Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File:                     8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier:          9YuhJo6ZVa7WAMKdLUnZx2Z7gjuT/PaBwXA8036Dp8M=
Subject key identifier:   EE:B6:7D:05:2F:41:D2:42:39:88:62:BD:DB:2A:4A:3E:00:4B:1C:36
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer:       /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial:       0193568892A19094C79993A99D0E6A8616FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:10 +0000
Files and hashes:         1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: C4tft132B+qe1PzzVWcRLT3PonfWELFz0aexy6X6AgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:92:a1:90:94:c7:99:93:a9:9d:0e:6a:86:16:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
        Validity
            Not Before: Nov 23 01:00:10 2024 GMT
            Not After : Nov 24 01:00:10 2024 GMT
        Subject: CN=eeb67d052f41d242398862bddb2a4a3e004b1c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:5c:15:de:8e:7e:f3:81:8f:81:82:cb:fb:
                    bb:e0:8e:93:8e:f2:a2:14:90:45:03:8c:4f:b0:17:
                    31:08:6f:67:b7:0e:a8:b9:34:5a:63:b9:6f:37:50:
                    52:b7:73:33:cd:42:a8:3e:43:ee:ee:0d:3b:c2:eb:
                    d8:bd:67:39:c0:77:8a:c7:ed:f1:11:cb:a1:e9:80:
                    f8:8e:72:76:d1:b0:79:6d:e6:58:0b:78:08:53:f8:
                    5c:d7:29:1a:73:50:1c:8a:50:45:78:92:02:13:28:
                    6c:2b:43:83:01:86:1e:5b:6c:99:41:e1:27:88:f5:
                    6b:c0:af:60:e3:ee:2e:04:89:86:6b:ca:f4:9d:39:
                    75:70:64:19:08:af:77:c9:61:ba:11:71:97:47:a4:
                    5c:a0:e8:46:5f:33:dc:2d:78:3d:f1:68:47:9a:a3:
                    e1:ef:08:5b:66:bb:b8:cb:8b:ce:a3:62:83:d7:1d:
                    1d:ee:db:b0:c5:75:85:45:d1:77:5c:eb:3f:63:dc:
                    bd:0c:18:99:2a:2b:d7:81:76:1c:07:0d:ab:bd:c7:
                    01:fa:4b:48:96:c5:b9:54:6c:bd:6a:d1:d8:d8:29:
                    7e:cf:b9:a9:84:e1:a0:99:4e:84:75:9f:eb:1a:d1:
                    b5:d9:71:3e:52:7c:51:28:bf:92:be:78:a9:66:52:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B6:7D:05:2F:41:D2:42:39:88:62:BD:DB:2A:4A:3E:00:4B:1C:36
            X509v3 Authority Key Identifier:
                keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:d5:a7:63:f6:32:a7:1c:46:89:bb:59:86:7d:e8:b1:6d:
         03:9b:cd:94:90:8f:f8:fe:4d:48:be:1f:28:e2:08:ff:49:8d:
         d2:0f:01:ff:fd:17:da:64:9d:fd:42:6b:6a:7c:64:d8:9c:2b:
         38:91:c1:4c:39:56:6c:92:76:95:6e:27:90:e1:bc:1b:75:10:
         8b:6b:ec:50:c4:59:36:ee:09:32:60:e7:a1:6c:4f:09:75:f0:
         ef:2c:e1:2e:79:7a:2a:17:d7:6c:a0:13:df:c7:f0:85:8c:89:
         63:0d:fc:ff:0f:7d:d8:2d:e8:38:dd:40:44:9d:18:a0:7d:5e:
         8a:c3:2e:ed:9f:af:9d:be:7e:92:27:cd:08:cd:bb:34:b2:da:
         d3:0d:aa:03:2e:75:23:ba:f4:08:fc:da:0b:c4:bb:48:ea:cf:
         7b:38:22:cc:83:ba:dc:07:17:33:49:e9:5f:f6:f4:28:e2:e1:
         69:99:1f:ae:e3:6b:97:c2:77:45:41:44:43:33:04:81:fa:03:
         56:1a:b5:73:97:23:a8:90:2b:a7:ad:93:4b:0b:56:ad:33:92:
         19:78:85:4e:24:fb:8a:6f:73:fa:fb:b1:57:ed:d7:27:ea:f6:
         30:13:6a:5b:cc:11:e4:a8:2d:84:60:0d:ef:94:22:e0:3a:aa:
         44:df:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:50 2024 by rpki-client on console-fra.rpki-client.org