Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          ndEY9mpfag/vRKbOFamyZ0sBE1ubWPUvrXU6bjdb56U=
Subject key identifier:   3E:74:36:71:87:87:44:41:62:0D:0D:AF:0C:6A:27:A0:A9:A3:BF:22
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       0191FA109C582214A1A880344574500917A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          91
Signing time:             Mon 16 Sep 2024 09:01:18 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:18 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:18 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: 6PKPUKBJ4pzwQHn1i1e8dAoEyZrWoYZWwGT3aa5B0oc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:9c:58:22:14:a1:a8:80:34:45:74:50:09:17:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Sep 16 09:01:18 2024 GMT
            Not After : Sep 17 09:01:18 2024 GMT
        Subject: CN=3e74367187874441620d0daf0c6a27a0a9a3bf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:27:ac:06:6c:ce:12:c6:a0:80:6d:a7:8d:
                    0c:c3:21:c8:c2:61:13:5c:63:6b:fb:58:2a:7a:16:
                    be:c1:61:21:cd:b5:0f:e7:f8:c4:db:fe:f2:b0:a4:
                    34:89:c9:a6:97:0d:68:c0:63:44:88:5c:95:f5:31:
                    7b:06:1d:ea:d8:56:00:a4:63:f4:3e:58:46:2e:c7:
                    34:3d:38:e0:c6:d9:42:5a:8c:79:c9:20:b3:0c:43:
                    fe:60:9d:55:f2:44:4d:28:ee:b4:5c:66:87:a1:6d:
                    ad:26:0b:2b:db:64:8b:87:b1:fc:0d:7d:7e:80:e5:
                    87:9b:80:24:31:14:a0:83:ca:f7:c2:21:b5:bc:8b:
                    c9:48:02:0f:26:bd:15:d8:0c:c6:44:f4:3b:3b:e6:
                    45:ff:a7:a9:6a:fb:ce:e5:f8:e9:85:f0:65:7f:32:
                    94:2c:b3:b6:76:d0:04:ed:50:44:db:7f:cf:90:99:
                    48:c2:37:18:da:03:b4:51:5d:52:4d:42:45:9b:aa:
                    51:57:8a:8a:5d:d5:05:39:04:5b:6b:c9:8a:20:3f:
                    2a:8f:11:0c:86:43:41:16:f3:eb:5f:96:0d:74:05:
                    2d:da:53:d3:d8:c9:26:38:d3:67:92:7d:29:95:ea:
                    c8:93:40:4a:e2:f7:7f:aa:a5:1a:49:87:2f:5d:dc:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:74:36:71:87:87:44:41:62:0D:0D:AF:0C:6A:27:A0:A9:A3:BF:22
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:a7:44:4e:ed:72:6b:57:06:bb:3c:09:45:5f:53:a5:92:
         93:96:e2:05:a1:02:d0:b7:49:97:a8:b8:63:df:6c:56:b3:ba:
         79:7b:da:41:da:8b:05:f6:9f:fb:7c:bb:2d:31:24:bb:0a:24:
         68:af:06:df:57:34:aa:38:4e:be:f3:53:61:44:7f:fa:e2:c9:
         96:0c:58:1d:01:23:96:59:ea:fa:7d:16:c0:83:de:5a:d2:c5:
         f5:16:72:b1:13:b8:72:0d:05:c9:4d:0f:26:ea:d0:e8:2d:98:
         65:99:5a:0f:8e:a3:d6:04:59:ac:60:21:77:e7:cc:53:20:d7:
         b5:01:3a:59:72:3c:db:32:7a:d5:b7:f8:0f:8e:44:bb:83:5b:
         8f:3a:9e:1c:9d:15:15:0e:dd:7a:a0:68:29:d8:2a:90:55:59:
         a9:35:0c:7d:5f:53:21:44:13:73:54:30:07:53:be:76:43:f0:
         3e:1e:39:a3:0d:04:49:fc:08:93:16:0d:ee:a6:f9:f7:2f:c8:
         12:50:7d:3d:18:86:87:8b:2f:3e:88:f3:ae:79:de:57:a2:e1:
         df:d2:40:ab:9b:99:e6:8e:86:58:7b:53:5d:b8:45:a7:eb:e2:
         f5:68:87:69:ae:dc:03:98:6d:14:96:db:1c:72:7b:69:2d:bb:
         0b:85:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:12:30 2024 by rpki-client on console-fra.rpki-client.org