Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File:                     3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier:          KJtdf18qME1srxxhAh9tlErZt3WBkV7SHD4bAiTUCJU=
Subject key identifier:   5D:66:76:EB:4C:0D:A0:64:18:B1:A8:07:59:B7:7B:1B:2C:BE:F3:28
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer:       /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial:       01935878674F568B1703C085CACA0A04A913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number:          061D
Signing time:             Sat 23 Nov 2024 10:01:45 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:45 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:45 +0000
Files and hashes:         1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: 2yt4KxCZHpTpX67pCfc4k4ZSLECXaDpMlE1jJgbIL1s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:67:4f:56:8b:17:03:c0:85:ca:ca:0a:04:a9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
        Validity
            Not Before: Nov 23 10:01:45 2024 GMT
            Not After : Nov 24 10:01:45 2024 GMT
        Subject: CN=5d6676eb4c0da06418b1a80759b77b1b2cbef328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2f:dd:4f:f9:52:19:89:9e:78:01:37:40:ac:
                    84:f9:bf:d2:1f:51:92:1e:b0:02:a9:7e:26:18:05:
                    a9:e6:e6:f0:87:78:64:cf:64:35:fc:98:ab:82:84:
                    e2:f2:ce:85:ce:05:47:5b:08:85:e5:94:14:2f:ab:
                    bc:cb:7b:f5:ed:ed:c4:56:d7:8b:04:16:95:5d:5c:
                    51:5e:5c:ac:75:a8:62:9c:7e:fb:c6:49:66:12:d6:
                    2e:fc:f0:6e:05:bb:58:d3:9a:53:27:fa:c7:e4:dc:
                    96:78:f9:f4:e5:76:54:b2:85:51:92:b0:5f:9e:e4:
                    72:12:1c:ec:ef:08:75:22:67:d5:49:50:83:eb:e7:
                    7c:ee:b7:00:32:49:7d:4e:e8:9f:ae:d6:bb:22:12:
                    1e:24:bb:11:57:25:16:24:77:cc:c0:c9:a4:eb:10:
                    31:b3:32:07:91:7d:31:0e:36:88:e3:23:39:ef:4d:
                    26:35:c3:5b:e3:f1:ce:b1:47:66:53:56:dd:03:a9:
                    61:c9:c3:1b:21:1d:cc:66:53:db:12:18:8e:56:88:
                    d1:b5:f0:b7:bc:63:b8:cd:87:cf:63:f6:09:1a:89:
                    a2:4d:81:0c:b2:41:8e:3c:6d:78:1e:d2:38:4b:0f:
                    6d:5d:4b:f7:24:2b:fa:3c:7b:2a:e4:5d:61:f8:2b:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:66:76:EB:4C:0D:A0:64:18:B1:A8:07:59:B7:7B:1B:2C:BE:F3:28
            X509v3 Authority Key Identifier:
                keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:18:6f:b1:b5:d7:f4:e0:f1:53:e0:81:d6:4e:7c:99:c0:1f:
         d6:0b:e7:2d:c4:f6:e8:b7:e6:cb:c4:3e:86:8c:e5:da:a7:e9:
         02:5c:fc:03:05:54:ee:8e:12:e5:07:b1:ad:ac:b7:c6:f4:7b:
         98:d9:b2:e3:ad:e3:98:96:2f:8d:a2:d2:fc:13:d7:13:78:f4:
         49:a6:ed:ac:2c:c1:55:9b:97:b8:e8:77:4d:05:ad:82:b0:5d:
         2a:54:57:38:c6:96:a7:cd:1b:2d:4c:a0:a6:42:99:a6:36:68:
         68:5a:ab:e9:fa:ab:03:f1:88:98:99:66:e0:25:e7:81:c7:16:
         fc:2c:8c:56:8d:52:f0:7c:af:24:5f:c4:d8:65:2b:43:d5:ed:
         ae:5c:2f:2d:d1:23:d7:97:8f:01:6a:d5:b4:c8:4f:12:1c:94:
         fe:a7:78:ee:f1:22:88:6f:d2:c3:ca:2f:fb:95:a3:8e:55:eb:
         12:72:05:03:c3:37:36:91:db:a7:6e:89:7c:80:db:fe:0b:2f:
         d6:57:88:1a:fb:3f:29:2c:07:11:4f:9c:e8:fa:89:c9:c0:8a:
         e7:87:dc:72:ce:b7:f4:84:6b:8a:21:ef:8d:b0:f1:3d:26:92:
         15:a6:a1:a0:33:2e:1a:e8:e3:41:02:1e:96:17:23:ea:f5:ec:
         88:b7:76:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:25 2024 by rpki-client on console-fra.rpki-client.org