Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File:                     v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier:          LR7XcKVL9ND2x9X5Qh5frvLg1VEAsOxnkqw8aBK+i/o=
Subject key identifier:   9C:3D:01:DB:46:0A:7A:48:FC:4E:99:05:F5:E2:F5:97:86:21:40:85
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer:       /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial:       0191F93490DF1EECAE2B5C02CC25BA1390E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number:          DE
Signing time:             Mon 16 Sep 2024 05:00:57 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:57 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:57 +0000
Files and hashes:         1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: cw8msDn6C6DHx8Ku1QMIM7nuaDWeJ0dE/V2KnrWFXnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:90:df:1e:ec:ae:2b:5c:02:cc:25:ba:13:90:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
        Validity
            Not Before: Sep 16 05:00:57 2024 GMT
            Not After : Sep 17 05:00:57 2024 GMT
        Subject: CN=9c3d01db460a7a48fc4e9905f5e2f59786214085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:6d:5f:14:0f:bd:da:78:59:c2:f9:90:8d:
                    ab:c1:f2:7a:d2:d5:51:50:77:cc:14:8f:c0:97:ac:
                    89:22:a8:d9:08:8a:b3:6b:8d:a9:b4:8f:4f:44:aa:
                    76:8d:f5:63:38:97:e6:b8:5b:be:74:90:67:f2:c6:
                    81:33:30:31:73:db:a2:a9:8c:a0:20:f0:8e:c2:39:
                    fb:66:ac:39:eb:43:ce:4d:31:9d:b1:aa:63:ba:09:
                    d6:60:33:57:a2:07:c5:96:b8:61:3d:28:83:94:fc:
                    fc:bf:4b:cb:1d:1e:17:a6:79:4e:8c:e5:3b:ae:a5:
                    64:22:9e:59:20:93:ee:e0:9c:db:b5:37:31:7c:b0:
                    97:b3:63:f0:7b:81:8c:ad:cb:a0:d0:68:95:a2:c6:
                    68:1e:f1:e3:9b:14:f0:e7:e4:05:e2:78:6f:77:f5:
                    2e:09:d0:a3:63:f3:ab:c0:21:ce:0e:22:d7:53:8b:
                    bf:de:0f:52:a5:ff:cb:3d:9f:09:ff:fe:18:ff:63:
                    62:7b:37:80:40:57:ee:95:37:9a:d0:fa:67:f5:2e:
                    b0:ff:1b:31:b9:9c:65:cc:62:db:93:15:0c:29:bb:
                    ee:45:bc:65:1e:1f:0a:47:66:22:28:49:0d:c0:8e:
                    b3:f6:c0:0c:53:ae:cd:9c:63:c0:aa:45:e4:9c:29:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:01:DB:46:0A:7A:48:FC:4E:99:05:F5:E2:F5:97:86:21:40:85
            X509v3 Authority Key Identifier:
                keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ac:98:3e:7f:64:58:53:58:67:d9:94:67:a6:c5:dc:fc:d5:
         a0:73:1e:6d:6f:79:dc:03:ce:42:af:6b:11:0c:10:5e:aa:1c:
         c0:f5:42:54:79:0c:31:b3:e0:ee:59:00:57:7f:33:0c:f9:0e:
         68:15:5a:52:1a:f2:ef:01:b4:e9:1d:f9:cc:9f:3d:3f:ab:8d:
         04:13:bd:48:62:a6:a5:c5:68:57:8d:d9:83:3c:db:ce:f8:aa:
         40:50:f5:ec:00:de:95:e4:85:78:0a:1b:9e:24:05:8d:44:75:
         71:fa:b1:d8:02:05:5f:fb:b1:ff:e1:cd:1c:8d:e2:2d:75:49:
         a4:9e:b9:43:75:1f:e1:16:54:fc:d2:6c:cf:b2:6d:1f:a8:4d:
         af:c2:54:c6:94:a2:3e:bb:d3:87:1f:2d:d7:ae:c0:70:db:81:
         68:5f:a4:8e:b1:53:3e:b4:cc:9f:8d:e6:6d:be:84:8b:0a:c6:
         ec:90:1f:82:9d:bd:81:16:37:92:7b:bc:af:0f:54:d1:c5:3f:
         62:66:0d:33:f6:5a:eb:e3:ea:d4:45:da:b1:4d:2e:a1:f6:43:
         d4:82:c9:ec:18:ce:98:21:24:37:67:2f:76:09:9c:a1:49:31:
         be:73:a1:3a:93:c8:38:fd:fd:06:3d:75:0c:4a:99:92:82:20:
         58:af:e1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:14:23 2024 by rpki-client on console-fra.rpki-client.org