Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          GUHtkK/5Vi6vWTAS8VGix8LgzmxcpabX2jsyThRyLT0=
Subject key identifier:   B7:A6:88:4C:6A:F0:76:78:C6:2C:68:F6:2D:1B:7B:D2:D7:F3:09:47
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       019322658E229948F55AF2E39F903CD178F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0942
Signing time:             Tue 12 Nov 2024 22:01:40 +0000
Manifest this update:     Tue 12 Nov 2024 22:01:40 +0000
Manifest next update:     Wed 13 Nov 2024 22:01:40 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: nbnxSBcw2ELqW4M6PMkAXHaAjFsmkjek/jlG6wDHDQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Nov 2024 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:22:65:8e:22:99:48:f5:5a:f2:e3:9f:90:3c:d1:78:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Nov 12 22:01:40 2024 GMT
            Not After : Nov 13 22:01:40 2024 GMT
        Subject: CN=b7a6884c6af07678c62c68f62d1b7bd2d7f30947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:24:42:0c:30:fc:da:85:4e:c2:34:90:75:56:
                    da:db:88:d1:8e:8a:92:39:ff:01:fc:81:c6:54:98:
                    de:a5:49:ae:c6:77:51:4e:55:9d:2d:4b:22:f3:5d:
                    b7:7a:64:41:c8:50:20:74:21:42:26:a1:e6:7b:c7:
                    13:a3:c4:1c:61:c1:74:7d:8a:b1:11:78:6b:72:e2:
                    57:8d:21:2d:0b:27:14:6c:68:f6:0e:77:cb:b1:7d:
                    be:41:45:eb:54:77:7e:0c:fd:6e:7d:a7:1a:76:4f:
                    ee:cb:44:28:79:23:73:30:b5:33:07:d9:6f:cd:8e:
                    60:e3:81:a6:66:f5:78:e0:c1:23:c4:42:3b:c1:cd:
                    e8:cb:83:8b:b7:17:a4:d8:46:b4:47:9c:cc:b6:1e:
                    81:5e:3a:87:f4:0b:b8:2c:6e:47:dd:7e:8f:aa:50:
                    c9:b7:24:36:24:f2:a0:c2:b8:05:81:f4:6c:c3:db:
                    ff:00:ed:ad:8f:e3:e4:84:b5:4d:4b:97:52:13:6b:
                    de:1e:bb:fa:de:65:a1:3f:ac:7f:00:1a:59:e8:bd:
                    e3:fb:19:fe:70:f3:9a:ea:10:4a:9d:14:d4:43:0f:
                    9f:b3:b2:71:b2:4a:82:f7:c8:0b:45:69:97:da:7c:
                    6f:6e:4d:e1:dd:ab:27:23:a4:8e:50:79:b5:a8:c9:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A6:88:4C:6A:F0:76:78:C6:2C:68:F6:2D:1B:7B:D2:D7:F3:09:47
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:29:29:6c:21:2f:1e:52:c6:a4:a8:23:2c:e6:ca:79:e4:e9:
         c9:8c:8f:bd:a2:d9:40:27:e0:e3:26:5d:32:37:a4:b9:6b:39:
         a8:a2:53:ad:d4:b3:23:18:71:56:77:35:21:b7:8f:70:6c:27:
         9e:03:5b:6b:d9:44:9f:5f:e3:47:d0:65:b6:58:c4:cd:1e:89:
         5b:39:a8:11:68:5d:b1:b3:4f:f2:c7:d3:cc:17:2f:e0:71:26:
         15:42:27:62:a1:af:61:55:7a:b4:02:08:a4:1f:5b:e5:e0:da:
         57:be:8e:c8:06:cf:ff:27:ea:3c:20:fe:ea:83:39:35:c9:e0:
         f3:87:87:3a:c2:f8:47:f4:88:6f:75:d6:0c:f8:f2:a8:c3:1d:
         41:3f:c7:da:2f:e8:40:2b:7d:c5:cb:6c:31:4e:a5:ec:ca:23:
         e6:09:d3:2b:d1:4b:a7:0a:75:00:d3:13:0e:e5:53:3d:08:dc:
         e8:de:d9:9e:46:1f:cb:1a:e7:ee:3d:ab:23:04:d4:13:aa:e0:
         23:b1:67:5a:c1:e1:e4:de:74:8d:b0:ed:f6:74:f3:e0:0f:81:
         98:fd:fa:2c:be:f2:e8:67:9f:3f:66:16:e1:53:32:1a:b3:2d:
         cb:60:52:ce:8c:26:a8:fb:f3:27:8b:b2:18:90:39:0e:58:e2:
         fb:d4:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 04:19:51 2024 by rpki-client on console-fra.rpki-client.org