Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File:                     5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier:          yZfc96h36o2gUyRAkLcYoDap70PR59z4INhEZq7IyWw=
Subject key identifier:   7F:21:6F:DE:78:29:59:37:5A:AD:E7:10:5C:B8:DF:15:D1:27:14:29
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer:       /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial:       019356F6B9F8A7EC1A1CA2F01BA2D446E824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number:          09D8
Signing time:             Sat 23 Nov 2024 03:00:30 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:30 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:30 +0000
Files and hashes:         1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: F0qhFQfBbhs/ZhHqG6sB5N8IZ846SgyhaPWb5UwtG+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b9:f8:a7:ec:1a:1c:a2:f0:1b:a2:d4:46:e8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
        Validity
            Not Before: Nov 23 03:00:30 2024 GMT
            Not After : Nov 24 03:00:30 2024 GMT
        Subject: CN=7f216fde782959375aade7105cb8df15d1271429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:7c:57:c8:12:cc:50:00:b9:98:43:bd:2c:
                    b6:e5:9f:47:4f:5a:bb:7c:03:fa:af:bb:2b:35:3f:
                    e0:15:f3:33:75:0f:f7:8c:ab:7e:7a:6d:9d:a3:70:
                    ae:bc:fa:76:8e:7a:74:49:93:9a:77:82:16:b5:46:
                    f1:ab:08:50:09:ba:90:25:b8:67:3b:96:8c:fd:59:
                    71:c7:e0:8f:cc:8a:00:e4:47:80:99:12:a5:ac:45:
                    7c:9c:33:9e:39:73:81:b8:74:c7:c8:a5:0e:3f:bd:
                    94:9a:9a:16:41:18:d1:ec:ed:4f:60:96:93:96:40:
                    24:12:e6:26:26:0a:ff:c5:aa:69:3a:eb:1c:26:8a:
                    2a:64:97:fa:ed:8e:79:9c:a1:e8:fe:f1:0a:bb:d3:
                    c2:65:b5:3b:73:e1:7f:23:0d:64:a9:ed:15:75:42:
                    1c:34:21:57:38:28:73:99:9c:f7:9f:d4:2f:44:39:
                    e5:2e:5b:3e:50:8f:0a:cd:7e:bf:d5:07:d8:27:1b:
                    cc:6a:a2:c8:4d:1b:0e:85:44:d8:69:70:20:51:84:
                    a1:54:82:d7:52:c4:8a:a0:9a:9f:ce:5d:ac:1f:3e:
                    bb:7c:6b:99:b6:68:7a:a0:ab:ee:90:c2:37:ab:e1:
                    10:50:4b:c3:2f:19:77:c4:08:18:68:3b:cf:6d:ca:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:21:6F:DE:78:29:59:37:5A:AD:E7:10:5C:B8:DF:15:D1:27:14:29
            X509v3 Authority Key Identifier:
                keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:2e:cb:36:58:b5:c5:4d:30:b2:3d:90:43:ce:8c:19:42:
         a2:6b:58:c3:86:b7:47:83:4b:b1:6d:f6:99:2e:98:e1:44:60:
         8d:d2:d6:8b:2b:2f:bf:10:76:85:35:1d:9a:80:3c:ce:f7:61:
         ca:6d:b9:a2:e5:6b:47:2b:ed:6a:ca:ee:bd:74:b1:2d:c9:81:
         46:b6:df:54:d2:37:32:59:50:5a:61:59:a4:27:b0:d9:44:d3:
         5e:ec:8c:2d:83:73:22:0f:47:35:8e:42:a5:70:fa:9f:1d:2d:
         9f:90:03:46:f4:c8:3e:79:61:eb:1a:e8:45:57:b9:1b:25:2a:
         30:78:a9:63:a9:95:46:ad:6b:f2:83:1f:72:78:50:37:87:93:
         56:48:b4:7f:e5:86:74:d1:f2:e3:8d:71:a7:2e:a0:87:dd:c1:
         e9:80:ca:6b:37:fe:48:01:d2:09:5c:21:99:c5:de:11:6b:56:
         7a:41:2c:73:25:99:35:44:37:26:74:c8:df:84:6a:0f:0d:0d:
         15:c7:39:3b:23:36:55:a8:36:07:d2:6b:44:ff:22:2e:3a:3e:
         4b:17:54:78:15:c2:37:5e:ed:49:b9:43:b5:d0:85:ea:c1:c2:
         9c:2f:b9:c6:5b:a2:c1:9d:a3:a1:39:bf:4b:05:bd:7e:15:42:
         2f:61:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:43 2024 by rpki-client on console-ams.rpki-client.org