Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File:                     Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier:          3fu8kHzg2qnWNpDCrLt2iEn1iX073x6JUz1cIo/s3O0=
Subject key identifier:   AC:36:CD:84:DF:80:DA:BC:AE:4D:28:6D:22:5E:6C:E2:6F:95:7A:86
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer:       /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial:       0193576499FCDE69089490A70878675BF717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 05:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:30 +0000
Files and hashes:         1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: l3NO6yjEMXLkjhlRtpJU6K7kQgoqlhuJd0AY2rYu0f8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:99:fc:de:69:08:94:90:a7:08:78:67:5b:f7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
        Validity
            Not Before: Nov 23 05:00:30 2024 GMT
            Not After : Nov 24 05:00:30 2024 GMT
        Subject: CN=ac36cd84df80dabcae4d286d225e6ce26f957a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:7d:bd:b3:0d:d3:06:e2:51:dd:35:64:11:
                    b4:cb:ee:37:b7:96:5b:71:c1:48:f8:10:7a:94:3a:
                    67:50:d7:5b:27:b5:08:c4:07:7a:91:12:cd:74:c3:
                    6a:86:26:2b:34:57:ac:1a:cf:bb:85:f6:6a:8e:d9:
                    f4:89:0d:4b:d0:bd:2f:32:0c:6c:1a:5a:26:ee:d9:
                    b3:a1:40:5a:83:ac:ac:74:3a:25:92:b2:91:ea:70:
                    f3:14:ad:81:b6:d3:11:0e:6a:03:a3:41:36:f8:b2:
                    b3:b5:ed:35:ad:ac:2b:d8:e6:63:22:5d:b0:24:8f:
                    67:68:2e:da:d4:a9:2f:61:99:b1:d4:9b:4d:bb:86:
                    71:40:be:a3:a3:4e:3a:bc:f3:f8:27:41:61:1d:c7:
                    da:99:32:da:5d:e4:88:8c:db:a1:82:1b:23:a0:b9:
                    5b:8d:0a:ea:02:b8:e2:b9:fe:b8:b7:5a:12:2d:e8:
                    cd:9a:1f:b7:04:c0:52:07:5c:9f:75:89:bc:ec:bd:
                    fa:d3:78:be:8c:59:ff:10:50:47:d3:86:ed:f8:54:
                    42:76:1d:72:c5:a3:72:8d:7b:ae:aa:e8:12:2e:e6:
                    a2:b9:cf:9e:2b:88:e6:22:69:c7:1c:41:9f:d1:28:
                    94:f9:28:ee:ca:57:f2:83:c6:81:9f:d4:9b:a2:13:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:36:CD:84:DF:80:DA:BC:AE:4D:28:6D:22:5E:6C:E2:6F:95:7A:86
            X509v3 Authority Key Identifier:
                keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:71:a5:bf:7d:79:1f:9f:7f:f2:37:7d:14:41:93:23:cf:45:
         12:31:c7:28:33:7c:79:2f:fd:ad:4b:53:d9:bc:8c:f6:5e:0a:
         26:73:b7:7f:1b:8c:ce:94:23:1e:64:d6:0c:96:ce:59:77:19:
         8a:b0:39:5d:18:30:88:e2:0f:be:e7:11:0a:2e:6b:c5:3c:8f:
         ec:d4:a1:ca:1e:9c:88:2d:11:e0:cc:5a:b2:3d:9c:f3:71:eb:
         f4:0d:0e:3a:29:df:65:c4:c3:42:bd:b2:1c:96:a5:34:e4:e0:
         12:3b:99:d5:3a:2b:79:f4:44:48:ed:16:77:bb:4e:a3:9f:a2:
         b4:94:39:da:bb:d0:42:49:b1:03:40:80:56:f2:32:e0:2c:d9:
         27:02:29:05:f9:16:12:78:96:74:be:2e:e2:c6:27:60:cf:dc:
         d6:1b:8e:fc:0a:0d:d2:4f:33:b8:62:fa:e3:c7:8d:5b:81:9a:
         91:04:59:eb:c5:50:4b:04:a9:8f:2a:09:6f:89:a2:0a:f6:46:
         2a:0d:1a:e5:c2:87:30:01:d8:fa:63:c7:7a:0c:c8:bd:c2:5a:
         4b:f8:b1:b4:18:fd:74:04:b9:c7:2e:b2:ce:bb:3d:fe:63:f9:
         28:fb:08:fe:84:cb:95:54:19:76:98:0a:10:eb:09:13:b0:9e:
         5c:ac:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:17 2024 by rpki-client on console-fra.rpki-client.org