Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
File:                     VJWo5etsnoxrNjVBB3DzG5kDSCA.mft (raw, json)
Hash identifier:          j3VuANOKlQOi53OKB3Wr2Qk3U90MUdV3U6j6GR3ORPs=
Subject key identifier:   0D:DE:A4:57:36:08:C0:95:AC:5A:6C:F3:CD:36:E6:14:8A:1F:07:52
Authority key identifier: 54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20
Certificate issuer:       /CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
Certificate serial:       019356BFB80973568647F0FC099BBEACEE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
Manifest number:          0208
Signing time:             Sat 23 Nov 2024 02:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:25 +0000
Files and hashes:         1: VJWo5etsnoxrNjVBB3DzG5kDSCA.crl (hash: opEZ0tWAlCMcQPhlSn8GDBAKQ2hglqBmY3Pl1uQftvQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:b8:09:73:56:86:47:f0:fc:09:9b:be:ac:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
        Validity
            Not Before: Nov 23 02:00:25 2024 GMT
            Not After : Nov 24 02:00:25 2024 GMT
        Subject: CN=0ddea4573608c095ac5a6cf3cd36e6148a1f0752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:e5:57:2d:4f:92:d2:1b:ed:04:47:a9:18:
                    46:70:a7:ef:f0:4d:cc:bb:79:24:67:84:f1:ba:9d:
                    82:4a:94:48:8a:f0:da:5c:a2:c4:4c:2f:55:90:d6:
                    cd:d7:97:8f:88:54:63:be:25:02:40:0f:99:66:47:
                    76:ec:da:4a:18:2b:96:f5:aa:9b:87:42:9b:9e:af:
                    cc:be:1b:38:d2:fb:41:7f:af:6b:dc:f3:12:75:95:
                    1f:72:1a:ef:1d:52:b9:4b:c9:c8:77:77:3d:85:88:
                    78:02:0c:9e:07:2a:6c:3b:15:b9:f7:ab:4e:89:0a:
                    71:04:ec:c1:13:1b:b0:30:26:09:81:01:cd:27:da:
                    bd:a3:f5:ac:d7:52:36:21:0c:8a:2b:64:94:b3:38:
                    f7:12:3c:62:7b:0f:96:f9:30:89:d9:a1:b9:e6:12:
                    ec:98:fe:c2:89:4f:b7:06:45:9c:e3:31:01:e0:0e:
                    8b:aa:ba:f6:46:66:69:85:0f:f2:f3:65:e6:23:e3:
                    8a:1d:11:45:f8:b5:d3:16:8c:33:8d:93:1c:5e:d3:
                    38:1c:03:a9:bf:72:aa:b0:88:c5:36:45:11:2d:49:
                    6f:58:bf:1d:7c:60:90:2f:48:c9:1f:0d:ce:3e:e9:
                    3c:5b:7f:e0:21:71:18:b6:48:1b:35:28:7f:c6:e8:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DE:A4:57:36:08:C0:95:AC:5A:6C:F3:CD:36:E6:14:8A:1F:07:52
            X509v3 Authority Key Identifier:
                keyid:54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:01:ce:d7:4e:5f:7f:01:f5:06:38:26:ba:4c:01:28:ea:2e:
         89:fd:91:2c:fc:19:3b:86:9c:0a:68:6a:dc:4e:9b:1f:c0:9c:
         ed:01:86:42:95:c3:1c:1f:58:21:19:85:0a:88:8a:ca:6d:c9:
         05:de:52:86:d6:16:8b:1d:39:94:6a:f5:0d:bf:d0:74:d3:64:
         10:93:ba:41:92:6a:41:b5:cb:b4:48:fc:ae:d4:ff:d5:60:be:
         ea:b2:76:2b:ab:d6:ed:16:7c:87:fd:68:fe:7b:6c:b5:2e:75:
         2c:88:d6:c1:80:23:ee:e6:95:be:03:f8:7e:b3:da:64:ce:c0:
         ca:ca:99:9f:41:27:07:4e:c1:c8:dc:ec:8c:2b:ee:fa:fd:a8:
         91:b3:d0:46:6b:22:62:e9:39:64:be:df:c9:3f:cd:35:f8:30:
         af:7a:1c:f9:a6:74:84:55:37:1e:71:42:9e:24:57:93:ff:eb:
         eb:49:cc:ae:3c:1b:2e:37:64:0b:85:79:30:90:26:83:68:e1:
         3b:37:20:0b:b7:6e:04:29:63:32:b1:04:5f:5d:6f:b7:00:97:
         ee:7c:a6:e7:d1:50:a8:52:6f:87:01:07:fc:e4:32:e1:f6:75:
         ab:e2:31:ee:0f:4d:92:1b:80:83:ac:ff:53:66:b0:6c:4e:04:
         95:c4:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:59 2024 by rpki-client on console-fra.rpki-client.org