Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          3RuHRxNZJCHjUo0u3bqqT2IACmdBBzUrcVLzmGhyGv0=
Subject key identifier:   D0:41:E8:DA:F2:CD:EA:A3:C1:43:81:37:D6:D0:82:D9:0A:13:AD:41
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       01936A46B567D8DD9357E4B8E6967C1D314E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          01A0
Signing time:             Tue 26 Nov 2024 21:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:38 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: bMFPjX4eqMUtOhWOqU4wHC3SX9zAb5cvmsNEVvTdPm4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b5:67:d8:dd:93:57:e4:b8:e6:96:7c:1d:31:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Nov 26 21:00:38 2024 GMT
            Not After : Nov 27 21:00:38 2024 GMT
        Subject: CN=d041e8daf2cdeaa3c1438137d6d082d90a13ad41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:d1:db:7e:d1:ff:89:71:a6:ad:08:7b:ae:
                    78:d8:3e:5c:a0:d6:8e:7d:1e:a3:c9:65:2b:43:fd:
                    ef:4e:fb:96:69:fd:b6:d5:4e:24:d1:a0:5e:ad:af:
                    d7:70:f1:b2:30:30:19:cc:5a:a2:c9:ce:51:80:d7:
                    7d:c7:7c:28:0f:3c:4a:c4:cb:7d:ad:2c:54:2b:18:
                    0b:8b:6b:2b:75:02:29:96:c6:ab:47:a6:3b:fd:27:
                    cc:2f:f2:aa:25:c8:d9:31:a9:14:9d:57:7b:dd:da:
                    32:68:0a:80:45:67:90:56:33:ee:d1:27:1c:a3:88:
                    f2:65:6c:b6:b5:e4:bd:24:1e:9b:e5:8b:e2:36:56:
                    df:58:df:c9:e9:e9:9b:b6:37:48:b9:60:43:6b:97:
                    22:24:9e:2b:ee:bc:43:16:57:35:04:bd:a9:36:34:
                    8f:b0:55:c9:e4:40:ca:d2:db:15:11:58:47:a8:90:
                    19:b8:d7:f8:19:2b:91:a5:55:30:93:ba:81:35:1c:
                    39:49:c5:da:ec:92:79:3a:46:e8:62:22:1e:2d:be:
                    c9:69:c8:4f:04:36:77:14:73:a9:6f:3f:82:9c:45:
                    94:f0:9b:36:b6:d1:b4:80:0e:7a:33:01:dd:d6:42:
                    4a:a7:a9:b0:62:d9:ab:0c:cb:29:53:76:db:11:31:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:41:E8:DA:F2:CD:EA:A3:C1:43:81:37:D6:D0:82:D9:0A:13:AD:41
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:47:4d:09:3a:65:89:24:fb:00:4b:5d:3d:11:79:c7:87:a7:
         98:4f:64:3e:87:e4:7e:0f:e3:a7:79:3c:30:c6:2d:a4:1e:e5:
         e2:9c:a3:da:ab:10:49:d6:1d:4e:f4:79:b4:bc:7e:55:12:31:
         f0:87:54:5a:3a:65:56:0a:ac:c2:4b:69:70:01:46:64:2e:0f:
         f7:da:2f:20:c9:f8:54:76:c7:53:fd:ff:f6:e3:d9:12:cb:a0:
         ee:b0:6a:1e:dc:32:9d:5d:bf:f0:61:ec:de:37:84:03:59:63:
         18:6c:8d:39:a7:27:28:cf:78:4d:6a:b0:50:d0:9f:24:c5:93:
         5e:2f:5e:db:a1:b7:aa:89:b4:db:81:60:f8:c7:f8:7b:ef:fd:
         75:4e:b4:c7:db:85:f5:9b:7f:27:3c:cf:6d:97:21:dc:30:b6:
         99:9c:0e:39:57:4f:71:b4:2a:1d:32:70:2a:a1:34:93:1f:e1:
         a9:42:69:55:27:4f:e3:02:ad:87:dc:e8:70:d5:e7:92:06:52:
         a9:99:e4:5a:b4:d6:f9:3b:f1:f3:cf:fc:41:05:69:f9:43:35:
         8a:f4:b4:77:35:50:e0:67:6e:76:fd:72:28:c3:b5:00:e7:ef:
         0a:82:1e:9a:47:83:d0:b2:b4:33:d2:8b:5a:08:f3:8a:86:41:
         ec:a4:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:32 2024 by rpki-client on console-ams.rpki-client.org