Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
File:                     Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft (raw, json)
Hash identifier:          ZX+vjmIu2s63gkv839dk0nCyYeMK4aUxmGuMO/z+J50=
Subject key identifier:   8E:9A:9F:37:A7:9C:AB:2F:C2:0A:81:5E:58:0C:78:F6:14:0A:0D:34
Authority key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Certificate issuer:       /CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Certificate serial:       019406481817B57E2FB7D9DA22096842ED14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
Manifest number:          049F
Signing time:             Fri 27 Dec 2024 04:02:55 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:55 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:55 +0000
Files and hashes:         1: Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl (hash: Oh2RyRh8XhZhz3C1TPHTd3P0Vdu2+D5ZFS1QcUNuRd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:18:17:b5:7e:2f:b7:d9:da:22:09:68:42:ed:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
        Validity
            Not Before: Dec 27 04:02:55 2024 GMT
            Not After : Dec 28 04:02:55 2024 GMT
        Subject: CN=8e9a9f37a79cab2fc20a815e580c78f6140a0d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:06:ae:74:51:9b:98:a6:31:2f:37:bd:cb:
                    56:b4:8c:46:a6:cd:49:94:15:6d:b9:72:11:25:7a:
                    13:57:93:a5:cb:0b:c8:c3:5a:f0:f3:6a:28:3b:75:
                    b3:78:7c:75:0f:83:8a:d9:ca:1c:34:15:c7:57:a6:
                    78:0d:10:f7:0f:77:4e:88:29:86:24:82:58:91:67:
                    3a:ab:00:6b:46:04:98:53:c6:0d:99:e3:fb:a0:00:
                    fa:cb:c7:05:a2:c5:48:a6:d5:bf:5b:19:25:26:29:
                    75:be:02:7f:9e:e0:24:a8:fb:ed:d9:d0:63:c3:92:
                    99:2d:9a:75:88:96:29:ef:91:da:da:e1:18:34:2b:
                    82:02:08:d6:ad:dc:13:85:2b:c3:59:c7:a9:d7:69:
                    64:fb:33:c8:67:1b:6f:a3:d6:3c:eb:74:fc:e6:e0:
                    64:b1:56:da:91:11:fd:f8:4f:d6:18:80:5c:4e:9c:
                    1e:8b:6e:ec:36:33:15:18:8a:74:4e:e3:4e:c9:29:
                    56:9d:cc:72:76:b3:ec:c5:59:a5:d4:ce:76:01:bd:
                    fc:58:f0:fe:2e:ed:00:2f:d1:17:60:66:44:16:68:
                    8f:05:7f:f7:a7:22:ba:1c:ef:c5:8c:86:9f:5e:32:
                    c1:a6:a6:42:46:ad:82:7b:e9:52:94:ac:0e:22:5e:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:9F:37:A7:9C:AB:2F:C2:0A:81:5E:58:0C:78:F6:14:0A:0D:34
            X509v3 Authority Key Identifier:
                keyid:0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:81:9b:48:ad:4d:9a:4e:73:56:24:00:ec:f9:40:4a:5a:
         b8:5d:5a:72:aa:c7:cd:f5:3d:a7:cc:8e:fd:2c:37:dc:da:da:
         07:f9:2b:15:1e:54:40:4a:31:d1:01:8c:95:58:53:88:78:69:
         c2:d1:f6:45:28:51:41:c0:1f:12:5a:4f:96:d5:db:50:1a:aa:
         05:99:26:0c:c3:ea:63:67:96:ee:57:fc:7f:28:2c:e4:a7:bd:
         45:b3:ff:54:23:b0:2e:a7:b3:2d:2a:1d:9b:ab:71:83:51:94:
         53:8a:4e:e8:90:d3:60:ca:e3:e8:c5:a5:1a:2d:6f:83:68:f9:
         01:9e:c3:9c:35:79:6e:cf:40:8d:ef:4c:72:7e:71:16:a0:65:
         cb:29:ea:e6:b7:27:23:04:0f:97:a5:0c:95:19:e5:2c:f7:e7:
         f8:cc:a5:b3:d5:89:8a:c3:9e:03:2e:ee:59:d8:f6:58:9b:21:
         fe:1d:ab:36:61:c7:72:7f:75:b9:db:19:2f:d2:23:2d:fa:38:
         ac:43:62:cf:bb:ff:07:41:35:16:95:3c:a3:dd:59:e5:4e:bc:
         4e:e8:6b:e3:3a:df:1f:c4:06:6e:5b:9c:44:35:e1:a3:c9:22:
         3d:4a:fc:81:96:60:98:01:fb:9e:64:9f:5c:49:4d:13:c0:ca:
         66:54:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:49:28 2024 by rpki-client on console-fra.rpki-client.org