Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
File:                     9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft (raw, json)
Hash identifier:          PlN+NMBSEEBZfrZvQLpAdApGnROyQZqojsjGBXWBlrI=
Subject key identifier:   11:A8:2A:5B:B6:AC:06:31:4E:11:A8:00:0B:31:93:9E:27:7C:E0:42
Authority key identifier: F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84
Certificate issuer:       /CN=f70592c90b4cb245e54718d7c5799b47d419a684
Certificate serial:       0194BB294BED755F55C36D8B66FE2EA2A48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 07:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:33 +0000
Files and hashes:         1: 9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl (hash: 67hKieSrFKaTo0fhI/Hzkk00z1Gf4z2gnN5fF8dkuO8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:4b:ed:75:5f:55:c3:6d:8b:66:fe:2e:a2:a4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70592c90b4cb245e54718d7c5799b47d419a684
        Validity
            Not Before: Jan 31 07:00:33 2025 GMT
            Not After : Feb  1 07:00:33 2025 GMT
        Subject: CN=11a82a5bb6ac06314e11a8000b31939e277ce042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:c5:f9:52:98:09:7c:83:71:37:6e:29:b0:
                    ae:15:5a:e9:69:8c:82:00:f1:0c:39:ee:9a:0b:64:
                    48:e6:fa:b6:f9:62:62:89:60:e1:5d:1b:e6:e0:8c:
                    52:1d:db:17:2c:7d:84:bb:2d:d7:9c:70:4c:ac:46:
                    c1:78:4e:5b:09:7a:ac:1f:c1:d7:05:1c:a1:0f:4f:
                    12:a4:93:fb:58:cb:ac:81:17:70:46:5d:f2:a8:4b:
                    f1:96:28:4b:26:ac:af:91:b0:94:7a:75:28:95:15:
                    66:97:63:40:16:5c:85:ef:4d:4a:f2:4f:76:68:a6:
                    6e:74:c7:65:ba:64:fa:d2:7f:c6:24:03:77:60:4b:
                    68:17:03:5f:a9:be:6c:59:61:69:42:c7:20:65:1c:
                    c6:0b:c8:a4:db:1e:da:f7:7e:33:c1:70:05:0b:a6:
                    0c:65:73:ad:82:56:1e:83:1c:eb:38:ff:b8:99:2e:
                    99:da:a3:b1:24:6a:6d:9d:86:5b:19:03:a3:00:c5:
                    a3:42:c0:30:de:3c:75:9c:c4:ef:3f:13:49:de:bb:
                    83:75:56:19:f6:bb:05:22:0a:f0:55:e0:18:52:11:
                    ef:25:87:fa:b7:72:80:88:f4:10:f7:2f:0c:6e:98:
                    94:4f:c2:9c:a1:6b:8e:51:87:82:c0:e3:36:29:55:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A8:2A:5B:B6:AC:06:31:4E:11:A8:00:0B:31:93:9E:27:7C:E0:42
            X509v3 Authority Key Identifier:
                keyid:F7:05:92:C9:0B:4C:B2:45:E5:47:18:D7:C5:79:9B:47:D4:19:A6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wWSyQtMskXlRxjXxXmbR9QZpoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/dc0be1-adb8-4220-b4bd-1076242b3072/1/9wWSyQtMskXlRxjXxXmbR9QZpoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:58:f4:7f:35:b6:53:bb:54:29:b9:e0:1e:29:58:59:d0:b3:
         cd:6b:d2:d0:08:82:3a:f7:a4:1a:42:d6:4c:77:a3:aa:4c:03:
         0f:27:6e:95:08:08:c0:c2:bb:ae:3c:c7:6e:de:85:68:af:d6:
         3f:3b:8c:11:d6:5b:7b:59:8b:68:50:20:4a:24:b0:c6:1d:7d:
         a6:76:c0:ec:fc:fc:a7:96:dd:fe:3a:ad:ff:26:d0:5b:48:92:
         2f:13:b8:46:45:eb:d3:2d:f0:10:0e:16:b7:d3:cb:bc:61:c7:
         0f:5e:bd:e9:38:aa:ad:50:5c:bb:a4:e2:d9:5f:30:14:cd:89:
         a2:c2:ba:d8:4f:42:36:e6:21:1c:fd:d8:11:19:6e:41:9a:e4:
         e7:db:6d:13:1c:d3:2a:9c:20:3d:bc:e9:cb:3f:0a:a6:c5:91:
         90:14:7e:8f:bb:05:51:18:0d:e6:c7:28:4c:0b:c9:4f:d8:f3:
         67:b7:d5:31:d0:d3:f0:3e:93:e4:82:30:94:b6:46:a2:24:f0:
         e3:51:99:4d:15:d5:15:71:1b:9e:ae:50:c5:40:8f:a7:27:49:
         32:a4:ba:00:a1:8d:b5:85:5f:25:65:70:42:6b:7c:cd:72:13:
         8f:ba:19:bb:da:b3:e2:71:eb:a4:d4:ab:61:25:15:ee:b5:cd:
         21:54:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:43 2025 by rpki-client on console-fra.rpki-client.org