Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File:                     r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier:          c7f1O2/d7vmjaO1gAo2NxY9VGbIVcH6QJES1fl12+Fk=
Subject key identifier:   8B:D4:52:53:14:9C:C8:78:D9:21:59:76:43:D9:F0:DA:B1:7B:5C:DF
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer:       /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial:       0193572DF55C521844032FE19096A613D55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number:          0183
Signing time:             Sat 23 Nov 2024 04:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:49 +0000
Files and hashes:         1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: NvCNdilDK6UCVJTdOGe67iwMD8zlzW3mI6bQM098Dvs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f5:5c:52:18:44:03:2f:e1:90:96:a6:13:d5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
        Validity
            Not Before: Nov 23 04:00:49 2024 GMT
            Not After : Nov 24 04:00:49 2024 GMT
        Subject: CN=8bd45253149cc878d921597643d9f0dab17b5cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:74:c3:5f:6b:db:1a:88:45:d0:a0:19:8d:
                    9d:7e:4f:0f:68:4a:4e:a8:95:c2:95:98:90:2d:e5:
                    9f:c6:d2:bc:6c:72:c1:2b:f9:e2:5d:32:62:48:f0:
                    63:a7:e7:47:ce:8f:9e:83:4c:59:91:5f:51:65:5a:
                    2a:60:35:89:d2:0f:23:1c:78:fe:96:54:b2:9a:35:
                    9d:f9:df:48:33:39:10:b1:e0:a2:05:66:8e:7d:52:
                    14:89:5f:5d:82:ef:51:48:da:78:d1:ae:c7:17:95:
                    66:3c:f4:7c:64:d2:14:8b:36:86:b2:54:45:31:d4:
                    65:8c:fa:c5:ed:46:e0:f4:e3:20:b5:6b:21:45:25:
                    24:91:fc:32:be:88:49:4e:40:51:68:ca:be:99:f9:
                    56:cf:2e:41:c5:c9:9d:7c:fa:b1:d4:26:c8:55:21:
                    eb:25:32:4d:eb:3e:3c:ac:3f:19:56:8c:a9:55:35:
                    7d:fc:f0:3c:6a:b7:06:84:db:3b:e8:24:55:6c:c2:
                    4c:c8:93:e1:e8:f9:ad:22:46:5c:41:14:3c:78:aa:
                    40:16:17:8e:f9:6f:58:b9:da:7d:c5:68:c0:a2:fa:
                    36:c6:e1:a3:d7:bd:31:0c:d7:8c:18:c7:19:b0:44:
                    2a:68:e7:ab:1f:f0:c7:48:10:0b:6c:2e:15:9f:5b:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:52:53:14:9C:C8:78:D9:21:59:76:43:D9:F0:DA:B1:7B:5C:DF
            X509v3 Authority Key Identifier:
                keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:86:dc:fe:3d:7b:c8:26:4d:82:b3:3f:47:4a:f4:1f:4c:cd:
         f2:a3:5b:7b:5d:a5:6c:bb:03:f4:90:c3:d2:b4:7c:68:70:21:
         bc:22:7b:c0:87:03:7d:62:30:a2:79:ff:76:51:91:21:13:b2:
         33:14:45:80:4c:7c:e1:a1:4b:a1:6b:b8:bb:24:fe:6b:8a:27:
         8d:35:55:47:95:ef:c3:d7:44:df:90:fe:8c:19:da:5d:67:19:
         b1:9c:bf:2c:78:f2:5b:b0:c5:47:7c:82:ed:6a:1a:f0:b3:87:
         38:76:3e:72:ab:29:3a:77:b2:fc:b2:8e:65:42:5c:d6:55:32:
         c0:c9:81:d6:29:0e:6e:dd:fb:a2:29:f1:00:76:fe:99:af:08:
         82:00:b3:52:46:2d:7a:88:ec:39:41:d8:2a:22:9e:56:d7:63:
         37:2c:ff:ed:5e:b9:c3:d9:d3:f6:d7:80:23:1e:8f:0e:40:3a:
         ac:7d:ea:7f:2f:5d:56:7e:55:8b:9e:e2:0f:0c:63:7c:37:d2:
         8b:8a:ed:c3:f3:4d:0b:46:8f:5c:72:28:55:f2:98:03:10:8c:
         63:c0:6a:06:ea:ac:ef:fc:ea:f0:ff:4b:1a:fa:c7:3c:b9:4e:
         d4:8a:95:f1:f3:bd:b6:a2:c9:99:e0:94:4c:a1:c3:1e:0f:cd:
         16:a9:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:39 2024 by rpki-client on console-fra.rpki-client.org