Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File:                     9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier:          cYm77mIszOGz7W/TO90PAsnrhdCdjhWYCBsd3fhKnd4=
Subject key identifier:   2E:E3:31:7D:1C:EF:B1:02:A8:9E:3E:6E:6A:6A:A0:6A:9D:9D:88:A9
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer:       /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial:       019357D2C9859461DAF2B3D8E3544EBE02F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 07:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:52 +0000
Files and hashes:         1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: tEODrG+DGIKjbVbzPeBr0FJ16C+2T8JRd65Hz9pJkXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:c9:85:94:61:da:f2:b3:d8:e3:54:4e:be:02:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
        Validity
            Not Before: Nov 23 07:00:52 2024 GMT
            Not After : Nov 24 07:00:52 2024 GMT
        Subject: CN=2ee3317d1cefb102a89e3e6e6a6aa06a9d9d88a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:b1:da:9a:f4:a0:1f:9b:74:92:1c:7d:52:
                    c8:dc:4b:79:c8:c3:09:7f:a8:b6:ee:9a:15:c4:32:
                    fb:cb:d0:3b:9f:f1:75:ee:eb:d5:c6:35:87:39:8c:
                    0a:1a:c4:f2:83:ff:bc:ac:1f:f6:6e:3f:1a:d0:53:
                    7c:96:74:61:7d:5b:36:f1:4e:0e:ec:02:11:60:cf:
                    47:7a:c2:b3:23:e5:e4:8d:45:8b:db:e8:f0:1d:b0:
                    4b:14:00:d5:62:6d:a6:04:56:ff:c0:98:84:ba:f0:
                    a0:68:3b:54:5d:1c:de:36:16:91:fe:73:68:67:60:
                    38:f5:30:bc:17:9d:8d:33:25:24:1e:6c:ec:26:a2:
                    e7:d7:cb:38:50:ce:9b:87:82:24:44:cb:93:d7:0c:
                    77:70:51:86:78:d7:c4:03:61:df:91:47:83:b5:6d:
                    f3:cf:64:24:db:86:f5:ab:64:ee:04:e3:9a:0f:84:
                    31:59:98:1f:df:ff:e1:a8:06:84:bf:6e:0d:f2:9b:
                    49:c8:d2:6a:bc:96:25:3e:4c:5a:85:2b:e0:ff:89:
                    56:f5:3e:4f:3b:53:bf:d1:83:a1:32:e8:d3:cf:a8:
                    1d:83:d9:ca:19:1e:7e:90:68:a9:cb:21:a9:74:36:
                    05:79:7b:32:ad:d2:53:05:99:b1:fe:6c:eb:80:8f:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:31:7D:1C:EF:B1:02:A8:9E:3E:6E:6A:6A:A0:6A:9D:9D:88:A9
            X509v3 Authority Key Identifier:
                keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c5:c8:a4:52:68:9b:52:dc:48:94:eb:27:b6:28:6f:ea:fd:
         32:df:82:9a:be:9b:82:4d:a6:3f:42:8a:51:71:a4:a2:59:22:
         04:87:c2:ef:63:b4:ba:d8:c2:7d:04:10:1f:a5:0a:6b:8e:49:
         a7:69:25:cb:0e:6e:42:e9:87:f6:d6:74:ad:64:50:3b:1f:8a:
         80:2c:91:10:ac:56:ac:26:64:ff:97:a9:03:55:35:12:9c:a5:
         ee:d6:0d:55:07:3a:37:c2:e2:88:3c:09:7c:de:1d:8e:9e:99:
         ae:e9:8a:ae:c1:95:63:97:fe:47:ee:59:3c:62:cf:5f:81:8e:
         96:d3:14:4e:cf:62:a6:20:0b:8e:58:06:27:20:e7:d3:50:ac:
         69:c7:53:c0:4c:0e:c3:bd:a9:b5:59:3c:c4:f0:86:ad:72:80:
         c0:3f:aa:6e:ae:08:f6:d4:73:16:ac:49:ca:c0:3a:26:4d:96:
         0a:91:25:3f:81:0b:ad:47:8d:30:c6:b2:4d:8b:17:31:f2:53:
         83:7f:2b:d5:00:41:25:0a:0d:98:30:9e:f7:42:5b:12:82:4e:
         d9:ea:94:ba:41:85:a3:85:ff:4e:aa:08:d3:42:0b:1e:72:1c:
         81:cf:93:82:87:d3:9f:f8:ed:ce:1d:f6:17:51:9f:fc:5d:9d:
         8b:cc:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:44 2024 by rpki-client on console-fra.rpki-client.org