Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File:                     L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier:          HaryKTHGfQpDOkyvoKo8Ti0ymuz5g5K3W4gNx5taBLs=
Subject key identifier:   A9:72:71:AD:0D:44:7A:25:D9:FB:44:5C:A8:D8:0F:E5:3A:72:F2:70
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer:       /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial:       01923737B01C7C82F05AE366DEFF0C213320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number:          09C1
Signing time:             Sat 28 Sep 2024 06:00:49 +0000
Manifest this update:     Sat 28 Sep 2024 06:00:49 +0000
Manifest next update:     Sun 29 Sep 2024 06:00:49 +0000
Files and hashes:         1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: tPTY255lO6cIcEbObL1fcAAhjMXuT5Rx6GUJkkX11JY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:37:b0:1c:7c:82:f0:5a:e3:66:de:ff:0c:21:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
        Validity
            Not Before: Sep 28 06:00:49 2024 GMT
            Not After : Sep 29 06:00:49 2024 GMT
        Subject: CN=a97271ad0d447a25d9fb445ca8d80fe53a72f270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:17:bf:10:bd:d5:27:01:d0:cb:18:a2:fe:
                    dd:24:45:a9:7b:02:fb:23:b2:28:1e:55:ba:81:bd:
                    9b:f8:a7:7c:31:0f:ab:ac:fe:1b:6a:44:92:03:53:
                    33:7b:6b:3c:24:8b:23:81:8d:b0:fe:dd:fb:3f:c9:
                    e2:16:8c:49:28:de:ab:5d:03:db:ed:f4:a8:4e:aa:
                    c6:2d:20:c9:ad:71:ae:a8:69:eb:cd:4d:31:58:e9:
                    87:e7:cc:8d:d9:89:4c:3a:ad:40:bf:b6:c7:a3:66:
                    1d:38:60:13:ff:a1:72:2f:d0:ff:c3:c5:e2:a5:44:
                    6d:b9:0a:b5:47:02:14:ec:7b:37:41:74:ff:80:80:
                    02:f3:80:ff:5e:59:5b:8d:ec:18:61:e7:62:77:72:
                    f4:82:6b:04:8c:31:c6:7f:fb:3e:d5:ac:c8:85:ad:
                    13:4a:20:23:04:e4:cf:26:ff:8d:2a:ff:2c:7f:93:
                    db:62:99:3d:e4:d6:e7:d3:b2:ba:23:bb:d5:19:17:
                    84:f0:6e:00:07:d7:b7:75:24:e3:ed:af:42:be:c5:
                    a4:5e:11:a6:d6:7f:0c:ef:c0:f5:e2:a0:83:57:8b:
                    9a:65:a6:1e:c3:05:9a:6b:33:e0:2f:c9:9c:cf:d2:
                    53:ca:08:b6:34:47:5f:05:e8:d7:15:4f:68:5e:f3:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:72:71:AD:0D:44:7A:25:D9:FB:44:5C:A8:D8:0F:E5:3A:72:F2:70
            X509v3 Authority Key Identifier:
                keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:4b:4d:0c:77:8f:75:d4:80:b1:70:4a:12:a7:b2:1c:83:
         81:7f:a9:b6:8a:0c:40:60:8f:87:a0:f2:19:86:84:47:26:17:
         79:ca:7c:ce:ab:54:f9:64:b3:32:5b:6e:94:be:53:13:b0:4c:
         ed:f6:bf:f0:42:9a:51:d9:2b:6f:e2:40:7f:66:c4:1e:8c:a5:
         18:07:2f:6d:08:68:10:ac:a7:0d:85:29:6c:55:f4:4d:d0:19:
         5e:22:ca:f6:6b:1e:19:c4:6a:55:74:64:7b:f0:4c:25:dd:f0:
         ba:f9:77:cf:3f:d1:15:b1:ab:1a:75:06:73:9c:c1:89:63:f4:
         39:4d:fe:0f:33:b2:6c:d5:c5:ba:58:71:cc:6c:e1:0e:61:a1:
         85:0f:86:ec:cd:a4:a3:c5:86:d6:e1:0c:15:3c:a9:a7:67:e6:
         cd:74:96:b9:24:8a:b8:5e:62:78:b8:74:81:35:52:e5:d7:99:
         4c:6b:6a:0d:0f:22:ca:12:6a:98:42:3c:aa:e1:a6:08:d7:cf:
         18:c2:ef:8c:8a:41:a9:27:69:e0:df:f9:06:11:0b:8c:dd:17:
         e6:69:f3:d2:27:82:bc:5f:9a:a3:3d:04:f1:05:b3:e9:17:54:
         68:1a:9c:48:24:a8:fe:66:31:b7:e4:4e:f9:75:ae:19:cc:34:
         6a:a6:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:14 2024 by rpki-client on console-fra.rpki-client.org