Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File:                     joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier:          Jtc3auu5qt8Ed7ucXS74r16OYCgLk3t1vvA/VLl+oj8=
Subject key identifier:   AF:E8:0E:E6:6A:18:C6:32:4B:8B:99:15:DF:B0:ED:49:C8:25:75:F7
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer:       /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial:       01936A467B62D33F1C33F3530910F52380DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number:          0644
Signing time:             Tue 26 Nov 2024 21:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:24 +0000
Files and hashes:         1: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: cCHTb4MJBuEwdabUBCAvYmHlK/Tw0xOylpXNIBgop6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:7b:62:d3:3f:1c:33:f3:53:09:10:f5:23:80:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
        Validity
            Not Before: Nov 26 21:00:24 2024 GMT
            Not After : Nov 27 21:00:24 2024 GMT
        Subject: CN=afe80ee66a18c6324b8b9915dfb0ed49c82575f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:95:8d:b3:7e:8c:11:d4:59:b9:39:15:84:
                    0d:fb:4d:30:e9:37:47:5e:d1:aa:53:54:f2:92:83:
                    64:43:df:ee:6a:ba:cf:37:4d:59:22:ad:41:c6:1f:
                    ff:9d:45:8b:2c:23:40:b7:25:08:63:b9:76:6c:c8:
                    a5:fc:61:6f:2d:43:96:a4:3b:c3:ae:54:d5:c3:12:
                    fb:c6:fe:43:5a:a5:f6:1e:95:2c:98:20:6b:f6:17:
                    0f:de:73:09:93:2d:64:7e:d8:70:08:9c:c1:fb:e6:
                    04:a7:da:c4:be:05:4d:46:2d:34:ea:c7:32:20:40:
                    68:39:01:45:a1:8c:09:af:ca:f5:bc:13:9e:6e:19:
                    5b:72:1f:b6:ff:69:21:e7:48:12:3e:db:9b:d8:45:
                    d1:0d:ff:ff:22:8b:6b:d4:67:85:3f:f3:3f:5c:53:
                    ed:6c:8b:3a:43:23:b5:4e:5e:43:e1:cc:7c:d8:ce:
                    d8:48:b2:ba:0b:11:dc:08:fe:df:ed:4d:31:a3:05:
                    72:3a:0b:78:09:dd:c0:68:34:23:22:bc:48:95:39:
                    c9:ca:d6:60:15:f5:94:83:e8:89:fd:db:e5:42:2a:
                    c0:07:34:93:2c:20:24:d9:c2:8b:f0:15:ba:5e:dd:
                    00:2d:39:64:bc:5c:34:63:e9:19:d0:ad:c5:05:ca:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E8:0E:E6:6A:18:C6:32:4B:8B:99:15:DF:B0:ED:49:C8:25:75:F7
            X509v3 Authority Key Identifier:
                keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:78:5d:30:fd:3b:8e:d1:02:fb:f0:d3:fe:98:4b:6e:37:34:
         01:04:1a:f3:ac:8f:56:1c:b9:17:db:28:49:25:83:9d:48:fa:
         3c:23:64:8a:a1:40:ab:b4:a8:d5:ce:57:bc:b5:d5:fb:86:f6:
         cd:61:89:8a:f2:d1:70:53:9b:77:b6:6f:88:21:b9:82:87:ee:
         aa:b0:70:f4:85:e3:ee:f7:5d:b4:1e:4d:d4:d6:28:c0:23:42:
         0e:c4:40:7e:a0:e0:72:d1:4b:f4:33:aa:2b:67:c1:10:8c:82:
         86:d0:73:95:32:71:f1:8a:af:f9:fa:66:96:81:23:f3:38:c2:
         1c:20:b8:74:2e:a5:2f:57:eb:b3:ea:e6:f5:3b:4f:c7:77:f2:
         c7:40:07:47:64:ca:2b:10:4a:45:b7:ad:2e:29:6c:92:3f:ff:
         e8:31:1f:eb:92:4f:86:b2:c0:c8:62:65:4c:24:2a:0d:32:55:
         b4:37:14:31:61:59:72:67:20:40:b7:df:5f:25:77:1d:1e:c4:
         12:56:d5:a1:e8:98:a7:c0:58:2f:e2:63:f5:fc:3b:18:db:39:
         14:7e:3c:b5:79:a7:5e:43:26:76:73:c3:94:05:6e:12:10:03:
         09:c4:4b:af:4c:3f:9a:45:e2:b9:e2:c1:bc:8e:9f:8d:db:93:
         32:95:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:04 2024 by rpki-client on console-fra.rpki-client.org