Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier:          hix+XgkVCb20tcvrqTmHf0YpAK8yJ8p3kqqSeNkmmOA=
Subject key identifier:   DF:35:B7:4D:77:90:48:36:3F:85:9E:5D:1E:11:AC:7E:6B:42:8C:A8
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer:       /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial:       01938B890516E9CC10062D4A30E26B77DEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number:          0F5D
Signing time:             Tue 03 Dec 2024 08:00:32 +0000
Manifest this update:     Tue 03 Dec 2024 08:00:32 +0000
Manifest next update:     Wed 04 Dec 2024 08:00:32 +0000
Files and hashes:         1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: 1vO/jyMsYDu3sMQWEzbD9MhYS1mpxoSnb4vQdivYS+Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:89:05:16:e9:cc:10:06:2d:4a:30:e2:6b:77:de:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Validity
            Not Before: Dec  3 08:00:32 2024 GMT
            Not After : Dec  4 08:00:32 2024 GMT
        Subject: CN=df35b74d779048363f859e5d1e11ac7e6b428ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:91:2a:00:01:92:83:2a:e1:ec:3d:75:d0:
                    e6:f1:00:39:c9:c3:83:a0:e7:4c:65:27:38:2b:a9:
                    96:88:15:0c:45:85:19:b7:96:9e:36:34:ce:b7:1f:
                    7b:50:28:14:5f:89:19:64:09:93:79:23:00:7e:cc:
                    86:fd:6d:86:bd:78:1c:ee:f7:78:cc:84:2c:1a:eb:
                    f2:f3:8e:4a:0d:27:7c:cf:c2:18:ca:ac:ac:51:08:
                    87:a3:aa:e9:bf:71:35:a6:32:f5:be:bd:57:f4:99:
                    54:7b:ba:fe:b9:dd:2e:de:35:30:75:e1:01:d1:e7:
                    d8:98:4c:6c:ea:22:29:52:81:b6:3f:f5:96:04:c7:
                    0d:69:2a:93:a6:d3:1e:94:5b:53:8a:5a:4f:40:ff:
                    09:e4:e7:2a:a7:2b:ce:10:38:a9:b9:b7:21:ba:13:
                    af:1d:ab:41:2f:42:8d:2f:14:15:30:2e:c9:57:14:
                    13:2c:80:39:0d:4a:51:d3:b7:6f:42:51:53:c3:3c:
                    fa:91:13:1d:9e:c0:56:28:21:9d:1d:be:fb:72:da:
                    1e:de:56:4a:39:d2:67:d9:f3:37:a1:66:2b:94:2c:
                    a5:81:7a:b3:e6:79:59:f4:6b:8b:bc:41:37:5e:ae:
                    8e:dd:f4:79:d5:95:72:a8:65:dc:31:2a:31:df:f2:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:B7:4D:77:90:48:36:3F:85:9E:5D:1E:11:AC:7E:6B:42:8C:A8
            X509v3 Authority Key Identifier:
                keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:09:97:73:57:36:5e:68:42:db:fc:b7:b3:d9:b8:d3:e1:
         55:12:e6:17:49:7b:6e:8b:dd:eb:1e:d6:7d:6b:09:3d:77:20:
         5f:bb:a3:69:19:56:e7:42:2c:4b:20:77:1d:c2:ac:22:ba:50:
         6e:4c:30:50:25:83:e3:98:e0:1d:ea:77:cb:c6:93:58:7a:b2:
         f1:44:36:bb:d9:2b:c0:6e:b5:4a:fa:93:05:9f:36:3e:0b:42:
         96:fd:ad:40:30:29:19:7f:57:0e:7d:65:cb:f8:bc:f6:15:df:
         63:c6:51:74:f0:af:4c:25:48:84:79:f6:24:9b:e3:9f:10:d8:
         14:be:57:15:20:1c:05:ab:ce:bf:bd:94:5f:9c:04:1d:69:67:
         fd:c2:b1:29:d2:52:d5:87:44:7f:85:b5:8c:97:b5:5d:01:d1:
         c0:cc:20:0a:0b:e9:48:98:8e:dd:a2:ac:a5:53:a0:f8:86:c7:
         8d:46:97:52:63:47:95:d6:01:c0:ed:60:6e:da:97:8d:03:1a:
         45:88:7e:f7:c7:4d:f1:e3:e1:eb:53:4a:8f:de:05:c6:36:3f:
         2c:04:ee:b8:a3:1e:4f:ae:31:4c:a2:34:17:db:18:82:4d:01:
         08:f5:76:98:8e:a2:23:1d:d1:3a:cd:8f:9c:c5:1f:b5:c8:40:
         b3:b3:28:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:12:36 2024 by rpki-client on console-fra.rpki-client.org