Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File:                     9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier:          WNqyvjiwt2UYLZZdmlJ69LTbVetXTMVF8FL3nIlSp9Y=
Subject key identifier:   63:30:75:C2:6C:AF:80:EE:FF:16:4E:59:CB:CC:57:C2:7C:F9:BB:87
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer:       /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial:       019356F6F0BB63D3589694139A874582B55D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number:          02DB
Signing time:             Sat 23 Nov 2024 03:00:44 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:44 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:44 +0000
Files and hashes:         1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: tikmBW3NCdSg6ZnPvQuM4mD8zAcLCKZF25+7afxTpBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f0:bb:63:d3:58:96:94:13:9a:87:45:82:b5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
        Validity
            Not Before: Nov 23 03:00:44 2024 GMT
            Not After : Nov 24 03:00:44 2024 GMT
        Subject: CN=633075c26caf80eeff164e59cbcc57c27cf9bb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:56:30:b6:08:f4:ee:b4:3c:e4:e2:b6:5e:
                    89:62:d8:06:e8:97:01:40:c3:9d:57:6d:f0:86:43:
                    2c:6d:92:b4:15:c4:5e:d1:df:3a:4e:c9:c8:93:ef:
                    c5:ba:95:fa:57:84:10:b3:1d:89:65:97:45:cf:1b:
                    3c:d9:de:0a:d7:d7:18:0d:84:0a:93:6d:d1:9f:a8:
                    4f:71:75:66:9a:fe:c7:39:d9:37:52:d6:f2:9a:c7:
                    e6:ca:12:72:a1:98:77:f1:65:50:ae:d2:b4:a4:11:
                    df:15:c1:99:a6:17:97:dd:f4:08:7e:21:5c:ab:74:
                    5c:72:d6:93:1f:96:e4:5d:c2:e1:9d:d9:c3:b6:47:
                    07:b3:3b:11:30:a5:5b:36:5e:a3:ba:68:b4:64:5c:
                    0e:31:f3:b7:e4:8d:ac:4b:67:c5:09:5c:af:23:37:
                    c3:6d:40:ad:a7:ef:9b:f8:2c:44:43:c7:cd:c4:7f:
                    8d:41:e9:0e:95:17:ea:ec:5c:32:f1:9d:79:64:de:
                    73:1b:31:8c:13:d5:29:e2:c7:d1:cc:f6:3d:14:d8:
                    1f:0d:16:1c:81:f3:6a:8a:cc:6f:b9:02:1b:53:c5:
                    c0:09:7a:55:86:e1:7f:2b:b7:3b:a8:5d:ed:07:e6:
                    3f:c3:87:80:c8:03:ff:53:33:e3:be:0c:5b:64:40:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:75:C2:6C:AF:80:EE:FF:16:4E:59:CB:CC:57:C2:7C:F9:BB:87
            X509v3 Authority Key Identifier:
                keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e9:88:7c:c8:03:bd:6f:ed:25:01:38:f7:7c:9e:b0:a1:fd:
         b5:52:7f:97:d3:7f:5e:f9:12:cf:04:65:9c:df:f5:6e:c0:a9:
         e6:de:28:72:70:c7:15:20:da:b4:08:54:00:d3:13:34:41:bc:
         d6:2e:45:63:a3:91:d4:52:29:3d:99:06:e2:bd:50:cf:96:a1:
         50:ef:f8:15:d1:e2:38:8b:70:c4:2e:bb:c2:0f:b1:d1:35:a9:
         eb:f9:d5:be:1f:3e:c4:0b:19:1b:0c:d4:bc:4d:2f:ba:01:06:
         96:f4:90:5c:23:1f:ac:2a:2b:20:79:02:fc:a1:8a:01:13:b5:
         1a:19:31:ba:e5:38:46:86:29:05:1b:4e:65:7c:9a:e2:b8:5c:
         26:4e:c1:49:a8:a0:1d:1d:57:08:fe:b0:48:f5:df:fe:c6:73:
         1f:98:ea:46:48:62:8b:48:25:58:10:c2:c8:2b:48:d4:b4:c3:
         ed:13:58:35:de:75:72:b5:cf:f7:db:5d:68:92:c4:b5:9e:bb:
         c9:1d:58:f7:94:23:85:04:7f:e2:40:6a:3f:6b:84:7f:65:69:
         32:9a:0d:8e:92:ac:ff:cf:cb:14:25:94:91:6f:d0:27:30:2c:
         59:5d:ea:d3:57:e9:87:3f:c0:38:5e:40:10:b9:6f:35:c0:41:
         31:bc:1f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:15 2024 by rpki-client on console-fra.rpki-client.org