Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File:                     ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier:          3wo9zppS2gzwgMAIRWvWnaf66/2EqVGXecNua5Swhu8=
Subject key identifier:   05:79:B8:1E:7E:7D:10:C7:B0:97:A8:C7:B1:2A:B8:03:13:E3:F4:36
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer:       /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial:       019357D244C309CDC871E6459E14E60075F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number:          0E1D
Signing time:             Sat 23 Nov 2024 07:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:18 +0000
Files and hashes:         1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: gk/hZ6OX0sj2V6dBq0d4GTx9aZbata3Jt+SbSidHF6g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:44:c3:09:cd:c8:71:e6:45:9e:14:e6:00:75:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
        Validity
            Not Before: Nov 23 07:00:18 2024 GMT
            Not After : Nov 24 07:00:18 2024 GMT
        Subject: CN=0579b81e7e7d10c7b097a8c7b12ab80313e3f436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:63:90:65:be:72:fa:e6:97:c7:70:27:95:
                    a3:b9:6b:72:2d:65:83:91:b1:bb:e7:f7:df:3f:8f:
                    02:79:de:43:8e:16:db:31:03:1d:c8:05:49:17:8d:
                    34:8c:ef:16:67:a9:2b:26:7e:84:e0:95:e6:52:81:
                    90:81:7b:f6:52:b3:b4:04:0b:46:90:bf:5e:0e:39:
                    6e:c7:d1:3e:2b:09:56:39:87:0b:bd:89:fa:f9:44:
                    3b:58:c4:48:63:50:58:ec:47:5b:a1:a7:19:12:23:
                    13:c3:24:a6:fa:5d:0b:87:b3:7e:3d:d8:f9:64:95:
                    a5:4f:31:46:61:5e:4b:34:ea:0d:88:ae:4b:d3:31:
                    ee:79:52:06:c5:e6:f8:ba:77:4f:f4:f2:a7:92:5f:
                    9b:e7:ba:55:95:0b:5b:79:db:39:bd:6e:6c:f0:a2:
                    1f:63:ef:a5:89:99:29:08:9b:37:8a:27:40:af:46:
                    c9:36:03:20:3e:32:7a:bc:b8:b1:91:58:04:43:e5:
                    25:a3:37:4b:48:89:4a:2c:2e:80:b3:8d:6d:c8:8a:
                    5d:c9:2d:ce:9a:13:ac:6f:b4:2d:d0:20:fe:2c:c9:
                    a0:2a:01:f0:4e:0e:d7:c5:a0:77:7e:43:04:e4:8b:
                    15:d5:d8:5f:24:f9:67:42:85:0c:38:74:9a:dc:f4:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:B8:1E:7E:7D:10:C7:B0:97:A8:C7:B1:2A:B8:03:13:E3:F4:36
            X509v3 Authority Key Identifier:
                keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9f:70:bc:f2:db:de:e8:3b:26:bc:1f:a4:83:6f:2c:47:9f:
         58:17:8b:07:5c:12:f2:1b:db:10:80:d5:32:4c:da:89:d0:5e:
         ab:1b:68:75:d9:43:ab:ed:09:f6:b3:a6:b4:55:b5:b5:6a:3c:
         fe:3d:3f:49:f1:ee:1f:73:24:23:0b:fb:45:7c:f7:95:ee:dc:
         b2:c2:0f:6a:0d:5d:aa:54:bc:f8:74:24:61:2e:67:b4:cd:84:
         d6:ef:39:01:4d:0c:39:fc:e6:10:ac:d1:50:d3:ad:4b:d9:83:
         87:63:81:c3:f4:a6:09:8d:fd:f8:60:72:a4:44:90:3d:cc:be:
         5d:9a:37:c5:a5:0d:aa:6d:d5:69:21:91:da:ec:b2:a0:2c:5d:
         3e:cb:65:23:53:5e:c2:f5:98:fe:40:8c:82:60:c5:b3:f9:22:
         fc:94:04:a3:b7:dc:50:51:5e:3b:df:83:e0:71:b3:8f:8e:92:
         c4:7f:49:5f:7e:88:76:99:c3:1f:40:39:68:ac:f3:46:05:b1:
         02:d3:cb:70:be:69:b8:fb:16:05:73:60:ba:8c:63:2b:1d:8b:
         41:92:7c:29:50:8e:68:5c:93:53:e7:9f:a0:4a:d8:2f:6a:23:
         4f:ae:fd:6e:84:b4:db:0d:5a:12:13:44:41:be:33:1f:ac:27:
         de:a3:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:22 2024 by rpki-client on console-ams.rpki-client.org