Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
File:                     V9ChyazkChsBcJn_Y-Tgh-scvds.mft (raw, json)
Hash identifier:          tw0OAnaC5YpEfF6vs4rNjqndoYStnJV6IvMv3sZ4NVs=
Subject key identifier:   5A:7C:56:2D:5B:25:B0:BD:EC:6C:6A:74:54:AE:C1:A6:5D:80:01:B0
Authority key identifier: 57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB
Certificate issuer:       /CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
Certificate serial:       019358093C33937DE2BB0CBA6F7555EC356D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
Manifest number:          0211
Signing time:             Sat 23 Nov 2024 08:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:20 +0000
Files and hashes:         1: V9ChyazkChsBcJn_Y-Tgh-scvds.crl (hash: 7xYjsM4g0ySdEUkPyvwJQJaPrSoL5TCBANb1cCEl3r8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:3c:33:93:7d:e2:bb:0c:ba:6f:75:55:ec:35:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
        Validity
            Not Before: Nov 23 08:00:20 2024 GMT
            Not After : Nov 24 08:00:20 2024 GMT
        Subject: CN=5a7c562d5b25b0bdec6c6a7454aec1a65d8001b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:31:61:16:06:ab:ad:b8:aa:6a:f9:ba:3c:
                    80:e1:e2:d7:65:cb:53:fd:3b:b3:5b:a8:ec:e2:f7:
                    5e:c0:c4:92:0b:79:02:65:37:00:6b:fd:1d:71:8d:
                    3c:33:36:b8:e1:49:91:9b:31:62:50:94:42:ad:cd:
                    49:30:6f:c5:be:f3:3e:b3:d3:ef:af:2c:9a:58:b0:
                    3f:20:95:a8:80:46:09:ac:0c:b8:ac:bc:8f:5e:cb:
                    9d:de:a5:79:fe:41:ff:53:10:7e:c0:aa:4e:83:a2:
                    c8:5d:d5:99:b9:96:74:dc:44:91:23:94:55:ad:3c:
                    83:37:6d:de:76:b0:9b:54:64:c8:ac:0a:6f:ec:f4:
                    2b:5e:ee:b7:55:18:ec:9b:f5:2b:84:10:9d:fb:4d:
                    fe:d0:84:ed:26:9f:10:60:59:17:3c:88:22:79:d7:
                    c2:2a:2b:20:5a:b9:dd:8e:27:c2:30:0b:64:ac:e0:
                    22:b2:d7:31:cf:83:a5:f1:d6:d0:1a:b9:82:89:b5:
                    38:56:c3:2c:11:f2:7f:7e:ba:4e:39:c0:84:95:85:
                    bb:a9:9e:2a:f7:b2:24:25:47:9d:7e:de:d2:1d:f0:
                    88:8c:fb:16:0e:bf:dc:79:85:36:c6:c8:78:11:88:
                    76:6d:ff:60:07:b3:3f:fd:dc:18:c1:89:d9:99:6c:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:56:2D:5B:25:B0:BD:EC:6C:6A:74:54:AE:C1:A6:5D:80:01:B0
            X509v3 Authority Key Identifier:
                keyid:57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:a5:c3:f6:bd:8a:ce:d3:5d:e8:cd:91:44:94:10:cb:f8:
         63:c1:c7:a5:85:66:cc:e5:04:1a:69:e5:f4:01:c6:a1:b1:1a:
         05:10:77:72:63:29:db:65:a8:95:fe:67:e1:44:ba:a5:4d:be:
         11:a3:da:b9:f0:c3:57:c0:26:15:52:56:d1:dd:f3:bc:45:e6:
         5f:6b:c3:8e:18:af:d6:cf:e2:64:d4:d9:36:e3:89:c2:5e:fd:
         66:b8:8b:b5:fb:a6:d3:85:4a:49:3b:e2:98:85:8e:11:1a:a7:
         0b:a9:f5:7e:d6:98:b8:75:d0:ba:59:b6:b7:fb:53:27:19:57:
         4e:2c:eb:53:47:8a:fc:4a:e6:a4:bc:d9:ef:f7:f9:c1:ab:43:
         c0:3f:73:3a:d0:f2:28:58:77:39:32:4d:e9:ae:c3:16:54:e7:
         5f:36:d5:34:cf:34:1d:89:fd:1f:85:a9:b1:ae:33:9c:62:ce:
         22:d1:ca:b6:09:71:0b:c4:77:4f:3f:27:26:93:1f:bf:10:e9:
         77:44:0e:1c:00:20:35:4d:62:31:ad:2b:86:74:df:eb:48:c5:
         77:c6:b0:3d:bc:f1:48:a6:a8:c6:a7:d4:55:89:e8:5e:47:7e:
         1f:13:e7:92:64:ed:80:11:ce:f7:46:a8:a7:01:4c:74:66:73:
         b5:c9:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:59 2024 by rpki-client on console-fra.rpki-client.org