Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File:                     PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier:          lIwLyRZMlcnv7rFKpaoLZjWAQPH4wGMJWGQHZzswOU8=
Subject key identifier:   E9:89:10:91:89:1B:F9:1E:46:4E:FB:2A:22:8A:52:00:8F:63:D7:BA
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer:       /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial:       01935877489D026CDDF90F03619854FF28B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number:          0778
Signing time:             Sat 23 Nov 2024 10:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:32 +0000
Files and hashes:         1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: jpI8WtgGIqN9CFlv+a7zSfN8tu9PVY9ADZHuwmBcUi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:48:9d:02:6c:dd:f9:0f:03:61:98:54:ff:28:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
        Validity
            Not Before: Nov 23 10:00:32 2024 GMT
            Not After : Nov 24 10:00:32 2024 GMT
        Subject: CN=e9891091891bf91e464efb2a228a52008f63d7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e0:e6:ef:8b:e0:0a:56:1b:d0:14:96:b8:da:
                    56:17:eb:03:8f:65:d1:9b:fa:14:ac:9b:8b:de:70:
                    b2:46:c3:e4:45:52:88:f0:77:62:69:0e:11:5c:b8:
                    21:4b:84:13:2a:6b:6e:19:37:82:f3:f6:ec:5b:9a:
                    01:02:f2:82:a9:f8:a8:1e:c8:49:75:d0:d2:44:b1:
                    e6:38:c5:df:37:37:89:32:50:2a:2f:86:46:c6:05:
                    ef:1e:83:7c:5a:a1:65:4b:24:b9:a5:65:20:df:25:
                    a3:51:64:8a:e2:b0:00:d5:09:28:5b:f4:56:6f:b1:
                    92:5c:04:04:12:d7:68:4a:a6:52:15:53:a3:62:d8:
                    21:46:e8:77:9e:87:d6:94:10:4f:75:ea:b6:b4:f5:
                    f0:04:c7:e2:3e:a5:7e:d3:84:69:88:d4:05:5d:a6:
                    cf:a7:f3:0c:ef:a4:b7:c3:3c:fd:86:20:1a:6e:98:
                    5b:9c:ac:44:34:07:dd:43:0d:83:37:f0:24:24:bd:
                    bc:d9:c9:83:f3:fa:2b:70:b7:72:cc:c8:6b:cb:47:
                    92:24:34:a2:85:65:2e:98:fb:c5:2c:dd:ad:10:ee:
                    4a:e3:aa:bd:e9:52:f5:85:94:9b:11:57:a4:cf:7a:
                    7f:db:5d:97:8d:fb:63:d6:0a:17:c4:7c:77:88:ba:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:89:10:91:89:1B:F9:1E:46:4E:FB:2A:22:8A:52:00:8F:63:D7:BA
            X509v3 Authority Key Identifier:
                keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0d:6e:ca:4c:f8:65:ac:86:6d:a0:20:85:10:c2:85:31:a5:
         38:01:83:49:8b:65:47:ac:ea:66:89:15:fd:99:59:02:cb:dc:
         64:dc:eb:b1:a2:74:b7:15:51:ad:b8:8f:69:30:f2:15:d1:f5:
         6a:7c:97:7d:3c:6a:b4:1a:cc:92:a8:b8:d3:7b:bb:e9:e5:0a:
         43:9f:7f:c8:36:0d:aa:d7:01:e2:38:e2:38:d2:c8:4b:28:7d:
         44:03:b2:24:38:a7:df:0e:8c:bd:99:e2:74:ab:67:aa:9b:05:
         b6:de:84:03:b3:35:be:9f:1d:06:de:19:ba:99:bc:35:a6:a5:
         e6:61:fa:67:7d:94:11:ec:ab:b5:df:01:bd:5b:70:90:8a:bd:
         60:38:24:9c:42:4c:48:64:a0:fc:58:5b:9a:2d:5d:fe:db:82:
         47:e2:f9:eb:03:40:0b:14:bc:93:24:69:8e:e9:a2:d1:ae:4b:
         e3:91:a8:f2:4c:79:c8:34:4b:f6:56:57:40:09:3e:83:16:97:
         36:97:79:f9:c7:ec:2d:73:88:84:7c:59:5e:cc:84:5a:af:72:
         17:80:9e:d5:5f:5b:48:a0:b3:33:51:7c:fa:32:70:92:ec:99:
         bb:b9:e3:15:cf:90:9f:69:80:4d:50:10:41:73:f9:0a:8c:a9:
         9f:b7:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:04 2024 by rpki-client on console-fra.rpki-client.org