Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          9yFJ48ExrGXJ7cchrQ4n5q8bWB9/BpkYXKUZluEIejs=
Subject key identifier:   C3:68:6F:8B:A3:5F:79:87:69:D4:CC:7F:A0:CD:D7:84:6A:34:6A:4D
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       0193647BEFCE10E61A2C02EBC0F2CD25219F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          1375
Signing time:             Mon 25 Nov 2024 18:01:04 +0000
Manifest this update:     Mon 25 Nov 2024 18:01:04 +0000
Manifest next update:     Tue 26 Nov 2024 18:01:04 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: W9IJN5l/vRHhwQ/55k5PKw0oyrXz3dirWarb4Q52H1c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:7b:ef:ce:10:e6:1a:2c:02:eb:c0:f2:cd:25:21:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Nov 25 18:01:04 2024 GMT
            Not After : Nov 26 18:01:04 2024 GMT
        Subject: CN=c3686f8ba35f798769d4cc7fa0cdd7846a346a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:27:64:ba:b0:68:c9:57:54:8b:91:e5:1c:
                    31:cf:9d:a8:84:1e:ac:05:a8:76:e9:61:a3:1b:66:
                    34:1e:f2:77:47:17:30:f4:73:44:03:20:53:e4:1b:
                    9f:b6:17:e6:1c:83:38:30:45:36:9c:63:a4:76:64:
                    72:25:c4:5f:4a:8d:90:fd:e7:b3:d4:96:d7:40:b6:
                    41:7d:27:5d:d2:09:10:c2:19:d7:a7:26:02:2a:e0:
                    b1:02:92:72:da:9b:72:1c:44:e9:a8:7f:07:46:1a:
                    9a:60:26:e9:61:fe:03:7c:3e:c1:66:63:62:8d:52:
                    1e:66:87:7b:c7:61:62:bf:a8:b2:c3:f7:8a:fb:5b:
                    52:10:d8:29:a9:c4:ac:35:bb:0e:02:d7:a6:52:69:
                    b7:5f:1f:ce:59:32:d5:f2:df:0c:ba:c2:3e:7d:66:
                    87:30:18:0f:92:c4:f8:10:6e:f6:a7:8a:eb:cb:c6:
                    1f:1b:44:da:40:6f:70:9d:2d:45:9b:6d:d1:2b:49:
                    17:15:a6:81:e3:f7:05:19:c2:03:ef:f8:e8:c7:b4:
                    2e:c3:e3:9e:cd:c3:87:79:2c:99:89:28:27:ab:db:
                    2a:7a:7a:2a:dd:3f:e0:66:e7:01:2a:a6:b7:ea:e9:
                    46:75:b2:02:58:30:a3:80:4f:f5:af:be:fb:a4:21:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:6F:8B:A3:5F:79:87:69:D4:CC:7F:A0:CD:D7:84:6A:34:6A:4D
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:85:db:44:85:b8:b7:42:3f:a6:79:08:45:ae:cb:cd:2a:
         31:42:c3:39:16:60:c5:78:90:df:0d:4f:71:a1:9d:78:1c:69:
         b2:57:fa:08:80:39:bd:23:5d:d4:55:63:32:89:ce:01:fe:0c:
         68:dd:98:6f:10:98:a4:37:54:a5:43:23:50:e0:cb:26:c7:9f:
         6d:ea:33:a4:7c:c3:76:c7:73:08:87:43:0a:91:91:ff:d2:11:
         7f:2b:72:99:13:97:a5:88:51:68:fd:b3:b7:d8:06:03:af:54:
         a4:fa:e3:23:a2:fb:d3:c4:e9:e0:0c:e9:c4:94:3b:f7:08:69:
         fd:11:6c:64:9a:8e:39:29:60:3f:be:10:8e:6f:9f:11:0c:c9:
         a2:03:72:91:bd:f1:7f:28:74:ad:90:de:9d:da:83:ca:68:6b:
         79:b6:60:c5:2e:5d:e2:d1:62:a7:07:09:85:68:5c:98:4d:b9:
         dc:d8:b4:4b:d9:88:cd:90:8f:dc:15:cb:15:6b:32:50:6e:4a:
         43:4c:dc:da:72:e5:67:33:a0:72:69:ad:b9:7a:6d:79:fa:a7:
         fa:0c:63:64:ea:3a:e9:7d:fa:f3:69:e4:7a:11:34:c0:7e:5a:
         f1:52:a4:3b:b9:2d:95:a5:fb:f4:83:cd:70:b5:f0:ab:70:b5:
         8c:13:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:50 2024 by rpki-client on console-fra.rpki-client.org