Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
File:                     mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json)
Hash identifier:          ib0SLZfjUWhijqonofIWaCdh8s9yeY7Qjk+M735ZCWQ=
Subject key identifier:   EB:83:8F:B8:7B:60:E2:BA:B0:43:9D:20:0C:AC:20:01:58:84:4F:BB
Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
Certificate issuer:       /CN=98d2d8720a7835bdab53b45313381abb176d5dff
Certificate serial:       01936B228AF3598F5EDB5487EAB7744C4206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
Manifest number:          02A0
Signing time:             Wed 27 Nov 2024 01:00:46 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:46 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:46 +0000
Files and hashes:         1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: tcFcfyHl8HguTHmMS7xmd6vkdaTr3yw43Gi2QC9ZlzU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:8a:f3:59:8f:5e:db:54:87:ea:b7:74:4c:42:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff
        Validity
            Not Before: Nov 27 01:00:46 2024 GMT
            Not After : Nov 28 01:00:46 2024 GMT
        Subject: CN=eb838fb87b60e2bab0439d200cac200158844fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:e2:a5:58:62:05:38:77:af:f0:98:e6:7b:
                    7b:23:f1:d8:2f:07:86:23:b8:f5:bd:88:b0:5b:d5:
                    b7:18:12:64:0c:37:b3:20:b4:01:1f:42:e5:e8:39:
                    0f:06:b7:08:ac:08:a0:c9:f8:86:03:81:ba:f9:68:
                    e5:c3:65:b7:f9:f1:20:45:6a:17:01:22:1e:02:d3:
                    ab:6b:e9:51:62:e5:04:72:73:db:30:c9:d4:b9:d0:
                    12:1c:7f:ae:51:3a:fe:ec:d3:55:17:d9:80:6b:53:
                    f7:87:4b:57:df:dc:6b:ca:61:21:bb:8a:3e:8f:d6:
                    d8:23:83:ba:21:54:b2:af:7d:1a:64:cb:5f:aa:fb:
                    f3:b1:34:00:3b:79:98:0d:02:db:54:98:cd:56:01:
                    dc:14:e9:80:81:70:e1:c0:d9:d6:c8:a9:54:41:11:
                    de:55:30:e5:08:80:e2:fe:be:f6:28:d0:4f:9d:ea:
                    b8:8c:89:9d:a9:45:c1:cb:24:f1:46:dc:71:b6:9a:
                    90:0d:d9:19:29:a1:98:c6:fe:58:50:02:6f:22:fa:
                    8e:00:aa:8c:aa:e7:d5:b9:e5:05:ba:ff:d4:41:fc:
                    68:a0:a4:3f:1e:11:41:1f:fa:19:93:ca:55:f1:dd:
                    2d:81:8f:72:ad:74:04:f5:38:0c:4e:a7:9f:d1:fb:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:83:8F:B8:7B:60:E2:BA:B0:43:9D:20:0C:AC:20:01:58:84:4F:BB
            X509v3 Authority Key Identifier:
                keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:a4:22:7d:16:65:87:1b:94:63:f5:d4:b9:b0:ff:9e:42:
         30:cc:d7:1b:d0:c4:53:a8:8f:f5:31:09:39:1e:cc:1a:31:57:
         71:dd:db:04:50:b7:6f:a4:2b:7e:7a:f8:be:7f:c9:95:99:c2:
         47:d9:26:b2:74:3c:8b:05:4c:e7:52:60:43:30:a8:cc:7b:34:
         c9:5f:66:86:09:29:0d:b9:5c:e7:8a:c2:34:85:97:69:e0:56:
         27:7a:f8:b7:05:82:4e:79:a0:26:a6:99:b0:4b:04:fb:d4:fc:
         cd:3e:90:cb:0c:c9:8c:54:b8:04:cc:76:83:e0:7e:f2:4c:e1:
         35:08:dc:65:cb:5d:26:82:54:57:49:77:65:36:f8:d1:41:9f:
         62:8d:f0:de:1f:c9:0d:fe:dc:46:4d:51:7f:70:c3:4b:d5:56:
         05:5b:de:f3:94:23:6e:17:53:d6:03:66:02:fe:9a:a3:e7:cc:
         7e:ae:bd:2f:60:15:dc:64:6d:fb:89:27:27:3c:4e:62:c8:54:
         d2:69:8c:df:98:a3:11:5c:e8:ea:00:dc:db:38:80:3b:be:10:
         b0:e6:4a:25:9b:d6:7d:77:0c:5e:93:3d:73:72:87:d1:2c:ea:
         73:f1:bd:45:91:4a:56:c5:ef:6e:2f:34:3e:78:da:c3:e4:dc:
         63:65:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:02 2024 by rpki-client on console-fra.rpki-client.org