Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File:                     5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier:          DOdRRUD7GlIgXv4artS7NSmd7Pqt2kLLbWIRHNFNnhM=
Subject key identifier:   8D:A0:CC:FB:87:96:F7:89:E2:C7:95:38:6D:0B:75:9C:8D:EC:BD:B5
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer:       /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial:       0193640DF3BF5F74753340E1DC7CB3FAD840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number:          0C9F
Signing time:             Mon 25 Nov 2024 16:00:56 +0000
Manifest this update:     Mon 25 Nov 2024 16:00:56 +0000
Manifest next update:     Tue 26 Nov 2024 16:00:56 +0000
Files and hashes:         1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: Y1TOTzmFVtuCZL4aXpksTL8QwpytibxKKzbgjc+cZjI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:0d:f3:bf:5f:74:75:33:40:e1:dc:7c:b3:fa:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
        Validity
            Not Before: Nov 25 16:00:56 2024 GMT
            Not After : Nov 26 16:00:56 2024 GMT
        Subject: CN=8da0ccfb8796f789e2c795386d0b759c8decbdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:99:4c:2f:fe:1a:fe:2d:00:c4:e3:9e:2c:
                    3e:1a:1e:d1:0c:68:98:95:7d:fb:48:1e:c2:62:36:
                    7a:02:e5:df:2f:b7:75:47:95:83:dd:f6:9d:e7:3e:
                    84:23:a5:7f:57:c8:b3:d6:66:bb:c7:9a:42:19:df:
                    a9:dd:c9:1a:c4:44:a8:f6:c8:ee:dc:3c:97:df:43:
                    28:29:8f:8e:37:cb:a4:33:10:ef:51:f8:bd:99:78:
                    32:1c:a4:14:db:a4:ca:85:fa:41:f0:8a:19:66:95:
                    1d:02:84:72:72:19:64:9f:08:4b:e1:59:6e:b4:0a:
                    d8:bc:e7:cd:02:df:37:c9:59:a4:a0:0f:c9:a5:10:
                    6e:a5:ac:1f:55:4e:c5:54:12:1c:d8:77:a4:0f:7b:
                    6c:88:e7:c7:e6:cf:c5:81:fa:a7:c9:76:08:43:cf:
                    11:29:44:a5:71:59:9a:a9:f1:b5:f8:39:04:7d:2c:
                    18:e4:99:c4:ee:01:a5:5f:15:93:12:45:a8:23:ad:
                    20:0b:f7:99:84:64:94:03:e5:b0:2e:41:43:7d:61:
                    b2:9f:f4:21:63:e6:cc:11:47:fe:08:e7:4e:51:ef:
                    3c:35:e7:12:b4:b8:73:b4:28:35:7c:19:3a:05:63:
                    d4:ba:45:02:f7:51:4f:1a:52:c7:87:e6:a8:8d:4f:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:CC:FB:87:96:F7:89:E2:C7:95:38:6D:0B:75:9C:8D:EC:BD:B5
            X509v3 Authority Key Identifier:
                keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:54:16:78:bb:d9:0d:44:9e:e3:2d:66:e2:b5:3d:c5:c3:
         73:fb:cb:62:97:18:d3:8d:a7:53:f9:fb:15:5c:85:4b:27:69:
         d5:2a:e8:6b:89:d9:8a:45:1d:a0:e3:b1:ce:04:b1:a2:d6:50:
         4b:b3:52:e1:c2:bc:de:ca:56:26:a1:b7:48:97:1b:1d:94:c7:
         bf:de:9e:62:df:f6:5c:55:66:a0:ae:66:81:57:74:ce:44:80:
         0c:46:1e:1b:73:f5:8b:c1:7c:1e:35:cd:c1:09:c4:c3:bf:23:
         35:73:a5:39:56:ad:53:d1:7b:78:1b:12:9d:39:98:44:ac:51:
         44:07:ec:46:ac:c3:8c:b8:e0:5c:d1:29:ce:cb:17:06:8e:90:
         ed:16:05:17:fb:ef:7e:09:5b:55:19:c1:67:88:66:32:b0:90:
         5d:f4:a1:66:34:fa:45:3d:48:f4:7e:8a:3e:ea:16:3e:f0:38:
         40:d0:6a:78:f2:7c:11:02:ee:93:e3:4a:41:7e:e3:2c:ec:83:
         54:11:0c:b9:bf:1c:b9:47:ea:0b:c6:7b:2c:24:cd:98:04:a8:
         65:ae:8b:f3:96:27:02:87:8e:1e:89:19:ad:94:dd:e9:98:70:
         02:47:f2:6b:9c:36:15:55:30:52:b8:56:2d:3f:0c:80:d4:9a:
         4c:02:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:02 2024 by rpki-client on console-fra.rpki-client.org