Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File:                     NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier:          9GlxUYROJVnpz/4gqGKbNANCN7KYIO9eKkU4T8n2PAQ=
Subject key identifier:   72:03:8C:5B:10:FD:C2:15:38:CA:99:E7:A0:2F:98:38:EF:D0:3B:F9
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer:       /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial:       019356F68F2C10F762E736FB0ECF092CC2CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number:          050A
Signing time:             Sat 23 Nov 2024 03:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:19 +0000
Files and hashes:         1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: wmoPvwLXWHS9yJRBrUiBArPwe5WYlF7SWtif8o1MxDQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8f:2c:10:f7:62:e7:36:fb:0e:cf:09:2c:c2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
        Validity
            Not Before: Nov 23 03:00:19 2024 GMT
            Not After : Nov 24 03:00:19 2024 GMT
        Subject: CN=72038c5b10fdc21538ca99e7a02f9838efd03bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:13:86:5a:4e:13:c7:b8:93:ab:85:f6:29:
                    8f:89:7a:95:c0:7c:24:46:9a:f8:df:11:70:e1:26:
                    56:39:73:ff:75:11:f6:8f:e6:a1:39:4f:bc:5e:37:
                    ff:aa:4e:02:52:c3:88:c0:07:ff:2c:9f:37:36:36:
                    7c:2b:95:2c:34:07:bf:16:97:eb:1a:e5:a4:e0:83:
                    e3:f3:2b:b9:ec:59:a4:5d:c7:be:73:7f:49:fe:64:
                    fd:48:24:a5:eb:22:0a:34:26:4f:d5:ca:ee:21:eb:
                    d2:52:88:1f:5d:36:40:d5:a4:71:03:13:83:c6:e7:
                    41:21:8c:16:bd:11:cd:26:3d:c6:6a:85:2f:f4:5c:
                    f5:63:c5:99:0f:e6:83:19:d0:4b:32:a0:30:d8:82:
                    b4:45:df:8c:e8:5c:6c:ea:6e:7a:d9:ac:a2:f3:d8:
                    53:29:9e:91:6a:6b:10:db:ef:73:ca:50:cb:71:73:
                    04:da:74:d0:97:72:85:18:2c:0f:9f:e8:9c:a6:3c:
                    8c:23:be:04:c0:7b:7d:83:eb:ee:10:e4:85:65:ef:
                    f0:e2:7d:f5:ad:c7:ef:27:ea:5c:33:2e:8f:6b:bc:
                    a9:e2:28:3e:9e:07:29:68:d6:71:38:dc:1f:12:2d:
                    3f:38:0f:96:0c:de:c7:22:ad:01:08:70:f2:99:6e:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:03:8C:5B:10:FD:C2:15:38:CA:99:E7:A0:2F:98:38:EF:D0:3B:F9
            X509v3 Authority Key Identifier:
                keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:df:c3:af:e4:5e:2d:43:cd:ed:90:93:87:4a:9c:6e:75:
         74:32:8d:27:fc:12:06:a1:83:45:d2:6f:6e:42:46:4c:1f:ee:
         e8:63:4a:1e:ff:a5:b0:e9:2c:cb:3a:37:f6:7f:3e:7f:3f:c8:
         2e:31:3a:a8:59:a5:74:e7:ee:1f:55:fa:38:30:89:38:29:cb:
         fd:8f:53:86:82:4d:93:c0:cc:fd:18:dd:b9:cc:cf:f5:e0:79:
         02:17:cb:56:be:35:63:ae:b2:3b:d3:b7:0f:5f:57:8e:da:84:
         fe:51:db:4c:77:e3:d1:1a:76:e1:fd:71:8b:ed:72:b5:e8:e2:
         91:21:6f:07:81:00:d6:b9:d2:1e:b9:e0:90:2a:a2:8a:23:a2:
         ff:a1:d4:20:8e:fb:94:59:5d:ae:b3:db:6a:0e:54:95:14:c0:
         be:ff:b3:b6:ad:27:6a:01:11:a1:49:46:5d:14:c6:fa:05:b7:
         ef:11:11:72:46:35:ed:7c:96:50:45:b7:70:86:60:17:02:90:
         5c:38:49:ac:29:b3:31:3d:66:a4:ad:b3:0c:ba:fe:68:e1:0f:
         c0:27:2b:8e:36:cc:b5:62:92:a1:97:80:dd:72:e1:d9:52:15:
         71:5e:20:9a:1e:d9:95:4b:d8:5f:d2:ec:3f:ee:d7:11:7d:4b:
         50:a4:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:10 2024 by rpki-client on console-fra.rpki-client.org