Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File:                     vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier:          ozaqrtuhAzkRtiQa/POSTiPJS3qskbtdQP7z1yjDYxo=
Subject key identifier:   56:0D:BB:79:54:04:A9:93:F0:3D:D3:6A:D0:5F:87:54:E8:7A:2B:A5
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer:       /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial:       01936B229244A146D513C728C513882BF4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number:          10B5
Signing time:             Wed 27 Nov 2024 01:00:47 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:47 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:47 +0000
Files and hashes:         1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: X651flTzOHsHqXOYQMh9jwbDo5ZtjRbYuspDMRzIlTU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:92:44:a1:46:d5:13:c7:28:c5:13:88:2b:f4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
        Validity
            Not Before: Nov 27 01:00:47 2024 GMT
            Not After : Nov 28 01:00:47 2024 GMT
        Subject: CN=560dbb795404a993f03dd36ad05f8754e87a2ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:38:1d:81:dc:ab:24:6c:02:8b:79:57:0f:
                    74:f8:1d:fb:9c:53:b7:c0:a9:75:97:04:ba:fb:4b:
                    f6:4f:97:d7:e1:00:33:5b:38:b3:48:af:a3:26:e9:
                    e9:71:b2:24:a1:48:67:aa:33:ed:51:14:3a:c6:cb:
                    6e:05:fb:4a:c5:bd:f1:5d:cc:56:52:90:c5:78:4b:
                    ff:c9:85:ce:99:75:1f:1c:f8:95:ca:a5:90:d5:d9:
                    33:a4:b4:a5:96:bc:55:6c:87:14:1c:fa:84:cb:70:
                    1b:95:cc:61:1b:9a:fc:77:ab:db:52:57:63:71:a0:
                    02:16:1e:f6:7a:37:89:9e:cd:19:f1:13:47:9e:c3:
                    c8:ca:00:8a:64:43:72:c9:f7:05:19:e7:63:01:94:
                    a9:ff:f2:36:2d:df:7a:74:5e:a9:d7:3e:fb:f7:58:
                    de:f9:12:d0:11:07:c4:f8:a4:49:58:84:7f:31:2a:
                    33:94:62:38:b9:85:c2:c9:3d:df:47:b3:c8:8d:de:
                    57:ee:1c:82:96:dc:f9:47:a1:05:72:91:f0:e1:86:
                    a5:92:84:e1:54:52:2b:d1:31:23:88:b8:f2:dd:83:
                    6d:3a:98:dc:bd:6e:8a:ec:c0:fa:23:a1:42:8e:7f:
                    c9:0f:45:d7:01:4a:0e:83:2e:34:ee:5f:de:6b:5f:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:BB:79:54:04:A9:93:F0:3D:D3:6A:D0:5F:87:54:E8:7A:2B:A5
            X509v3 Authority Key Identifier:
                keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:f0:a5:90:ab:e8:60:32:e7:be:fe:2d:4a:91:4c:d7:c8:
         89:ee:f7:b5:b1:a1:80:74:6f:29:76:61:f9:8e:9b:43:6a:61:
         8d:a2:07:fe:0e:c1:15:5a:db:f2:14:dd:9c:c5:82:52:5f:96:
         5b:55:68:bb:e1:39:5c:88:15:e3:cb:99:ca:40:5e:02:72:1c:
         06:61:c1:7d:64:75:93:55:a3:27:7e:27:81:82:71:a4:fa:08:
         a4:c6:ad:45:62:b1:b5:62:99:4d:fd:b3:a6:2e:fa:57:26:be:
         87:6a:03:c0:d6:ce:33:13:e1:ec:56:02:a2:d5:9a:b2:49:ac:
         e2:d4:74:73:64:09:9c:b3:b2:fb:67:60:ef:5c:61:4b:98:c8:
         87:15:00:86:69:4a:38:61:97:95:ad:9a:32:1d:d7:40:b2:db:
         7d:22:fa:34:93:48:6c:3c:6c:ab:e2:12:d3:7f:4a:e7:8e:74:
         9d:79:be:39:31:a5:3c:91:06:d5:1a:0d:1b:0b:d4:58:cf:9f:
         1b:96:83:ee:f6:bc:f0:0d:fe:4b:18:78:14:99:18:2a:0f:b8:
         71:6e:7c:c8:bd:6f:b8:94:c6:ad:0e:0c:fa:81:48:57:62:be:
         75:cb:ae:83:a4:be:94:66:54:f3:8b:a1:d8:75:c2:c4:e2:3e:
         25:89:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:49 2024 by rpki-client on console-fra.rpki-client.org