Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File:                     kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier:          pyUwQ2KJpebiq990CYeqY3MBfokH/QEG7qRWluji5bs=
Subject key identifier:   14:3C:21:EB:69:D1:AA:FE:BB:D1:C5:0F:79:0C:19:DB:0B:47:13:1E
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer:       /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial:       019368C66ECA6E285AC541A428AC6E2846A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 14:00:55 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:55 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:55 +0000
Files and hashes:         1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: c/EmIV1+mlJFMK4QpghXzoadmhyryafLAAg05QyUnqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:6e:ca:6e:28:5a:c5:41:a4:28:ac:6e:28:46:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
        Validity
            Not Before: Nov 26 14:00:55 2024 GMT
            Not After : Nov 27 14:00:55 2024 GMT
        Subject: CN=143c21eb69d1aafebbd1c50f790c19db0b47131e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:df:72:c0:83:18:48:49:ba:8c:ff:1d:8e:51:
                    1b:60:8a:da:4d:51:c0:60:79:03:30:44:02:bb:dc:
                    2f:8f:fc:01:8b:ef:34:8d:64:6f:54:85:66:bb:01:
                    a9:3a:a6:b2:35:32:68:45:94:ad:aa:a6:2f:07:51:
                    4a:f9:82:aa:b3:aa:68:b9:3e:52:11:d3:13:ff:68:
                    5c:65:8c:52:5a:54:dc:5d:44:c6:49:c2:3a:f6:48:
                    33:b2:0b:26:81:39:ed:1f:c5:3b:5e:7c:ab:8a:68:
                    40:8b:a2:46:62:c8:4e:2c:20:3c:0e:43:ca:f6:ce:
                    51:6a:a4:75:4b:0a:0f:ff:00:24:0e:a0:80:ff:cb:
                    56:bd:8c:74:fc:08:da:1f:44:46:12:6b:23:29:78:
                    f4:8f:4c:a6:de:dd:4a:13:b1:6f:9b:b3:71:51:fd:
                    65:0e:4d:34:8c:dd:3c:de:2e:51:39:f5:c8:fe:f3:
                    09:68:1d:df:45:1e:dc:cb:34:58:31:5a:0b:17:1d:
                    b7:3e:33:91:93:9c:4f:46:ca:9a:eb:0e:92:b2:00:
                    a5:cf:24:fc:5a:fe:63:97:81:f2:90:62:9d:93:47:
                    c7:ff:b4:3a:65:c8:9a:4c:1a:4a:d2:aa:b4:47:cd:
                    10:c0:45:63:80:ec:2c:8d:88:14:7a:ca:66:80:6e:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:21:EB:69:D1:AA:FE:BB:D1:C5:0F:79:0C:19:DB:0B:47:13:1E
            X509v3 Authority Key Identifier:
                keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:b1:1e:19:fa:e3:d3:75:71:3a:1e:55:38:ae:83:8b:43:
         90:08:40:07:bc:a6:1f:fb:b0:48:f1:8c:a3:0e:26:49:96:00:
         88:57:4c:86:4e:4c:8b:55:96:cf:21:6f:30:6b:a9:cc:9f:4c:
         ce:83:cd:2a:d8:73:99:e7:78:75:61:0d:da:dd:17:b4:c1:c5:
         11:5e:43:32:63:9b:da:3e:93:b8:64:4b:d8:17:53:fd:31:e8:
         8f:fc:ac:5f:1e:b8:15:e2:c7:26:61:c6:90:5f:a6:ce:20:54:
         6e:1e:c3:67:fc:fb:39:d2:06:83:e9:69:d0:e5:8a:08:f1:5e:
         ba:b6:d0:3b:63:f2:de:bf:0d:ee:27:9f:a1:06:24:32:72:b1:
         91:95:76:0f:29:30:09:a7:21:40:b8:f4:c5:dd:2b:5f:78:65:
         4d:c8:41:4e:a2:80:22:b5:88:3d:c7:9d:31:6f:c9:52:ca:49:
         7e:79:14:be:75:54:cc:e1:8c:29:f0:35:43:90:27:d1:bd:e1:
         cd:32:7d:18:d2:68:35:46:b7:00:29:dd:e6:de:54:57:b2:91:
         3f:6c:e1:65:ef:f2:fc:4a:01:d1:47:c3:a3:3b:48:f1:25:04:
         d7:04:f2:a2:4f:63:df:1f:2b:9c:1d:d1:9b:70:3c:6a:27:13:
         4f:b5:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:32 2024 by rpki-client on console-fra.rpki-client.org