Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File:                     MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier:          tAUDnawHVVuCxyaGLS2tuPSsHYZBglx838EVMnTdslM=
Subject key identifier:   DB:3C:D1:00:2E:84:DD:BD:BE:A0:55:10:95:2C:CC:89:78:B6:40:76
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer:       /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial:       01936AB4946846EC213CBA0091CD03BB61AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number:          019C
Signing time:             Tue 26 Nov 2024 23:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:39 +0000
Files and hashes:         1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: rw2UW7WIKwNEUIUYHnB5VRAbeq5NrSY9F4QX8fkatJk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:94:68:46:ec:21:3c:ba:00:91:cd:03:bb:61:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
        Validity
            Not Before: Nov 26 23:00:39 2024 GMT
            Not After : Nov 27 23:00:39 2024 GMT
        Subject: CN=db3cd1002e84ddbdbea05510952ccc8978b64076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:17:2e:22:93:33:ce:f2:af:0f:41:91:09:07:
                    1e:be:b4:ff:ec:e0:48:c0:67:db:56:f4:62:26:50:
                    b1:6e:c1:52:2b:9f:80:78:56:45:7d:54:c1:39:04:
                    f7:b7:96:c2:13:83:7e:fd:18:56:da:8f:41:42:4d:
                    b3:aa:82:75:38:05:f4:8e:e5:ef:6d:61:3c:6c:dc:
                    87:c6:5d:42:02:a4:4f:99:29:c4:32:9f:70:f3:20:
                    87:c3:a3:99:54:83:0a:a6:0a:1e:1b:6d:fc:b5:cb:
                    70:cd:76:56:d4:86:eb:f4:24:f8:ff:0e:63:28:4d:
                    69:9b:9d:12:89:47:bd:3b:59:0e:63:0a:0c:37:2f:
                    72:b2:eb:1f:25:5e:bf:fc:65:cd:d1:45:95:2d:fd:
                    19:ea:4a:43:70:67:48:61:26:e9:cb:75:e6:d2:8b:
                    a4:9d:02:c7:37:2d:48:22:ae:01:cb:30:85:6e:41:
                    64:ab:de:67:03:1e:d3:5e:0d:e6:84:95:37:d9:d0:
                    33:aa:f9:5e:7f:20:04:69:6f:d9:7d:7b:0a:d1:ac:
                    a1:25:ec:8e:df:1f:6a:e0:19:97:5b:d5:90:a8:5e:
                    3b:61:95:ab:30:88:9c:71:d7:79:2f:40:e6:ad:ca:
                    3f:0b:6c:6b:65:4b:15:82:ec:0b:4b:bc:2a:9c:25:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3C:D1:00:2E:84:DD:BD:BE:A0:55:10:95:2C:CC:89:78:B6:40:76
            X509v3 Authority Key Identifier:
                keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c4:47:00:17:67:0f:72:f5:e4:d4:25:af:34:3f:5e:33:03:
         ad:3a:10:f7:b1:af:73:40:f3:5e:5c:b6:58:60:7a:15:09:ef:
         20:25:b7:15:7f:b3:e7:62:56:5b:8e:c0:38:bf:6e:5c:61:6e:
         b9:c9:c4:2c:4c:93:27:cb:e5:eb:ee:fd:61:50:48:39:e2:59:
         64:c0:1a:cf:02:57:fc:d5:be:c1:1d:96:7c:84:85:27:9f:51:
         1e:b5:f6:8a:a3:de:34:5a:b8:97:08:4f:4f:ee:64:e7:16:12:
         1c:ae:16:d5:ac:62:5d:00:99:db:e3:b2:65:03:8e:0d:dd:14:
         76:d1:4e:64:db:97:fb:a9:0f:6f:12:31:17:03:11:68:e9:0c:
         46:dc:4d:94:39:7a:c7:4d:f0:c4:7f:81:93:f6:a7:79:5a:a0:
         da:a8:ac:43:08:74:35:23:3d:f5:f0:37:7e:2c:b1:98:2c:30:
         fa:81:ff:05:6e:63:a1:12:a0:ec:3b:44:80:21:a2:a1:64:e0:
         a4:4b:0a:08:d0:f6:a6:03:8a:f6:fa:4d:ec:a1:1f:7f:ae:2d:
         42:d2:ab:27:22:83:d9:c1:6d:fd:e3:36:56:42:dc:44:e2:64:
         f7:1d:e2:86:e6:aa:9a:f4:c9:8d:05:05:ad:ae:e6:35:c7:f7:
         cd:45:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:41 2024 by rpki-client on console-fra.rpki-client.org