Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a1e887-22d6-4119-ba0c-c179b79ceba1/1/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.mft
File:                     5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.mft (raw, json)
Hash identifier:          +dJRMOWUskpLw+wHS3l0euEBJV4ve+yaE2dlNmKsib0=
Subject key identifier:   E9:EC:3E:9A:93:43:B5:50:3D:39:12:1E:74:F2:63:4F:C1:BD:FA:99
Authority key identifier: E6:B7:CE:56:03:1C:52:AF:2B:72:CF:6B:E8:CC:2A:E4:94:3F:A2:12
Certificate issuer:       /CN=e6b7ce56031c52af2b72cf6be8cc2ae4943fa212
Certificate serial:       019357D291A3CD98E51C6104FA4A82ABBDE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a1e887-22d6-4119-ba0c-c179b79ceba1/1/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.mft
Manifest number:          043B
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: 5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.crl (hash: swoZxqIZxAnh6J4QMIA9i6Z3YpoAQTtxShIZTSYo7Yo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a1e887-22d6-4119-ba0c-c179b79ceba1/1/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a1e887-22d6-4119-ba0c-c179b79ceba1/1/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:91:a3:cd:98:e5:1c:61:04:fa:4a:82:ab:bd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b7ce56031c52af2b72cf6be8cc2ae4943fa212
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=e9ec3e9a9343b5503d39121e74f2634fc1bdfa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:3b:b0:4e:11:10:5d:d4:e7:86:bd:08:71:
                    d6:8f:b7:af:0a:d7:e3:7b:5b:5c:47:cd:d9:75:50:
                    e5:73:93:19:e4:33:61:51:ee:12:a5:5d:64:57:3e:
                    79:75:9d:c5:62:d1:ce:1e:f1:52:40:fc:7b:41:e9:
                    6f:b2:74:3a:8b:5a:58:aa:90:34:4c:2f:1a:4b:07:
                    6b:23:ea:0d:ce:72:e9:91:c3:18:c8:86:86:96:c3:
                    e4:bb:49:24:89:77:57:96:19:b0:07:f1:6e:09:6e:
                    02:05:0d:72:72:2f:15:6b:ab:d0:d4:5c:e5:5e:42:
                    3e:81:59:de:b1:b9:ea:f2:63:a1:21:fb:e7:c5:fc:
                    aa:04:9a:59:38:84:2b:8d:9c:3b:71:ef:2a:0d:ad:
                    7e:e4:74:63:d0:7f:ec:e6:d9:8e:59:65:26:56:16:
                    5a:c9:83:e7:5b:2b:e0:44:e6:3d:7b:bb:e1:87:20:
                    c7:65:be:5a:19:c7:16:31:fb:b2:fe:a3:e2:1d:64:
                    e4:5c:63:5d:e1:13:44:b9:d2:7a:65:c2:72:ce:6a:
                    a9:0d:2f:d9:3a:2b:f9:a3:4d:96:e6:f1:1c:72:e9:
                    8a:41:0c:2a:b3:5d:ab:e6:f5:5c:e9:63:8f:2a:67:
                    76:c1:c0:3d:7e:d2:c9:a0:05:c8:1f:9b:fc:32:7b:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EC:3E:9A:93:43:B5:50:3D:39:12:1E:74:F2:63:4F:C1:BD:FA:99
            X509v3 Authority Key Identifier:
                keyid:E6:B7:CE:56:03:1C:52:AF:2B:72:CF:6B:E8:CC:2A:E4:94:3F:A2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a1e887-22d6-4119-ba0c-c179b79ceba1/1/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a1e887-22d6-4119-ba0c-c179b79ceba1/1/5rfOVgMcUq8rcs9r6Mwq5JQ_ohI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:77:87:a0:77:6a:d9:7f:58:f2:9b:d1:e3:71:a0:31:84:0f:
         84:03:c0:9b:a3:dc:88:cc:7c:12:d7:96:e5:53:e0:78:52:81:
         04:ef:a0:5e:8a:5b:11:89:5a:e2:5c:f4:01:37:97:28:dd:51:
         a5:9e:3a:3d:e4:30:3d:f0:e8:52:be:7d:36:1c:59:4e:fe:73:
         8d:95:41:dd:3e:f3:30:c1:0e:94:03:92:e3:de:bf:91:12:28:
         1f:be:5e:36:dd:7e:ea:aa:54:04:27:fc:e5:30:62:5d:83:3b:
         f9:95:f6:c6:9e:07:ef:da:96:f1:d7:6f:28:35:78:e2:65:fd:
         d8:6f:ad:5b:14:ae:8e:af:e0:2b:e5:e1:da:24:00:21:6a:55:
         95:f4:c4:ad:48:82:2b:1c:7e:b2:89:26:bb:14:8b:47:77:ba:
         5c:5b:bf:b0:a1:9d:54:12:02:44:6e:9b:bd:3a:7e:85:cf:22:
         e3:a5:b4:59:39:86:e3:b6:23:5e:5f:8d:46:9c:ff:82:5d:2a:
         aa:d5:a0:c1:f2:03:fb:09:79:d4:de:24:f8:fb:55:92:bb:60:
         b2:2e:95:8d:06:c2:0b:2a:3b:40:17:71:a2:59:d9:eb:0e:96:
         b6:b8:c7:ec:31:7b:e9:23:3b:30:ea:4b:0e:cc:37:4a:e9:3c:
         ac:14:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:15 2024 by rpki-client on console-fra.rpki-client.org