Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File:                     BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier:          ddhkMCBLfA3/PLkt4DXN6Ouv6WLrVnDIN5uITOLyORw=
Subject key identifier:   F4:0E:B4:EA:1C:5F:79:D6:E8:A3:93:64:4E:E7:69:18:F6:CE:09:51
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer:       /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial:       0192EF896DD62868638D653A523DF11426AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number:          01CC
Signing time:             Sun 03 Nov 2024 01:00:13 +0000
Manifest this update:     Sun 03 Nov 2024 01:00:13 +0000
Manifest next update:     Mon 04 Nov 2024 01:00:13 +0000
Files and hashes:         1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: fJEkdLpnWVK530HOO6dRL6lOI72+6AMNY1uun2LZHgM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ef:89:6d:d6:28:68:63:8d:65:3a:52:3d:f1:14:26:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
        Validity
            Not Before: Nov  3 01:00:13 2024 GMT
            Not After : Nov  4 01:00:13 2024 GMT
        Subject: CN=f40eb4ea1c5f79d6e8a393644ee76918f6ce0951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:8f:51:91:53:20:d8:7e:8a:d2:b5:9c:34:
                    41:6a:1f:15:48:53:de:05:cf:5e:63:61:84:7a:fb:
                    2b:03:e5:2e:2f:86:69:03:8f:7e:e3:38:45:a5:04:
                    b9:2a:cd:76:a0:9c:64:d0:db:db:0c:b3:df:6a:f7:
                    7c:08:b4:39:2d:19:c2:8a:b4:68:20:b3:df:2f:d4:
                    fa:6a:40:14:4f:6f:ae:4d:35:62:98:f8:a6:20:bf:
                    d6:e1:f4:4f:e0:c6:69:a7:50:77:30:a8:7e:15:77:
                    8d:7e:32:82:6d:19:20:0c:b2:4d:9f:97:fa:ab:70:
                    4c:97:37:53:12:03:31:7f:e8:00:eb:27:73:a7:bf:
                    4b:6e:4e:aa:27:3e:80:b9:94:fb:4b:93:36:f6:db:
                    b8:56:48:82:f5:24:4c:99:4e:89:97:86:6e:e6:2c:
                    c9:08:0c:c7:08:0d:0e:35:fd:42:03:61:15:50:7c:
                    0f:07:44:39:eb:0c:7e:d1:47:63:71:9f:c0:37:03:
                    ee:c8:86:f3:5d:f0:db:6f:11:17:74:8e:dd:3d:56:
                    0b:0e:30:e6:8e:93:be:44:49:b9:18:1c:cc:99:b8:
                    71:e6:70:c6:93:ce:f6:85:a9:b2:e4:49:6f:32:90:
                    47:f5:85:d5:15:fb:c7:2d:e3:a1:00:6f:a8:25:47:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:B4:EA:1C:5F:79:D6:E8:A3:93:64:4E:E7:69:18:F6:CE:09:51
            X509v3 Authority Key Identifier:
                keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9f:3c:81:21:d0:e9:75:69:4c:61:ce:d6:bd:ac:ff:ed:6e:
         0a:b0:20:64:4b:c6:25:24:ad:d0:8f:ef:3f:b8:8b:49:bd:b7:
         07:bc:7e:dd:d5:df:08:2f:b1:99:3f:3e:21:ce:8a:5b:d4:53:
         3a:89:09:63:4e:7d:1e:49:72:8b:91:ed:cc:52:6d:1c:51:a0:
         9e:55:21:f2:f9:75:28:45:29:c1:c9:83:40:c4:2c:45:b6:71:
         a9:92:08:11:0a:07:b2:0c:d7:0a:b8:c1:fe:d4:d2:ff:fd:13:
         10:c5:b6:e2:7d:f2:08:2a:a1:93:15:04:96:95:85:38:8d:de:
         69:9a:d7:59:0f:b9:1a:59:94:21:0e:70:9e:04:2c:fd:f1:62:
         5f:ff:42:d9:80:e0:12:d0:9b:a6:f1:d4:f9:02:a9:76:60:97:
         a4:ee:9d:40:76:a3:ed:4f:8f:a1:62:2b:74:f4:3c:a0:89:b5:
         71:19:50:9b:f1:ac:63:b0:9e:6b:4b:f9:f1:88:06:b3:f7:dd:
         73:d1:ea:e6:ee:86:7e:1f:97:cc:b8:31:01:c7:1d:da:a9:cf:
         7a:60:d2:f0:90:f7:0d:3b:14:b4:a2:f8:c1:00:85:00:6e:78:
         df:e1:e1:51:cd:02:dd:6d:7e:f5:77:89:d0:9f:4e:30:54:17:
         6a:4b:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:21:20 2024 by rpki-client on console-fra.rpki-client.org