Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File:                     Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier:          TmCW7t70BRZ7J4BIPvzAeINoIP7iOGHD6dq7qjnQj2A=
Subject key identifier:   63:86:0A:EE:70:AD:67:F3:B8:C8:D5:84:A4:CA:86:FB:18:CF:EB:E4
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer:       /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial:       019369DAC7C006CA9ED70488BBC60DD0A867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number:          11B8
Signing time:             Tue 26 Nov 2024 19:02:45 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:45 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:45 +0000
Files and hashes:         1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: M8I8yCqXaULuIBi83ZErN2SG4A83V/c7uDhYmkIjfJ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c7:c0:06:ca:9e:d7:04:88:bb:c6:0d:d0:a8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
        Validity
            Not Before: Nov 26 19:02:45 2024 GMT
            Not After : Nov 27 19:02:45 2024 GMT
        Subject: CN=63860aee70ad67f3b8c8d584a4ca86fb18cfebe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:23:34:81:cb:fc:8e:a8:a7:03:a1:02:9d:
                    f6:8a:e6:9e:d0:81:98:6b:34:54:71:46:51:e5:32:
                    f9:ec:fb:97:46:4e:1c:1c:d8:2e:10:43:98:2f:a5:
                    ff:ce:a9:7a:b0:e2:3e:c4:1b:90:c2:d6:39:9a:40:
                    18:e3:65:0c:ed:27:b7:cc:70:b0:d5:c7:3b:8b:3b:
                    2b:ae:07:5b:09:43:77:6c:2b:6a:c0:5d:48:38:06:
                    92:90:c8:23:76:33:38:14:58:45:af:83:49:3c:24:
                    d8:76:7b:fc:4d:ce:96:9b:d1:97:29:06:7d:31:11:
                    65:c3:3b:1b:a6:9e:f6:7d:4a:8b:fa:d5:76:90:19:
                    fb:72:b3:56:ba:00:74:5a:10:a6:c6:1b:e4:ab:f6:
                    f6:30:85:f8:b2:10:2d:a9:e7:dd:bf:8f:02:66:e1:
                    c3:77:2f:56:cc:a2:02:45:2b:00:58:2b:1e:49:09:
                    8c:82:a0:6f:34:1e:91:a1:89:d5:ba:98:8c:fc:4d:
                    7e:02:88:04:37:7d:5b:bd:f0:ff:96:a4:c9:e8:e0:
                    4a:0b:ec:59:e9:59:86:2a:3c:24:4a:a2:30:14:95:
                    03:b3:5b:e6:51:f3:79:43:03:86:32:4c:6c:c0:a7:
                    b8:8e:4d:e4:ed:4c:a4:89:5a:90:12:df:df:ab:5e:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:86:0A:EE:70:AD:67:F3:B8:C8:D5:84:A4:CA:86:FB:18:CF:EB:E4
            X509v3 Authority Key Identifier:
                keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:35:15:56:43:96:1b:a2:61:1c:fb:36:31:ad:38:71:66:49:
         de:11:e3:cc:2b:33:68:9c:24:0a:ef:59:23:9b:57:50:f0:65:
         e0:cd:ba:e3:5b:31:dc:e5:d5:fc:b1:57:c8:8c:9d:54:6d:e2:
         df:10:ce:64:38:ef:33:bf:c9:51:f2:5b:83:7d:6b:48:b1:9a:
         9e:8e:d9:ff:6d:b2:93:49:40:55:94:dd:30:5a:dc:3f:b4:7b:
         46:d9:33:0a:44:0e:56:b3:78:26:7c:b3:a6:d6:c0:c1:bf:1f:
         89:f0:be:93:f3:98:fc:99:ea:db:6c:d9:53:3e:3e:bb:f1:9d:
         79:c6:3e:24:4f:ac:81:26:7c:44:01:e1:bc:e1:81:f5:98:3a:
         ae:9e:97:e7:c9:18:48:47:18:31:95:5d:49:95:0e:f7:e5:a5:
         65:8e:64:d7:9e:6c:a0:83:08:5e:d3:25:eb:63:c2:65:a2:aa:
         94:ea:d4:50:37:5c:73:a7:34:20:34:33:96:e9:85:74:06:5a:
         53:11:9e:54:9a:bd:37:cc:95:da:e7:a5:2e:35:ef:87:c3:bd:
         9f:f0:35:37:c1:ee:cc:7d:93:de:89:8b:5d:f7:da:d4:0f:7c:
         d5:ce:60:a5:4a:4f:a2:d2:4a:81:f2:6e:38:86:a8:e2:51:88:
         f7:22:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:07 2024 by rpki-client on console-fra.rpki-client.org