Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
File:                     eJMzeVlLis4GnZO_CICksp7ShnM.mft (raw, json)
Hash identifier:          CL56oxdxiLj1rrifcTdx0UR0SCk4G2F76cj9McTsQ6A=
Subject key identifier:   34:E9:09:C0:83:1A:73:24:9D:87:EC:8A:7D:5B:E3:56:61:61:09:7E
Authority key identifier: 78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73
Certificate issuer:       /CN=78933379594b8ace069d93bf0880a4b29ed28673
Certificate serial:       019369A19A3A12B40269A153405D8DBFB0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
Manifest number:          5D
Signing time:             Tue 26 Nov 2024 18:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:18 +0000
Files and hashes:         1: eJMzeVlLis4GnZO_CICksp7ShnM.crl (hash: nzaG1dg16wLil8LnKL5WstiODdX+a+dbwcJaMz3VeK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:9a:3a:12:b4:02:69:a1:53:40:5d:8d:bf:b0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78933379594b8ace069d93bf0880a4b29ed28673
        Validity
            Not Before: Nov 26 18:00:18 2024 GMT
            Not After : Nov 27 18:00:18 2024 GMT
        Subject: CN=34e909c0831a73249d87ec8a7d5be3566161097e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:95:5e:dd:03:c9:6d:1a:8e:31:6f:f5:fb:
                    40:2a:89:34:a6:42:7b:df:e6:5b:de:38:57:b3:2e:
                    b5:b9:66:6d:41:2e:d4:36:19:46:56:41:6c:55:28:
                    1f:30:c6:e6:ff:39:62:58:ab:bb:48:6b:a4:cc:02:
                    ca:0a:3f:01:70:fd:27:94:b2:fc:2a:d1:c4:66:e1:
                    59:6c:28:71:98:83:ce:41:d9:f9:df:34:73:e9:20:
                    32:dd:ea:59:93:aa:b8:cf:77:37:a9:71:f8:ed:37:
                    ac:dd:d1:50:3a:0e:e6:5d:6b:66:3f:94:25:66:9a:
                    35:d7:14:61:f8:38:07:84:6d:c5:d9:a8:c0:37:4e:
                    8b:4d:ef:59:6c:05:4e:6c:e4:70:32:42:f8:36:e1:
                    33:16:b4:dc:da:e6:95:b9:ac:c4:75:6f:a5:ab:38:
                    79:0e:94:1f:d5:5d:d2:93:e2:e4:c9:f1:d2:04:6d:
                    a9:a3:7c:c8:ab:df:74:b2:db:f4:b4:ff:1a:85:9e:
                    cc:20:99:59:dc:93:03:9a:9d:98:0d:6d:37:61:5a:
                    8d:5c:23:fc:3f:c5:ef:45:76:db:54:b3:b3:07:70:
                    10:af:8b:70:1c:97:c1:65:7c:02:83:81:e5:d1:73:
                    68:e7:ee:4f:bd:ef:d0:eb:91:3b:a9:32:98:8f:5e:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:09:C0:83:1A:73:24:9D:87:EC:8A:7D:5B:E3:56:61:61:09:7E
            X509v3 Authority Key Identifier:
                keyid:78:93:33:79:59:4B:8A:CE:06:9D:93:BF:08:80:A4:B2:9E:D2:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJMzeVlLis4GnZO_CICksp7ShnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/565b9b-dbe9-45f4-8fb0-274bda3616cb/1/eJMzeVlLis4GnZO_CICksp7ShnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:2c:d1:30:f1:ff:50:da:3e:ae:62:72:a7:37:24:33:53:
         05:f7:82:68:7e:0c:bf:67:fd:ba:58:1f:11:9c:e8:0e:66:ad:
         12:45:c8:f4:77:db:8d:d5:79:fc:e8:e3:a2:51:b9:67:38:c0:
         5f:27:aa:fc:61:6f:05:07:2f:a8:75:44:ee:f2:99:9f:53:37:
         6b:d5:4b:06:6e:46:85:43:07:76:ad:1c:06:7e:22:e3:dd:f2:
         b2:f3:eb:eb:96:7a:5a:7f:28:f6:db:2d:3f:45:64:32:5b:c3:
         92:1e:7c:d4:f1:2a:b4:d0:fc:b5:04:4c:5d:e8:f7:60:9b:0f:
         02:5c:9c:44:8a:2a:87:c2:dc:ed:76:0e:b7:14:56:62:c1:00:
         b5:f9:cb:1b:42:df:fd:a9:73:a7:90:5d:ef:e5:98:d2:61:d1:
         17:ce:81:3c:67:1b:e1:62:22:c0:72:5f:c5:bc:4a:53:f7:bf:
         14:a4:f4:ab:94:a4:b8:19:1a:6f:e6:1e:b1:30:bc:18:dc:18:
         bf:09:23:a5:30:98:4f:51:fb:b2:f6:46:a6:d2:27:c7:2c:74:
         71:9d:64:13:87:f1:48:45:8a:50:a4:4a:05:51:71:2c:37:b1:
         41:4d:fe:2a:d0:14:ab:c0:5d:38:ae:a0:e0:8f:ff:45:59:63:
         86:b8:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:17 2024 by rpki-client on console-ams.rpki-client.org