Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File:                     1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier:          5BKgjuQmllblbNcD4Nb5fHF3dC0wr044i2ANSyigtiU=
Subject key identifier:   EC:7E:54:FF:1D:81:27:15:45:1E:E5:DE:7A:61:D7:63:6D:C1:91:2E
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       0194064740AAA8C4F96EF314F678364CF4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number:          0508
Signing time:             Fri 27 Dec 2024 04:02:00 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:00 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:00 +0000
Files and hashes:         1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: FPT7qS1BfGbcCeen4zpj+SQijrWx/KJu+owJHqPJ66o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:40:aa:a8:c4:f9:6e:f3:14:f6:78:36:4c:f4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: Dec 27 04:02:00 2024 GMT
            Not After : Dec 28 04:02:00 2024 GMT
        Subject: CN=ec7e54ff1d812715451ee5de7a61d7636dc1912e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:bd:5c:4d:f7:55:18:09:5f:78:a0:5f:dd:
                    7b:06:5f:25:8a:44:ab:d1:fa:aa:ae:9b:53:21:85:
                    35:8a:1c:fe:b0:7e:92:87:77:58:86:cd:82:0f:ad:
                    44:d7:42:cf:a1:8a:eb:fd:9c:db:ad:87:a4:b2:a4:
                    41:43:6e:7e:e4:25:33:f1:37:de:d0:a0:ee:f0:35:
                    30:0b:bb:70:b2:5e:92:44:67:22:d2:c8:cb:57:cc:
                    fe:27:4e:f8:4f:63:81:ac:53:8a:4d:34:1b:d5:6d:
                    51:84:32:1e:ab:c0:9b:77:c2:2c:92:ec:e6:e8:9c:
                    0b:20:18:58:5e:d3:ee:5a:5a:c1:0d:05:c8:93:48:
                    b9:e3:bc:cd:be:a2:03:a2:27:69:af:aa:95:22:dc:
                    51:a6:27:36:d6:33:b1:30:0d:4a:5b:05:7c:40:13:
                    6f:5c:1a:e4:18:d8:33:a8:9f:43:3d:3e:c8:84:b8:
                    2e:15:cc:bd:4b:a7:ad:d2:f6:35:7b:0a:a6:06:f1:
                    f7:2a:c7:c0:b5:8c:d3:7b:df:89:ee:ea:23:0f:b1:
                    9e:b5:90:86:8b:d8:9b:e8:65:88:d0:4f:4d:33:56:
                    de:c3:f6:85:3f:1b:3e:2a:83:ec:e0:2a:09:9d:a9:
                    95:fd:33:ad:80:04:2e:7a:70:80:4f:85:69:10:80:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:54:FF:1D:81:27:15:45:1E:E5:DE:7A:61:D7:63:6D:C1:91:2E
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:bc:09:51:c0:18:85:86:3a:64:aa:ff:cb:49:1b:5a:e7:96:
         a2:15:37:ea:9a:20:d1:34:86:16:c2:26:1e:78:cf:f9:92:07:
         8c:5e:4a:e9:a3:6c:38:3c:af:02:69:4b:b8:df:51:99:59:b6:
         3d:c1:69:fc:e3:b3:ac:aa:26:0e:af:fa:fb:6c:8d:f9:e7:2b:
         a4:a5:bd:a1:5e:df:3e:1d:d1:17:b1:f5:f0:b1:a7:7f:4b:e2:
         3f:bc:7f:ed:56:df:2d:64:cd:b5:ff:d8:60:8f:27:f1:d7:60:
         9b:fb:1b:38:21:fb:17:fb:50:ae:c1:6f:ee:42:b6:36:fc:bf:
         3f:36:8e:e1:97:88:4d:d9:c5:80:a2:3a:05:62:f0:89:38:7a:
         c3:39:4e:53:b5:f7:80:cc:f1:49:94:88:5c:64:20:b9:9e:b2:
         bc:e1:ee:0a:86:70:6c:56:d6:c9:57:a9:36:4f:cb:ae:58:d2:
         7f:5e:7a:42:aa:80:c3:b0:be:8d:ed:eb:cf:17:0b:5b:8e:16:
         37:8e:47:e2:82:fd:13:14:2b:7c:0d:ed:ad:73:9e:a6:a1:c3:
         48:a5:5e:de:48:d6:80:a3:d4:62:e9:21:fc:91:f8:44:db:2e:
         78:0c:da:27:56:f4:ca:83:1e:0a:dd:d4:2d:1c:4e:b1:2b:32:
         d3:1a:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:33 2024 by rpki-client on console-ams.rpki-client.org