Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
File:                     XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft (raw, json)
Hash identifier:          TI05q5s2NBSkzQ8h1EvK3liVxC+X1B5Bw6IHNTAsnC8=
Subject key identifier:   AD:79:BC:59:A6:F3:88:7F:83:D6:25:0C:F1:53:CA:AA:04:D7:BC:43
Authority key identifier: 5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A
Certificate issuer:       /CN=5e5214158af310ffa9c315298343f4c3e66aec9a
Certificate serial:       01936A46E7562EE0A1527EE7B6DCE2CE8A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
Manifest number:          03C7
Signing time:             Tue 26 Nov 2024 21:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:51 +0000
Files and hashes:         1: XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl (hash: Jqt44uOH1QqTSAHUTI3KDJbGuk5f242WxNHMaSx22h0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:e7:56:2e:e0:a1:52:7e:e7:b6:dc:e2:ce:8a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5214158af310ffa9c315298343f4c3e66aec9a
        Validity
            Not Before: Nov 26 21:00:51 2024 GMT
            Not After : Nov 27 21:00:51 2024 GMT
        Subject: CN=ad79bc59a6f3887f83d6250cf153caaa04d7bc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:49:25:87:29:91:01:81:57:d1:27:6c:04:
                    3c:93:d4:58:7c:b6:19:e2:c6:03:c8:0c:b5:9d:ff:
                    e9:c1:e0:f6:e9:90:45:b2:2c:70:d7:2a:5d:9a:9c:
                    41:54:05:c3:29:3e:0d:74:4f:dc:1d:ff:46:08:ba:
                    bb:d4:0b:ef:5a:1e:51:ac:7e:33:da:a1:30:0b:99:
                    51:01:f0:85:a6:63:55:61:51:74:9f:8b:ea:da:cc:
                    6a:4a:ad:c0:db:5c:89:97:0c:bb:96:c9:ff:fd:11:
                    3f:89:f3:b7:9d:f3:d3:12:7e:73:7f:cd:5b:79:64:
                    95:41:8b:2f:f6:62:3f:b4:f8:bf:6c:d3:71:6b:e8:
                    27:46:6d:88:c2:64:7e:25:41:3e:6f:3e:49:de:05:
                    1d:d1:43:3c:e7:0d:97:f8:fc:89:9f:71:4b:a8:fb:
                    09:8d:d2:8f:af:b9:e8:a8:45:08:30:94:70:5e:28:
                    81:c4:cc:c0:5b:88:d0:f9:58:86:3b:7c:a8:36:9a:
                    94:ef:55:ea:37:25:9f:6f:bc:8b:d1:69:5c:f6:b3:
                    9f:ee:82:ed:55:b0:14:41:58:bc:23:f8:e5:e2:1e:
                    d1:3d:d6:c2:80:3e:db:28:cc:08:3b:2a:2f:ba:c9:
                    b5:72:b9:54:6f:a2:b8:c7:24:68:d0:67:6f:26:b3:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:BC:59:A6:F3:88:7F:83:D6:25:0C:F1:53:CA:AA:04:D7:BC:43
            X509v3 Authority Key Identifier:
                keyid:5E:52:14:15:8A:F3:10:FF:A9:C3:15:29:83:43:F4:C3:E6:6A:EC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a992fe-c1cf-4de8-bbb0-f96f6f769838/1/XlIUFYrzEP-pwxUpg0P0w-Zq7Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:08:c3:50:12:83:ba:48:5d:af:59:a5:4e:f0:46:19:32:
         7d:09:85:ff:bc:5b:6e:ec:61:33:9a:b9:b3:96:b6:20:a5:23:
         21:56:89:16:42:91:59:b8:8f:a4:e1:c3:08:df:1e:21:c4:20:
         90:bb:2c:3c:68:e9:c6:09:cc:78:85:2a:5e:b5:48:9d:95:58:
         a1:02:31:58:24:c7:66:84:1e:88:b8:7b:fc:c2:22:4d:44:92:
         61:31:56:f2:b6:9e:78:68:f1:f7:47:f1:48:92:55:89:75:bc:
         1a:16:94:12:82:9a:9f:f0:93:0e:32:a6:89:dc:0c:83:3e:62:
         31:65:50:84:e9:c1:96:1a:0b:8e:15:fe:cc:3d:49:b5:7d:a9:
         8f:b6:59:c9:b8:0a:34:e9:c6:82:36:52:9e:ce:79:2e:aa:15:
         14:3f:7b:47:ba:10:fe:71:3a:d8:54:8e:a7:ff:d4:1c:5c:e9:
         2f:54:90:22:c6:00:f4:da:88:de:d7:25:19:20:5e:94:91:bf:
         b1:c1:b7:4e:91:5d:63:34:9d:68:29:4d:8d:de:50:aa:c7:ba:
         26:a9:a2:b0:b3:a3:64:5b:3d:53:df:30:b7:52:66:23:c6:10:
         1e:c0:c4:a2:24:3b:98:26:44:b2:e9:8a:56:9d:25:87:ef:72:
         47:12:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:08 2024 by rpki-client on console-fra.rpki-client.org