Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File:                     CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier:          3WFexFrNh0+92tBlnYTgCUAH7bjSeryKYTexfPBfClE=
Subject key identifier:   BE:64:D6:E7:BE:9F:B2:F3:84:49:49:B9:6C:A6:39:23:0B:84:3C:88
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer:       /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial:       01936BC7F5E172FE1A56C379F3FB8FBFDA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number:          1378
Signing time:             Wed 27 Nov 2024 04:01:26 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:26 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:26 +0000
Files and hashes:         1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: rBu8NoZsdZt+mrKru2m3mR9h3KQFLjW/4M6G2F3HV/g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c7:f5:e1:72:fe:1a:56:c3:79:f3:fb:8f:bf:da:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
        Validity
            Not Before: Nov 27 04:01:26 2024 GMT
            Not After : Nov 28 04:01:26 2024 GMT
        Subject: CN=be64d6e7be9fb2f3844949b96ca639230b843c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:36:60:c6:c4:f1:58:f5:3a:07:e5:c3:4a:
                    08:55:3d:c3:47:34:28:ea:a0:98:30:35:e0:a3:8a:
                    79:96:d6:ee:b4:dd:27:e5:7a:67:f0:e6:fe:5a:a9:
                    59:fc:03:cf:97:f1:17:6a:dd:a5:cb:02:79:75:8f:
                    f0:0c:44:a2:56:63:92:c4:31:c7:67:cb:6b:1c:7f:
                    30:30:9f:c6:05:49:26:f0:0e:5a:e6:7e:f9:57:ff:
                    00:07:27:f6:26:59:c7:2f:52:5b:ad:28:46:26:2b:
                    ed:25:7f:b2:f7:e9:b9:00:9c:ca:a2:6e:79:42:59:
                    cf:ca:aa:bd:c7:3b:37:05:e4:94:30:26:95:65:ec:
                    a5:9c:07:6b:92:7f:57:25:37:2c:6d:07:0a:f0:dd:
                    b3:0c:a7:3a:d7:2c:d3:dd:4f:ff:05:5d:c1:4c:f2:
                    91:56:17:51:b6:ff:00:d7:37:5a:0d:73:40:0f:68:
                    b0:e7:fa:3a:81:4e:7c:ee:93:c2:59:cd:d1:45:b9:
                    1a:95:02:db:3a:e6:29:0b:e1:ab:bd:90:da:3a:c1:
                    19:63:d6:e0:bd:c7:e9:a9:ba:b8:5e:91:c3:00:98:
                    b2:4e:3d:77:60:96:9c:1a:c8:bc:5a:e5:5d:24:6a:
                    c8:19:21:b2:62:c0:c0:82:04:70:50:7c:ac:90:d2:
                    cd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:D6:E7:BE:9F:B2:F3:84:49:49:B9:6C:A6:39:23:0B:84:3C:88
            X509v3 Authority Key Identifier:
                keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:63:fe:fb:0f:8f:20:98:78:9b:a7:b0:2f:5a:2e:c7:15:98:
         7c:07:4a:24:56:a9:7d:de:2e:c3:cc:91:54:7f:6b:b9:76:8f:
         0e:42:bc:1c:4d:0a:45:30:ed:f6:f8:f9:07:a7:40:6f:ed:fb:
         75:e9:f0:1a:32:97:96:09:db:55:39:a6:d7:ce:90:7a:f2:49:
         0a:69:1f:1f:61:a7:ce:bb:d0:e9:43:5e:e3:2a:d0:f2:62:b7:
         6d:36:96:a8:b6:35:32:3f:b9:4c:6c:60:80:ed:99:97:ef:0c:
         97:b2:f3:bf:ee:bf:33:41:e5:fe:98:36:49:bc:c0:2d:30:4e:
         77:1d:69:1a:2a:46:a9:a9:91:72:79:4f:d1:32:dd:3d:29:44:
         c7:48:78:5e:99:39:0e:2f:0f:00:04:cf:88:a7:ef:99:86:36:
         0f:44:c2:99:d2:ed:86:d5:12:98:fe:7e:67:62:08:43:56:66:
         41:cd:cb:a9:60:5f:a6:95:39:19:11:6f:35:a8:d1:c2:76:cc:
         98:49:86:be:bc:8d:43:bb:d6:e2:8f:e4:4d:c2:e7:a4:1d:22:
         fa:2a:88:e8:64:df:88:29:01:fd:c9:e6:25:a4:32:5a:fe:52:
         3b:3b:74:87:79:5c:89:d9:74:7d:fc:e6:5f:2d:1e:a2:7f:3b:
         8e:5a:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:35 2024 by rpki-client on console-fra.rpki-client.org