Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File:                     CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier:          uLVBSNe0lJ83+SmO5txtK83YS5mE105jpIjx5cG2bDA=
Subject key identifier:   BA:05:34:CA:FA:44:BC:49:5C:D9:88:C0:40:21:71:68:23:8D:16:BB
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer:       /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial:       019367EA69200B4C4910A093B0697BB47D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number:          11C1
Signing time:             Tue 26 Nov 2024 10:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:35 +0000
Files and hashes:         1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: moomtiP9asQ85V+8qlf6IAE1HYBrepF1tr2+ffvHIi4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:69:20:0b:4c:49:10:a0:93:b0:69:7b:b4:7d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
        Validity
            Not Before: Nov 26 10:00:35 2024 GMT
            Not After : Nov 27 10:00:35 2024 GMT
        Subject: CN=ba0534cafa44bc495cd988c040217168238d16bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:68:95:2c:93:c3:6c:90:e2:23:f6:20:93:
                    43:4d:04:c5:b0:19:0e:24:41:eb:c4:d0:cf:ca:d0:
                    df:72:61:5d:58:07:bf:cf:2c:aa:d6:38:42:de:e1:
                    aa:a4:86:00:c8:72:4f:5a:41:49:6a:fa:c6:c0:01:
                    c3:49:54:be:37:27:03:91:eb:a7:b5:35:b0:bc:3d:
                    d9:50:09:55:d6:b0:16:83:8e:1a:b2:64:92:a9:02:
                    09:0b:6b:40:68:35:4d:94:6f:f7:c5:4e:44:f0:d4:
                    1a:fe:ea:ee:5b:7e:40:7c:d1:64:c3:ce:56:1c:7b:
                    b2:ea:b7:a3:6b:71:42:22:b5:92:f5:08:63:29:3b:
                    62:57:9c:57:0e:fd:06:8e:41:39:5f:02:66:71:cc:
                    0c:2d:43:6f:52:54:c0:ed:a2:92:28:c1:82:14:06:
                    d2:68:e6:27:c5:27:23:20:57:29:b6:ff:e9:1b:d5:
                    58:47:f7:54:b8:5c:39:34:13:93:5f:3a:05:28:0e:
                    3a:15:9e:87:82:03:fa:e8:2f:d0:7a:2e:48:5b:42:
                    0f:2b:3a:ff:f4:ae:93:1b:95:6e:b3:01:60:db:7f:
                    b2:6d:c2:7c:1b:df:0a:58:d3:08:27:9c:0b:36:f6:
                    ee:a1:f4:0e:8b:fe:f8:c1:12:b6:73:b1:fb:95:53:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:34:CA:FA:44:BC:49:5C:D9:88:C0:40:21:71:68:23:8D:16:BB
            X509v3 Authority Key Identifier:
                keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:74:48:a0:74:32:71:a0:8b:d1:d7:55:9b:c5:42:a2:95:
         d6:ed:7e:c0:af:ee:25:9d:9f:77:ef:37:b3:65:2d:8b:cc:c8:
         80:34:0a:2e:18:de:71:26:c6:84:6d:34:fb:b4:e5:fa:4a:59:
         39:50:21:d0:f9:6a:7f:42:9b:ee:62:d8:5a:f7:b2:5c:d2:f7:
         72:82:01:b4:b2:19:cb:6a:03:99:d6:ef:57:2a:35:27:66:b8:
         0e:e5:c7:3f:f8:14:52:62:9e:2c:b9:11:e2:cc:58:70:7d:40:
         a4:e3:d9:a7:b0:42:46:ee:b5:f9:c1:31:64:7a:42:ed:96:fc:
         2b:3a:34:a8:6a:a5:62:06:66:53:56:81:22:8d:4f:01:e9:e6:
         1b:cc:6a:71:3c:d8:3b:0d:cd:ad:20:c6:50:e3:59:bf:c8:bc:
         ce:cf:6f:c6:59:da:63:50:c0:33:2e:c0:b5:f6:30:d3:01:d1:
         96:ce:c1:16:10:78:d7:3c:52:60:94:4f:37:54:2c:5b:94:3b:
         be:c8:49:6d:1f:a4:f1:de:65:30:d2:0c:c5:1e:d3:95:93:12:
         df:b7:99:7d:95:28:0b:54:d4:db:79:43:fa:46:1b:07:8a:a9:
         be:22:c2:86:30:90:4a:12:61:1b:b3:10:02:f6:a5:c5:e5:3a:
         71:fb:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:05 2024 by rpki-client on console-ams.rpki-client.org