Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File:                     jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier:          kxiRd3ybi6NOcCh0Z+ys5h2iVSMW16gWKJJaIAPts4g=
Subject key identifier:   97:38:6D:89:37:E5:76:49:91:BE:E4:49:77:DE:76:E0:0B:7C:EE:22
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer:       /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial:       01938C9D9F452281214CC19A4293A9465339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number:          138E
Signing time:             Tue 03 Dec 2024 13:02:40 +0000
Manifest this update:     Tue 03 Dec 2024 13:02:40 +0000
Manifest next update:     Wed 04 Dec 2024 13:02:40 +0000
Files and hashes:         1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: r3HqXIYtv+i80uQ7C/5qeG5YO3EqU+nLaSoRO/zhTjo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 13:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:9d:9f:45:22:81:21:4c:c1:9a:42:93:a9:46:53:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
        Validity
            Not Before: Dec  3 13:02:40 2024 GMT
            Not After : Dec  4 13:02:40 2024 GMT
        Subject: CN=97386d8937e5764991bee44977de76e00b7cee22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:dd:25:4a:16:1c:75:87:a0:67:61:ac:ff:
                    a1:f4:35:83:54:f1:0b:44:08:af:e2:5c:2f:04:44:
                    e7:9c:16:0e:f7:0b:04:17:34:6b:fd:d0:32:de:a0:
                    e3:39:8c:00:6f:9b:31:b3:d1:c1:e0:03:af:5b:50:
                    ea:cf:6b:fb:79:34:7b:ec:d2:24:ff:0a:4f:97:c3:
                    ac:80:98:a8:e6:b4:15:1a:0c:23:44:eb:07:ed:85:
                    7f:07:a6:96:4c:8b:c9:f1:31:1b:3e:43:52:8d:83:
                    24:b6:73:2c:91:79:cb:b7:88:27:77:2a:6d:50:43:
                    a3:89:70:42:0b:98:3a:97:f5:95:f1:64:09:d3:c7:
                    d0:4e:3b:01:c0:12:30:44:aa:81:d9:9c:2d:7c:cf:
                    af:8b:37:46:b3:ab:a6:51:80:16:57:d8:9f:bd:4b:
                    d8:0d:33:37:c9:4c:e3:ae:2f:cb:4f:66:bc:af:81:
                    f0:ec:6b:ee:2a:28:a4:89:be:f1:0a:9e:cb:68:33:
                    08:ab:03:b7:2f:0a:b5:98:1a:c6:3a:b7:f8:5c:18:
                    48:73:7f:a6:bb:60:59:70:89:e5:1f:02:42:f6:7e:
                    7a:28:67:78:ea:fc:89:52:3c:01:f1:c0:aa:15:08:
                    f0:c2:5c:d1:34:dd:b8:d1:cd:58:98:5d:b6:7d:df:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:38:6D:89:37:E5:76:49:91:BE:E4:49:77:DE:76:E0:0B:7C:EE:22
            X509v3 Authority Key Identifier:
                keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:ef:90:35:0e:ff:7a:6a:1c:2b:b7:fc:b9:05:49:fe:4b:28:
         bd:fc:3a:36:14:5d:fb:1a:46:3f:78:da:f5:31:8d:e3:46:60:
         83:86:27:2a:45:74:12:b8:e7:60:05:93:0b:a1:2e:40:86:24:
         70:48:e7:ba:2d:89:44:71:d5:83:02:25:92:ea:03:eb:fe:3b:
         1e:47:03:37:dc:3f:3c:bb:64:a2:0e:f0:e7:3e:72:9e:73:34:
         3e:4e:00:b2:f9:a4:fc:c6:47:ce:21:0c:70:61:95:51:4d:6d:
         55:8f:2c:00:f9:ee:40:13:9a:42:81:ee:1b:b5:2f:d3:0a:95:
         c3:b5:f1:72:74:a1:cf:d7:bc:04:22:8f:53:68:ce:0d:c3:b7:
         f2:bf:48:8d:15:09:85:38:5a:e2:3b:5e:bc:fe:0f:db:e8:bb:
         ca:c5:e7:94:dd:6c:98:b0:d6:02:df:d1:22:64:c4:82:09:1b:
         95:79:80:3d:12:4a:ce:43:f1:49:45:c0:4a:28:e1:97:1a:87:
         26:e4:59:f7:0d:08:c2:b2:05:e2:d6:f8:d9:17:52:90:cf:10:
         a3:ff:d5:0b:2d:e4:0c:fe:3c:c4:0f:c6:4b:47:0f:34:b1:2b:
         9a:db:e3:60:01:c3:0b:74:8c:4b:b0:d3:73:1b:60:62:55:9c:
         dc:08:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:09:34 2024 by rpki-client on console-fra.rpki-client.org