Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File:                     LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier:          lEXYtde2nQho/T1ipyXrvNznXG+M6ouUFaWY0zWQ2Oo=
Subject key identifier:   00:FC:FC:FF:EC:30:15:BD:62:37:E3:CD:77:AD:8A:43:65:AD:B8:BE
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer:       /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial:       01936A46D4B32A948216E25E4FAC075F6816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number:          130B
Signing time:             Tue 26 Nov 2024 21:00:46 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:46 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:46 +0000
Files and hashes:         1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: o1s9nqjw0XZwPxDWZ1fxVlrvZXFZibSzK9jQIc9Xl9k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:d4:b3:2a:94:82:16:e2:5e:4f:ac:07:5f:68:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
        Validity
            Not Before: Nov 26 21:00:46 2024 GMT
            Not After : Nov 27 21:00:46 2024 GMT
        Subject: CN=00fcfcffec3015bd6237e3cd77ad8a4365adb8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:ac:7c:60:3a:24:7d:54:98:70:87:1c:1c:
                    15:37:39:8b:5c:3f:91:47:3c:58:c8:e1:d6:15:d5:
                    42:71:53:25:92:72:71:c1:b3:41:1a:31:1f:29:fa:
                    00:e9:1d:5b:45:03:49:c9:bb:c2:c1:27:a0:e0:6a:
                    cb:45:18:2c:1b:e3:b6:b8:81:f0:ae:88:f3:d1:2f:
                    31:4d:fd:58:0a:5f:d3:b2:0f:40:67:4e:55:65:09:
                    5d:05:07:3b:4f:42:97:e7:98:4c:44:66:b6:9d:af:
                    3c:c2:4e:79:6c:33:10:37:f7:07:7d:7a:87:29:d3:
                    25:72:e2:79:d8:35:7e:c8:9b:48:8a:d2:84:9b:74:
                    17:81:7f:8a:8f:7b:76:71:cf:15:f9:68:e9:9f:55:
                    27:b9:e0:82:a7:3e:a8:2f:f2:82:a2:de:2c:02:82:
                    0e:4f:16:33:e9:22:6f:5a:bd:59:1b:83:53:94:d5:
                    29:e0:03:c0:e0:ea:58:92:8d:e2:75:12:80:9c:bd:
                    59:31:1a:9a:3d:f1:5f:65:11:6a:ca:ee:9f:f2:cc:
                    35:89:10:85:8f:78:3d:dc:a1:0e:bf:dc:f0:f3:3b:
                    a1:27:47:cc:cc:32:97:18:87:f6:6e:d2:ec:e0:09:
                    d7:0b:d0:36:3b:68:93:d5:85:1c:e3:db:f3:db:d9:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:FC:FF:EC:30:15:BD:62:37:E3:CD:77:AD:8A:43:65:AD:B8:BE
            X509v3 Authority Key Identifier:
                keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:aa:f5:41:33:80:77:a1:19:63:e7:2d:4d:7b:53:a5:da:
         7d:1d:21:f0:cf:3d:89:d6:19:37:26:6d:d4:bf:49:f5:3c:96:
         c7:a9:fa:e0:62:98:4b:d6:d6:d0:6d:66:ef:cb:cb:48:9f:14:
         7d:42:44:3f:b4:a4:10:b5:88:dd:e7:36:fe:4b:48:11:b7:b5:
         81:ab:ba:e8:2a:62:f4:00:69:d0:bd:07:85:e4:66:b3:9b:55:
         c4:ec:af:36:ab:49:e9:de:42:b2:62:e3:9b:93:46:49:ac:d1:
         9b:81:51:15:5b:3d:2c:99:c7:aa:da:35:1b:ca:36:59:99:77:
         2f:cb:8d:4b:68:36:41:ad:88:59:5e:7b:50:32:2a:99:28:a6:
         a2:91:80:98:3f:54:03:df:89:75:f7:0d:94:8c:32:15:8c:36:
         34:be:75:00:61:fa:2a:46:44:c1:80:3f:41:63:fd:46:34:c5:
         a7:36:78:6e:7e:aa:87:35:4d:f3:15:d3:6c:9e:6e:9c:5e:46:
         0e:a3:ee:b9:bc:dc:e7:16:a5:2c:21:db:0f:3b:d2:1c:d9:17:
         43:7d:71:d9:99:1f:50:14:23:72:8f:31:dc:de:b4:fb:c9:7c:
         cb:bc:bf:f5:24:f1:6e:6a:fe:d3:cb:77:1f:41:98:4c:41:1a:
         29:98:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:50 2024 by rpki-client on console-fra.rpki-client.org