Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
File:                     1-Wa0UKbR3EL4Td28NLTovztI2E0.mft (raw, json)
Hash identifier:          pG/YcY43Pyv8TvvJ4sBhBkDZYrja6+g76WMcNW01v44=
Subject key identifier:   18:BD:B9:10:B5:E5:79:5E:EF:13:85:41:8F:C1:39:13:64:AF:A7:62
Authority key identifier: F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D
Certificate issuer:       /CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
Certificate serial:       019356F6E0431E231220CCE1937A4D2E64C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
Manifest number:          0125
Signing time:             Sat 23 Nov 2024 03:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:39 +0000
Files and hashes:         1: 1-Wa0UKbR3EL4Td28NLTovztI2E0.crl (hash: 2MtkG9oKD+SRlWAK7tCd6r1iAXj0BPKBPNiWseqVOhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:e0:43:1e:23:12:20:cc:e1:93:7a:4d:2e:64:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f966b450a6d1dc42f84dddbc34b4e8bf3b48d84d
        Validity
            Not Before: Nov 23 03:00:39 2024 GMT
            Not After : Nov 24 03:00:39 2024 GMT
        Subject: CN=18bdb910b5e5795eef1385418fc1391364afa762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:76:4e:c5:3f:c7:c5:b0:c0:c6:0d:20:af:
                    c3:1d:da:d9:8c:5d:b3:99:6c:77:f9:8f:c0:2d:c6:
                    8c:e1:e2:56:bd:73:c8:d4:1e:41:d1:ca:f2:d3:e3:
                    df:92:74:ee:30:a9:8f:e2:c4:8d:69:49:d2:c0:d6:
                    7b:b1:18:9e:4d:40:f9:e6:f4:14:47:dd:d1:ef:62:
                    71:06:3b:cf:c1:3a:fe:61:29:f7:b3:02:91:18:b6:
                    c3:31:b1:c3:54:62:c3:83:b3:70:cb:29:00:ed:6c:
                    97:b4:24:ba:82:3c:58:7f:23:33:af:3f:f7:76:23:
                    51:ee:cf:01:85:ad:a4:ad:82:7a:5c:e0:28:fb:8a:
                    4c:31:15:1f:94:f0:6f:20:39:2c:91:ae:78:2c:b3:
                    c1:71:23:8e:5d:26:94:14:2f:19:36:3a:eb:f5:c8:
                    25:64:3f:31:a0:c1:29:dd:36:6d:15:73:93:0d:d4:
                    0d:40:24:57:f0:a9:51:59:7f:2a:02:5c:6a:75:10:
                    dd:d9:1c:cd:6e:eb:f0:42:52:93:ca:b1:bb:7b:b2:
                    07:82:ae:fd:6d:e1:32:06:19:23:dd:ea:d8:bd:4c:
                    e4:e5:00:c1:5e:9c:f4:7d:70:a0:8e:ab:70:d5:4d:
                    3d:dd:7e:14:5a:60:46:e9:12:74:aa:ba:62:6a:cf:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BD:B9:10:B5:E5:79:5E:EF:13:85:41:8F:C1:39:13:64:AF:A7:62
            X509v3 Authority Key Identifier:
                keyid:F9:66:B4:50:A6:D1:DC:42:F8:4D:DD:BC:34:B4:E8:BF:3B:48:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Wa0UKbR3EL4Td28NLTovztI2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/e45fc1-68e1-48b3-ad78-691c01c269d6/1/1-Wa0UKbR3EL4Td28NLTovztI2E0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:75:5a:2d:ea:80:ca:70:66:63:1e:05:f6:ac:b1:c8:77:13:
         33:29:7d:65:57:9a:4f:aa:a8:8b:20:fa:7d:8b:5a:36:df:0a:
         80:09:22:a4:0c:f9:3e:47:45:79:79:3d:39:64:f7:87:09:63:
         00:6f:41:ee:59:25:26:f7:57:cc:cc:33:57:43:c8:4e:f1:6a:
         0c:a3:7a:b5:4e:c3:41:53:d5:f4:bd:ab:d3:ce:64:15:7c:c5:
         13:eb:a9:53:f1:c0:fb:98:8b:b5:28:da:b4:57:6c:f3:c5:82:
         83:95:b2:cc:fe:1e:e4:8d:9d:cb:12:35:7e:73:b1:06:79:5b:
         38:5e:cc:53:ba:db:02:2e:42:ed:68:a1:69:31:97:8c:6f:da:
         ea:a2:f9:ce:aa:fc:30:5c:73:50:3c:92:66:7a:81:15:0c:ea:
         90:53:ca:2b:7d:ed:be:bd:80:6b:4b:4a:fd:8a:e6:e1:a9:bd:
         08:23:f7:7a:d1:b8:1f:79:87:f4:30:fc:48:c8:e8:40:24:9b:
         9a:fe:e9:81:97:3b:a4:5d:27:c1:22:28:43:e9:d7:e8:4e:8d:
         ef:10:85:f0:05:57:98:5f:f1:6c:9d:d8:f1:8c:20:29:6b:1f:
         df:15:fa:91:3f:35:e2:ad:8c:f0:b1:a1:6b:54:c4:ab:04:a9:
         77:1e:5b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:16 2024 by rpki-client on console-fra.rpki-client.org