Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File:                     UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier:          5odUtcpSCAVzngdpL9Yah7Lys6/Ywbel8A8wOV0kWco=
Subject key identifier:   59:0F:2E:EC:A8:D5:21:49:6B:6D:76:95:72:14:68:34:BB:8A:DB:2E
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer:       /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial:       019357D299EEA85D57023AE6648048427DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number:          10C4
Signing time:             Sat 23 Nov 2024 07:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:39 +0000
Files and hashes:         1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: jYmW9g/KgYYach0aeb9VkRgqMO6rbbuSyAVy4fTEwcU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:99:ee:a8:5d:57:02:3a:e6:64:80:48:42:7d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
        Validity
            Not Before: Nov 23 07:00:39 2024 GMT
            Not After : Nov 24 07:00:39 2024 GMT
        Subject: CN=590f2eeca8d521496b6d769572146834bb8adb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:e9:bf:7d:2b:b0:17:ec:32:ca:c1:05:2f:
                    88:c7:9e:f1:17:fa:81:08:19:92:31:38:a2:5a:82:
                    9b:1c:7a:13:a8:3b:20:71:fc:12:a8:18:a1:dd:32:
                    18:ed:1f:d6:36:36:11:e7:2a:90:14:a9:e0:fe:1f:
                    b3:45:7f:2c:35:7c:42:34:c4:43:0e:81:d6:60:03:
                    f6:d4:36:76:67:43:77:19:a1:ed:ae:e7:60:b5:4c:
                    be:eb:e5:88:ed:ad:48:45:2e:12:28:6d:00:e0:30:
                    d3:9a:ce:c7:7a:81:2d:df:55:8e:4a:ec:1c:e6:2c:
                    54:3c:55:af:0b:69:a1:b8:d8:ee:fa:b5:a9:26:96:
                    db:b8:12:c3:49:fe:70:94:a8:fd:10:4b:fe:25:60:
                    a0:37:00:cc:c1:fd:d2:95:0d:66:e8:6f:4b:32:ab:
                    6c:44:8d:3a:9a:11:d8:ec:c4:f3:05:65:0f:a9:78:
                    9b:f5:ee:4b:47:25:4b:e8:5b:05:26:c4:62:da:9f:
                    1f:27:23:7c:10:fc:3f:65:79:f2:4c:4e:d0:57:1b:
                    ff:15:74:ee:e7:9f:d6:3e:22:c8:50:21:1c:30:d3:
                    cc:07:4d:ea:32:e0:cf:79:86:a5:a6:73:61:95:6a:
                    61:fd:9d:eb:71:3f:ca:d3:47:fa:0b:77:25:4d:66:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0F:2E:EC:A8:D5:21:49:6B:6D:76:95:72:14:68:34:BB:8A:DB:2E
            X509v3 Authority Key Identifier:
                keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:72:b8:31:07:fc:7e:4d:fb:ee:59:1c:3c:b4:ef:e2:08:
         68:5d:05:83:98:cb:58:72:0d:ca:de:67:40:0c:cd:32:53:22:
         cf:39:df:31:f3:6d:3b:24:8c:71:bc:94:1a:2b:db:52:6b:01:
         dd:bc:8c:09:35:f6:6a:c2:cb:2b:72:f6:76:0c:5b:0b:cc:3d:
         33:fb:d2:7d:7f:67:af:30:c3:4f:70:74:c5:3c:7f:ac:02:38:
         de:e7:19:0c:1c:7c:b4:08:49:b9:17:21:5a:31:d2:a1:bb:69:
         00:f2:af:11:b1:0d:71:c2:4f:15:32:6f:11:b7:c9:29:03:65:
         7a:7b:09:d8:90:95:6f:58:14:0d:37:2f:fb:ed:85:b6:de:bf:
         5c:0a:93:2b:cf:6c:aa:05:17:e6:74:ce:3c:74:2b:f3:e5:30:
         43:71:9d:d6:2e:b6:5c:fc:2e:3f:07:de:d2:a4:80:51:1c:1c:
         9c:9b:59:dd:6e:86:47:98:42:ba:60:18:c8:12:e0:55:f8:08:
         ff:b5:f9:72:78:ce:7a:3c:da:b7:44:b6:9b:da:d9:4a:f5:ea:
         0e:70:25:38:db:f6:47:d3:c5:7f:b8:3e:74:4c:68:b5:c2:99:
         28:bb:55:8d:d4:a0:e8:4a:da:ed:da:98:63:df:61:92:8f:d8:
         ca:b3:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:43 2024 by rpki-client on console-fra.rpki-client.org