Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File:                     C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier:          wrVgRvhWL+oi5qN3mzZrr8NefOk+kH0GnhoLgcP2db8=
Subject key identifier:   F9:AF:F1:35:62:67:38:56:D5:01:2C:B6:85:35:5E:BF:B5:96:DF:52
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer:       /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial:       019235499046C036CBF2F384C3FA71225FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number:          12D8
Signing time:             Fri 27 Sep 2024 21:01:06 +0000
Manifest this update:     Fri 27 Sep 2024 21:01:06 +0000
Manifest next update:     Sat 28 Sep 2024 21:01:06 +0000
Files and hashes:         1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: wqkOsXMKdmLJZJWPdiyslXm7pH4dTyhZbd8V+6aAOJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:49:90:46:c0:36:cb:f2:f3:84:c3:fa:71:22:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
        Validity
            Not Before: Sep 27 21:01:06 2024 GMT
            Not After : Sep 28 21:01:06 2024 GMT
        Subject: CN=f9aff13562673856d5012cb685355ebfb596df52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:3c:98:ea:15:bf:c7:f0:a4:ac:e1:3b:b3:
                    44:b1:f9:8b:e9:ea:01:d4:b2:92:59:3d:fc:e9:a5:
                    8e:66:fa:23:ca:ab:1b:f1:0f:2e:31:75:98:64:51:
                    f2:01:a6:19:a4:c7:61:2e:2a:32:cb:12:b6:d1:4c:
                    ea:32:0b:11:c0:f0:25:6c:bd:fc:00:8f:0b:a5:ca:
                    ae:00:85:fe:d5:8f:c6:a2:a0:d8:0d:56:b7:14:e5:
                    73:2b:e1:05:a2:3d:39:ea:20:12:d5:bb:6e:f4:15:
                    94:89:e5:7d:3c:ab:44:b1:88:9c:fd:8c:9d:44:73:
                    e9:aa:c0:d7:13:d6:f0:9b:00:e7:a7:ec:55:01:9b:
                    07:dd:96:7c:47:87:10:4e:fe:34:18:d9:91:ac:f1:
                    5c:70:f3:7a:89:22:a7:55:a7:fc:c1:e6:d7:38:0d:
                    00:78:cd:87:1d:24:d8:eb:37:36:69:5f:b5:2c:10:
                    4e:38:fa:bd:30:b2:4d:02:fd:4f:ba:5b:4e:99:c0:
                    c1:1a:4c:ab:cb:1a:f0:94:f4:8d:09:c9:45:35:2c:
                    c0:9a:2b:23:69:c4:08:93:fa:b6:20:27:41:28:44:
                    de:21:bd:3e:5e:df:4d:b1:9f:9d:05:e9:47:fa:db:
                    6d:39:0f:5a:40:68:7f:92:30:a9:c0:6d:81:0c:3d:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AF:F1:35:62:67:38:56:D5:01:2C:B6:85:35:5E:BF:B5:96:DF:52
            X509v3 Authority Key Identifier:
                keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:e0:e7:dc:51:f4:27:3e:46:44:38:9c:9b:e6:d3:aa:08:
         4b:47:cf:6f:7a:76:e4:f1:92:8e:09:83:29:f2:f2:ea:1f:47:
         81:82:fb:41:c6:b5:0b:04:5a:d2:62:65:e9:ec:59:11:e9:d8:
         ab:cc:36:0d:06:a7:02:10:b8:94:79:95:b9:9d:24:e5:f6:eb:
         cf:30:97:62:00:55:b5:8e:41:47:d7:f3:53:23:c8:f0:ba:d8:
         ee:ff:e6:01:de:53:08:79:20:b7:cc:34:36:aa:ed:ee:4e:04:
         c4:30:53:05:df:41:03:cd:cd:ea:a4:0f:44:fa:4b:0c:c0:92:
         37:ed:f6:0c:7d:bb:05:90:f7:7e:ff:28:97:8a:4b:12:d8:52:
         d3:5b:db:51:36:13:10:9e:ce:e8:cf:96:1b:f0:5c:7e:57:fb:
         4c:73:56:90:2d:49:7d:5c:62:fc:b7:26:7d:94:c4:96:51:64:
         cc:78:d6:29:56:f1:e8:e8:d8:c3:dd:56:ee:3c:26:ce:9b:ca:
         9a:e2:e9:c9:f3:0b:df:ec:81:0d:fc:52:14:c1:fb:22:11:86:
         22:9e:cb:01:a3:4e:e1:23:8b:a3:e1:8e:0a:a7:10:b5:e9:21:
         13:3c:86:3c:c5:37:3a:1e:f7:25:b0:a0:e7:cf:0f:1a:71:7d:
         80:f6:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:36:35 2024 by rpki-client on console-fra.rpki-client.org