Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          oQ3qWwAj459FjbTBnsMPzkXH+fgg3oexpMYM/jGpV9M=
Subject key identifier:   D2:D6:35:09:AD:04:EE:2D:B1:28:02:23:BF:BF:E9:D7:23:E7:E4:A5
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       0193688F55D5F91F5B488056B4BA38491C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          01B1
Signing time:             Tue 26 Nov 2024 13:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:44 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: +TOLrr7xfrwU6mfH1NbjkRIxNSDSfLj0xzO30WfBJkU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:55:d5:f9:1f:5b:48:80:56:b4:ba:38:49:1c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: Nov 26 13:00:44 2024 GMT
            Not After : Nov 27 13:00:44 2024 GMT
        Subject: CN=d2d63509ad04ee2db1280223bfbfe9d723e7e4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:3e:e1:ff:c3:7a:14:41:38:77:92:96:58:
                    af:fe:6f:4c:67:31:78:a4:75:37:27:70:7f:27:e4:
                    1b:cf:42:30:49:39:39:8a:cc:61:b1:a1:ad:25:23:
                    f7:b8:3d:a7:08:f1:06:23:4f:03:14:e3:b7:c8:b0:
                    90:e3:4c:d5:61:33:e5:75:b3:9a:29:e6:b2:01:b6:
                    0f:c7:75:7f:4e:63:3a:ec:37:6e:1f:c9:99:c2:bd:
                    98:c3:8f:db:71:76:4b:42:04:98:d0:ed:da:0c:5b:
                    5e:94:c9:8b:52:7a:5c:bd:e4:ef:bf:7a:9a:44:fe:
                    93:99:51:31:d3:61:11:35:1c:2e:85:29:a4:ba:60:
                    6c:57:c2:61:1c:3f:ed:96:5d:06:15:30:a6:ca:a5:
                    12:ad:30:dd:c2:54:0c:03:35:d5:38:da:ff:61:a4:
                    de:dd:48:83:d1:2d:d1:6c:f5:b1:28:b3:ef:b4:dc:
                    09:aa:a3:c7:7f:92:ad:bc:ef:54:ac:ec:bb:d1:1c:
                    ad:ae:e2:41:62:01:d7:23:b9:0a:5a:c1:c5:a9:b9:
                    75:52:43:e3:e7:e8:b6:15:28:40:ef:5e:a7:22:97:
                    5b:cd:36:18:26:e7:50:87:23:49:23:83:cd:86:c1:
                    80:79:00:2f:15:cd:c8:59:2d:da:6f:6f:99:82:7c:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:35:09:AD:04:EE:2D:B1:28:02:23:BF:BF:E9:D7:23:E7:E4:A5
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:8a:a5:22:e9:63:ff:df:01:26:fb:ec:35:be:d8:03:25:
         f6:e7:13:e8:b4:b6:8f:34:33:9e:c3:12:a6:b1:33:4d:b9:42:
         70:5a:11:a2:c7:ef:da:30:21:55:84:f5:81:93:40:25:78:5f:
         9a:c6:78:eb:7f:7c:af:9b:cb:0a:f7:41:5d:54:15:1e:3d:b0:
         73:00:4d:95:6c:36:9c:77:9f:f3:cc:25:09:11:3f:45:7b:be:
         50:00:d4:41:20:51:b0:c7:b2:bc:b8:c0:e4:26:8c:b0:35:91:
         7a:9d:92:1d:31:cf:69:81:41:3a:d7:87:ad:0c:5f:5e:e9:1f:
         41:7f:eb:08:ba:3b:b9:56:58:2d:d2:37:0b:c5:7b:21:a0:2d:
         0c:84:45:a5:48:79:b5:09:d4:28:cc:03:50:2d:ef:17:3b:c8:
         d7:3c:65:02:73:56:f1:a6:00:99:4e:1b:64:fc:8b:b4:f4:87:
         ad:c7:5f:a1:3f:68:fc:4f:cc:98:e0:9f:9f:92:09:54:67:45:
         ee:00:bc:c9:a7:c0:71:e9:e3:5f:cf:ec:6d:0f:d6:44:4d:4d:
         71:e9:1c:89:59:8b:a6:af:90:8e:bc:59:d0:27:04:08:5a:5a:
         85:cf:bf:d3:3b:e5:2d:ef:98:a0:34:43:78:cb:63:60:6d:38:
         3f:18:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:34 2024 by rpki-client on console-fra.rpki-client.org