Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
File:                     FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json)
Hash identifier:          dh5m5hfq5tQMutsw5pgJTxt6g4aKDlJot/W5o1yNaCM=
Subject key identifier:   46:CE:7E:5D:2C:53:B4:46:4C:E5:D3:A8:29:60:1E:83:46:A1:15:15
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Certificate issuer:       /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial:       019369D945CC72B3D3C8F85D4C7047CF59DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
Manifest number:          092C
Signing time:             Tue 26 Nov 2024 19:01:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:07 +0000
Files and hashes:         1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: SnwDUpIOqXylpnY9a6vvPiAMuIrCmfrYWd1hDyCkTyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:45:cc:72:b3:d3:c8:f8:5d:4c:70:47:cf:59:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
        Validity
            Not Before: Nov 26 19:01:07 2024 GMT
            Not After : Nov 27 19:01:07 2024 GMT
        Subject: CN=46ce7e5d2c53b4464ce5d3a829601e8346a11515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:35:e7:38:68:cc:c7:59:cb:97:d6:89:a5:
                    d1:4e:9c:15:0c:23:b9:04:e3:bd:50:ad:f0:a5:40:
                    a3:c5:e9:27:f2:88:71:f5:c1:ac:70:ae:5b:aa:76:
                    42:c4:12:9d:2f:3d:5f:10:de:e9:7e:5b:68:88:f3:
                    9c:31:d0:7c:0a:21:23:6e:3f:8d:8e:fd:ca:d2:67:
                    4d:cd:f9:99:57:91:ef:d9:21:51:e2:c3:74:a8:26:
                    ac:01:a5:f5:b0:90:29:93:49:f0:32:a1:5b:13:b2:
                    3b:41:df:f8:44:52:8e:13:0a:bf:65:1e:ef:49:e9:
                    e5:76:d3:63:bd:52:ea:e0:94:b6:8b:43:93:23:0c:
                    0c:94:0a:b6:95:96:11:b1:b9:9b:ed:e0:db:82:0d:
                    7b:a7:bc:9d:f0:3f:76:4b:72:1b:98:e4:b1:44:7c:
                    8d:2a:12:5c:6a:be:54:1f:3a:d5:be:32:2f:59:a3:
                    e2:a2:61:9b:b2:57:6f:1f:9a:52:04:d7:be:26:3d:
                    d0:1e:e5:8e:19:05:83:f5:21:63:c4:f0:d2:76:2b:
                    d2:ac:d9:76:32:1d:06:7b:0e:2b:65:1a:09:12:23:
                    3d:1a:7c:24:cf:cd:0a:df:b4:f6:30:d5:5d:16:7f:
                    62:a3:36:cd:73:1e:e2:98:3f:78:fd:d7:1b:ba:7b:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:7E:5D:2C:53:B4:46:4C:E5:D3:A8:29:60:1E:83:46:A1:15:15
            X509v3 Authority Key Identifier:
                keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:04:2b:e5:5c:f3:64:02:3b:61:29:13:10:99:c4:e2:fe:63:
         40:a7:78:b3:fb:fb:19:1e:b8:ee:34:b0:15:bd:c1:57:67:be:
         06:75:e5:a8:63:d2:19:38:72:9b:3d:cd:c6:d9:0b:e6:1f:77:
         dc:d9:1b:ab:14:c5:fa:96:ef:98:ca:b0:52:3e:7e:92:f2:f1:
         58:4d:02:d5:47:89:73:dc:ec:5e:3c:4d:3d:dd:8f:91:11:d7:
         69:83:69:2d:6d:51:17:7d:38:d0:e4:c7:8a:d5:b2:c9:07:10:
         d2:92:c8:1c:e9:32:f4:8e:91:82:77:f7:e2:11:72:a2:34:e6:
         97:f4:15:3b:79:58:fc:80:14:3b:77:90:98:29:7e:c5:4a:93:
         c6:4e:c7:67:52:13:94:91:60:b4:54:7e:ba:0f:d9:22:63:a4:
         0d:47:27:9f:07:7f:90:81:8c:3c:78:20:66:7c:92:01:2f:21:
         c7:96:49:6f:d2:83:fe:1c:87:fb:a7:1c:b5:b3:e8:6e:42:e9:
         fb:21:2a:a6:35:33:fa:61:08:34:ab:55:79:94:02:f0:fb:0d:
         0c:95:9d:53:99:55:7b:1f:a0:4c:a6:7d:d0:29:31:4d:82:6f:
         c8:74:fa:76:84:46:b9:35:a3:db:c7:61:02:7a:e8:fd:26:f8:
         6a:ce:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:07 2024 by rpki-client on console-fra.rpki-client.org