    e5:ce:f7:da:a8:e6:32:80:8c:3a:40:8b:80:8b:cd:
                    44:5b:52:03:d7:f6:78:f9:52:c4:3a:9e:a6:75:f4:
                    dd:ad:89:dd:fb:52:26:b7:7f:15:99:79:5f:75:84:
                    eb:18:8c:2e:c6:28:19:3b:82:e4:67:86:c6:1e:be:
                    10:07:9c:c4:18:3f:31:9b:4c:69:d6:d6:10:c6:a4:
                    c3:1e:3e:c7:7a:2e:3d:9b:3f:4a:7c:a5:cc:18:26:
                    6c:ae:e3:59:05:30:03:f0:50:73:10:33:30:39:4c:
                    a8:cc:b6:31:58:15:ef:55:55:69:5e:7d:c1:4d:d0:
                    30:f7:fc:14:6c:fb:b7:37:18:54:5e:3f:0d:ea:57:
                    6a:ae:50:1b:5d:f6:ad:73:82:da:79:5a:e9:65:e0:
                    8a:38:0c:95:79:1f:d8:a5:5b:f7:ff:ef:3c:71:d8:
                    bd:66:5a:8b:fe:2e:26:07:2f:4b:ee:5f:de:42:d0:
                    c8:98:c1:1b:e8:72:7b:4d:ca:f6:9f:d4:fd:03:e1:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:14:C1:3E:8C:5C:62:C7:44:6E:F9:FD:B5:B5:1D:46:F2:54:9B
            X509v3 Authority Key Identifier:
                keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:ee:c6:04:49:4e:85:3f:9d:a5:0d:4c:71:77:c6:91:b0:
         23:a8:e0:fb:38:66:4d:aa:e0:e3:fb:a1:fa:ec:4b:0d:55:18:
         b3:b3:20:48:e8:f2:c0:9e:5c:d3:a9:b4:a7:5b:df:80:6b:d3:
         6e:2f:9c:1f:df:1f:a8:a9:a6:55:66:61:a7:60:64:85:1f:82:
         e3:d5:cb:a6:bc:6e:a0:51:18:5d:28:e7:80:90:42:0d:89:e2:
         3c:b2:29:21:b6:42:97:45:c9:0b:1b:d4:a5:69:e8:0b:d3:67:
         2a:47:f4:09:fd:f1:f8:d0:e3:af:97:2b:47:c5:48:2a:52:ec:
         a1:55:4b:d7:92:31:2a:29:17:db:7a:4b:e5:ea:b2:55:c0:7f:
         af:6c:a3:20:f1:04:ff:49:52:f9:84:3e:5c:b2:b7:4a:b8:eb:
         b9:54:f5:94:00:69:03:8b:fe:bb:6e:6b:aa:ca:e1:94:33:d8:
         a6:00:1e:55:6b:99:da:85:ef:10:21:ad:b6:6d:10:37:d9:2a:
         44:9b:ae:22:b8:f0:98:99:7e:33:dd:31:f5:b2:e6:b7:a3:8f:
         fb:e0:27:1e:12:5e:4d:ce:04:5b:0c:04:13:c3:b4:0b:a9:82:
         53:53:4e:f9:1e:d9:9c:33:06:7c:9d:7d:c1:a7:27:24:ae:a1:
         ea:17:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:37 2024 by rpki-client on console-fra.rpki-client.org