Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
File:                     Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json)
Hash identifier:          SzlNAkkMUQ0p7x1n1H9eU/RkwmBMKAnJpfUwLnLRbXs=
Subject key identifier:   96:ED:54:E9:0A:6E:68:13:B2:F3:F8:D1:2A:07:8B:7F:6F:80:3D:4A
Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4
Certificate issuer:       /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
Certificate serial:       019331D7DD1C87D980A7651F890CD042A83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
Manifest number:          02B8
Signing time:             Fri 15 Nov 2024 22:00:50 +0000
Manifest this update:     Fri 15 Nov 2024 22:00:50 +0000
Manifest next update:     Sat 16 Nov 2024 22:00:50 +0000
Files and hashes:         1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: DNlp6WKkSVcsIp08cZsax8xZCcxMDMi9K7ZAqCRPW6A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:31:d7:dd:1c:87:d9:80:a7:65:1f:89:0c:d0:42:a8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4
        Validity
            Not Before: Nov 15 22:00:50 2024 GMT
            Not After : Nov 16 22:00:50 2024 GMT
        Subject: CN=96ed54e90a6e6813b2f3f8d12a078b7f6f803d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:32:ad:68:87:cf:0d:77:05:79:00:8e:3f:
                    e7:00:de:d8:5e:a9:97:c5:84:ad:ca:b8:a8:28:a7:
                    41:8d:22:d6:1f:b6:e1:a1:82:16:fc:76:39:e3:d1:
                    2a:04:5c:c6:7d:f4:70:3d:e2:12:77:fc:63:a2:0e:
                    1e:36:91:43:70:a5:07:b9:b6:35:d9:df:76:a7:fe:
                    50:38:4b:da:c7:44:f5:e2:c0:c5:5b:cc:bf:0b:94:
                    9e:ae:4f:d9:ab:d4:9e:c5:f3:e2:a9:04:b6:d0:ac:
                    9d:fc:29:36:df:97:b3:19:85:75:74:de:23:a7:db:
                    47:fb:06:d6:4a:4f:81:ac:78:b0:19:9a:6c:d8:e6:
                    c5:72:5b:5e:30:64:79:51:99:64:97:92:d9:5b:54:
                    f5:ce:0f:1e:79:5c:ec:3b:78:0c:9f:27:92:eb:6f:
                    b6:ed:bd:c5:6f:4d:66:16:60:fe:0b:bc:37:c5:fd:
                    eb:53:1a:39:5a:84:1a:7a:15:a6:24:ff:31:86:0b:
                    5c:f3:7c:f4:c0:c5:76:14:01:ae:37:fb:4a:08:7d:
                    4b:d6:aa:06:d8:06:57:10:82:e0:d0:97:6b:c3:07:
                    4b:d4:88:40:66:0d:2b:37:d5:a0:02:78:8e:dd:7c:
                    43:3e:b6:8f:b7:b1:0b:ca:c4:10:94:49:ad:27:a2:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:54:E9:0A:6E:68:13:B2:F3:F8:D1:2A:07:8B:7F:6F:80:3D:4A
            X509v3 Authority Key Identifier:
                keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d2:26:69:cc:f9:a4:28:7e:49:0a:be:fc:20:c4:d3:f5:67:
         3f:d3:af:64:d4:15:4d:b4:e2:da:50:70:d5:3e:f1:40:1f:f5:
         27:bd:2d:9f:4d:5f:88:55:28:33:22:50:bc:4f:58:93:ba:97:
         ec:3a:51:f5:81:54:a5:b6:49:94:ad:64:e2:a9:95:2a:cc:8a:
         20:5a:1e:15:ab:ed:39:3a:bc:5b:9c:32:71:2b:cd:e0:c4:c7:
         08:cc:b1:c0:5e:c5:96:8f:a4:03:92:96:72:4e:fa:ab:47:3b:
         78:61:f6:02:7c:40:eb:b4:ca:21:0c:86:56:9d:1d:cc:eb:30:
         46:d9:dd:ef:fc:de:67:a0:3e:72:c8:b4:76:63:47:1a:27:b5:
         b2:40:1e:63:45:bb:ff:88:f9:80:1c:fd:31:53:e1:6a:59:0e:
         76:f1:1a:8b:54:3b:05:f6:1d:73:cd:46:5a:a3:3b:8b:ce:b1:
         48:9a:c1:b3:bb:a6:c6:07:48:ea:57:40:be:32:4c:ab:8f:5e:
         67:f8:f2:8d:ff:ee:2b:7d:6e:53:90:71:9c:fd:fe:d3:59:fb:
         d9:d2:74:8e:00:9c:9f:23:e3:ce:d3:5b:b0:30:8e:76:8c:85:
         f0:9c:9e:62:89:0e:cb:dd:c4:7b:6b:5a:ec:59:d6:56:a7:38:
         9a:94:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:36:10 2024 by rpki-client on console-ams.rpki-client.org