Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File:                     JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier:          r44vUlrxmPMqHlozkLUlemPp/c0ERhYYp0FAK43AY1o=
Subject key identifier:   71:AB:72:96:93:56:02:3C:F7:4A:F8:23:0E:71:53:F2:39:C1:02:5F
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer:       /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial:       0193579B92B2E1C4ADE27A6F9E7818FD136C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number:          02D3
Signing time:             Sat 23 Nov 2024 06:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:33 +0000
Files and hashes:         1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: u9ir5pe9E3riux9akI3F7FFHQKBCsCguBuOqB3ye5A0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:92:b2:e1:c4:ad:e2:7a:6f:9e:78:18:fd:13:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
        Validity
            Not Before: Nov 23 06:00:33 2024 GMT
            Not After : Nov 24 06:00:33 2024 GMT
        Subject: CN=71ab72969356023cf74af8230e7153f239c1025f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:34:a7:42:2d:01:f8:99:6c:e3:dc:50:20:
                    91:b1:63:4a:18:17:e2:86:90:0d:32:5a:d0:58:6f:
                    89:f5:52:6e:45:fb:6e:76:42:a0:7d:f1:06:df:5b:
                    8c:0c:cd:86:cd:56:1f:e5:eb:50:69:f3:1e:b8:94:
                    10:cb:98:c8:03:d5:87:81:2d:c7:08:0b:c5:1a:bc:
                    db:ba:9c:94:d8:8b:94:26:fc:7f:1b:0b:a7:0f:b7:
                    1e:d0:79:cb:e7:d2:91:97:b8:65:90:d0:5f:d3:01:
                    2b:83:43:5e:f3:7d:81:e5:52:7f:43:54:bb:d5:bf:
                    04:6c:d1:e2:ce:a5:22:49:b5:80:a7:97:7d:a2:0d:
                    9e:4b:1c:f7:d7:22:1d:3f:5d:11:f2:eb:4d:8f:d2:
                    0d:1b:7a:13:9f:39:d0:ce:cd:d8:7f:57:3b:4f:4d:
                    ba:94:dc:5b:b0:ab:76:42:cc:58:0a:7b:fb:12:a5:
                    00:88:51:5d:a7:36:4b:de:a2:0a:78:cb:5c:40:6a:
                    60:8a:c7:79:f2:a1:56:c0:d5:fe:f0:6e:d7:4f:1c:
                    a7:cb:d8:5a:58:86:ac:c9:97:3a:f5:36:e6:89:f7:
                    a9:e5:ef:f9:0e:a9:1d:ae:1e:02:3a:e6:83:17:e5:
                    0b:2c:d1:22:e0:38:8f:d6:7e:9c:4e:08:c2:8e:fc:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:72:96:93:56:02:3C:F7:4A:F8:23:0E:71:53:F2:39:C1:02:5F
            X509v3 Authority Key Identifier:
                keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:13:b0:0c:25:1d:35:1c:ad:b0:13:b1:0c:49:d8:b3:c7:33:
         cf:18:28:20:0d:f7:31:db:1e:b8:6a:bd:b0:cd:2e:d7:2d:79:
         b6:ff:67:19:22:e6:f3:91:7a:8e:53:d1:50:e8:a0:20:de:73:
         37:8d:68:cd:d8:4d:69:55:6e:9e:cd:23:5e:c8:9b:18:f3:52:
         06:12:c9:af:e3:c0:f8:2a:6c:0f:e7:1a:f2:b2:41:13:be:7c:
         76:21:35:68:0e:b0:50:5d:61:7c:9b:77:d2:d1:1b:25:e6:a1:
         e4:72:af:27:4c:bd:ca:25:63:db:c1:15:2c:a2:7f:24:63:b6:
         15:ec:2b:b5:54:b8:83:1f:a7:b4:c9:e7:2c:44:73:c9:14:ef:
         fa:46:53:8c:89:5e:fc:db:2b:d8:76:2e:3d:51:06:10:b0:9c:
         79:7e:0e:62:0e:38:09:cd:ac:33:ae:70:68:b3:7a:10:2d:30:
         55:6a:89:88:18:22:06:6b:ca:a7:44:60:f3:5a:67:7d:f4:c3:
         a9:c1:e0:50:0e:90:52:c9:09:0e:fe:0c:f8:76:58:6a:c1:29:
         f8:40:c9:76:56:39:06:e4:31:42:61:b2:73:2a:83:ac:65:65:
         00:69:e1:e5:c5:79:33:03:b1:3f:67:0d:31:89:b3:be:f2:4e:
         47:c8:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:17 2024 by rpki-client on console-fra.rpki-client.org