Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File:                     MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier:          FJzl9furnRcbOt27FxyUcI6Y9I1hmDbDE6oRt9CzLDY=
Subject key identifier:   C8:DE:24:C3:64:C1:9D:D1:C5:A7:22:CA:29:5C:AB:17:51:10:62:9E
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer:       /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial:       0193568A67C89942CAE1C65C78F9B5D57883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number:          1300
Signing time:             Sat 23 Nov 2024 01:02:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:11 +0000
Files and hashes:         1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: Jzp353U40IGxZTosNpTX7d959ikpY/olN5EmwEPNPlI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:67:c8:99:42:ca:e1:c6:5c:78:f9:b5:d5:78:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
        Validity
            Not Before: Nov 23 01:02:11 2024 GMT
            Not After : Nov 24 01:02:11 2024 GMT
        Subject: CN=c8de24c364c19dd1c5a722ca295cab175110629e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:0a:ca:c6:c8:b6:11:d2:5e:df:3a:b9:66:
                    a7:59:74:4c:d5:81:a9:6f:b3:96:69:8b:9a:8f:31:
                    cd:47:a7:9a:e2:24:e3:16:b6:9e:5b:20:7b:d0:0b:
                    0e:b5:9a:0e:53:94:c5:fc:61:ac:4f:aa:f5:f2:87:
                    8a:fe:cd:20:2a:a8:a7:66:7a:6d:7c:fb:8a:66:90:
                    36:4a:94:60:03:8a:8b:62:19:49:44:73:31:0a:94:
                    9e:6c:da:99:1a:46:d8:1e:90:28:40:e3:f1:5f:68:
                    3b:65:05:4b:65:a3:21:4c:86:43:c1:8f:91:84:b5:
                    be:c0:7a:b3:3a:50:af:c1:5e:29:cf:bb:34:1e:92:
                    d9:6c:c9:7a:92:3b:db:fa:d7:97:e1:ec:2e:c2:c1:
                    60:25:28:28:2d:dd:2b:37:b9:5d:3c:da:49:eb:f6:
                    f1:99:2d:67:46:d1:a7:eb:a1:32:b2:3f:97:77:fd:
                    0e:74:1c:43:d3:2f:83:47:ab:2b:65:39:00:6e:e0:
                    9b:22:a2:2c:42:65:d8:3b:4d:4f:bb:6a:a5:8d:0e:
                    fc:af:01:bb:42:38:a8:68:1a:8b:1b:b4:c7:26:7d:
                    f8:28:7f:e1:1c:92:0b:13:43:3b:6b:96:6c:56:e4:
                    2f:8c:d1:d1:aa:21:b0:0c:14:7f:ac:29:56:63:d5:
                    b4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:24:C3:64:C1:9D:D1:C5:A7:22:CA:29:5C:AB:17:51:10:62:9E
            X509v3 Authority Key Identifier:
                keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:ab:9d:84:27:9a:5e:0e:8c:b3:af:17:8a:00:71:c0:f5:
         0b:b4:2e:a1:ae:6f:cb:6c:9c:58:4e:b9:02:23:1f:f1:c5:41:
         c2:3f:b3:65:73:2b:c5:25:b8:90:52:9a:e7:a4:47:ba:20:c6:
         40:9b:df:cf:59:92:c6:ee:71:de:42:37:c9:1a:3a:74:4d:b7:
         6a:81:01:86:c0:db:5f:a2:d3:57:df:55:83:da:fa:c1:99:41:
         f2:2d:dd:d8:98:07:1d:dc:48:ab:fc:18:a8:a3:a7:12:0a:db:
         07:aa:6d:2d:e6:20:2b:17:a0:10:3c:40:f2:78:d9:88:33:8b:
         1c:8b:91:2c:56:a2:49:1a:04:4e:94:9c:fd:94:4a:d3:84:0e:
         55:f0:a4:28:58:15:94:ee:04:cb:08:dc:94:a3:10:0c:cf:d5:
         ab:92:f7:ad:a2:c7:f9:96:f1:5f:a4:3c:3c:01:fb:a4:a4:f2:
         4b:d6:9f:4f:ec:e6:d3:77:0f:21:32:e4:a0:18:0b:c3:de:3c:
         5f:e5:b0:41:7a:60:0c:26:5e:07:92:b3:29:58:3c:f5:5b:e3:
         19:1f:2e:fe:53:6e:15:1b:24:d9:fc:95:d0:10:30:d7:9e:79:
         b9:0a:8c:c4:85:08:78:84:7e:b9:89:d3:f9:da:01:78:6b:6e:
         fd:bf:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:41 2024 by rpki-client on console-fra.rpki-client.org