Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft
File:                     u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft (raw, json)
Hash identifier:          tEnJxEpL28XDsPSHOrHcM8ew83tWN9xngkYCGYXoPGQ=
Subject key identifier:   F3:2F:DA:D7:3D:CB:B0:8D:F3:87:44:34:7C:70:D8:E5:F6:F6:4C:7E
Authority key identifier: BB:44:6B:46:9C:19:E9:55:0E:43:CC:67:3C:A3:15:A6:48:3F:AD:EA
Certificate issuer:       /CN=bb446b469c19e9550e43cc673ca315a6483fadea
Certificate serial:       019357D25C3C373812AD726B4B96CBD32B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft
Manifest number:          0FA6
Signing time:             Sat 23 Nov 2024 07:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:23 +0000
Files and hashes:         1: u0RrRpwZ6VUOQ8xnPKMVpkg_reo.crl (hash: 8KIG83sWX2WEepNZ+OcFz8DMJ2Sje7bIFMHPgumSNoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5c:3c:37:38:12:ad:72:6b:4b:96:cb:d3:2b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb446b469c19e9550e43cc673ca315a6483fadea
        Validity
            Not Before: Nov 23 07:00:23 2024 GMT
            Not After : Nov 24 07:00:23 2024 GMT
        Subject: CN=f32fdad73dcbb08df38744347c70d8e5f6f64c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:ea:09:ee:9c:bb:f3:f6:3f:1a:fe:16:09:
                    7c:f0:df:ff:93:b3:88:68:11:25:06:40:be:e0:45:
                    71:6a:85:72:7b:d5:d3:eb:d4:35:94:81:4f:26:48:
                    75:a4:23:ac:ef:13:40:0b:d8:50:fe:18:d0:98:ca:
                    b5:76:96:44:f3:c6:04:e4:91:92:5b:73:0e:fa:66:
                    8f:51:7d:0d:19:b2:cc:25:66:d3:05:30:23:68:1d:
                    b6:a0:93:93:a7:e5:36:e7:69:79:2b:5a:df:ce:74:
                    6c:50:e1:84:27:3d:09:60:9b:e6:e9:21:d4:90:38:
                    45:03:2c:07:82:eb:f2:93:8b:38:7d:1d:f8:20:5c:
                    00:66:ec:30:fd:ba:d0:16:45:2e:9a:8f:9d:ae:e4:
                    e7:d0:2e:c8:70:a6:35:0a:87:c8:8a:7b:b5:63:9c:
                    2e:73:78:bf:c6:27:a4:98:c8:2f:6f:07:e9:6b:c2:
                    a9:d8:3a:83:71:d1:6a:f3:8f:91:e8:30:be:c3:00:
                    36:13:37:db:ca:f2:b0:44:73:57:ea:2e:55:02:43:
                    7b:ee:1d:1d:8e:5c:ca:5c:cb:cf:cb:83:94:84:e4:
                    d4:10:f3:e6:08:55:3f:ce:7b:59:88:d7:b2:20:71:
                    c0:53:a5:91:2a:d9:22:74:7d:5a:17:ab:4d:49:c6:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2F:DA:D7:3D:CB:B0:8D:F3:87:44:34:7C:70:D8:E5:F6:F6:4C:7E
            X509v3 Authority Key Identifier:
                keyid:BB:44:6B:46:9C:19:E9:55:0E:43:CC:67:3C:A3:15:A6:48:3F:AD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0100dc-6be9-40e1-9138-45b863fea7ac/1/u0RrRpwZ6VUOQ8xnPKMVpkg_reo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b0:70:a4:90:c0:a0:0c:8d:56:7b:9a:92:6f:ab:55:d5:a9:
         56:1d:00:3e:73:f6:45:55:ea:b0:7b:0b:13:58:24:e8:e8:8a:
         9b:8d:65:eb:6e:f4:7d:57:bc:a1:69:49:95:5a:b7:cd:f7:63:
         2b:b2:1a:2b:92:24:f8:c9:ef:f9:43:fc:b6:ac:ec:e9:d9:52:
         78:2f:c0:15:f7:4d:ed:d3:a0:b1:5c:70:26:3b:7d:1a:64:49:
         27:b6:35:a8:a4:e8:d6:4b:ca:d5:76:00:51:b3:36:61:c5:95:
         1e:37:a7:9b:7e:09:ca:23:d5:76:8c:a5:7f:ba:97:05:bd:07:
         0d:c8:be:df:5b:16:90:a8:ad:9c:66:15:50:47:3d:5f:c8:0c:
         f8:5a:d7:7b:a6:54:bc:d4:a0:4b:e4:da:46:19:ce:c8:0a:69:
         2b:b3:5d:a5:05:58:00:c2:fe:51:e7:6c:9b:1e:5f:b3:06:7f:
         6b:85:2d:5b:ad:61:fc:04:7f:06:e8:d9:00:b1:75:f9:7f:c3:
         f7:de:a5:b8:ab:cc:c3:be:cd:8d:b7:77:b4:8e:09:4e:a5:40:
         de:cf:6a:39:c7:b4:8f:f4:8b:58:25:6a:5c:a5:e6:e8:eb:17:
         cc:87:8a:07:31:5a:f5:e7:f8:36:fb:e6:dd:5b:fd:47:c3:d3:
         0f:10:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:37 2024 by rpki-client on console-fra.rpki-client.org