Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File:                     j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier:          x+sILL8KUJGxWvl3trk0jG5Dv6XeV65rMuKVHnJEAEU=
Subject key identifier:   5D:32:D4:D4:CC:6F:CE:19:8B:C5:18:9F:94:53:02:42:28:77:8E:74
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer:       /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial:       019369D8E33CEF3BF75B22C9C1EB0D3ABF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number:          05C7
Signing time:             Tue 26 Nov 2024 19:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:41 +0000
Files and hashes:         1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: 8RjpfSkZnfE5/AENzawhDIJHGlAr6VUqKfITmO/M6dE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:e3:3c:ef:3b:f7:5b:22:c9:c1:eb:0d:3a:bf:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
        Validity
            Not Before: Nov 26 19:00:41 2024 GMT
            Not After : Nov 27 19:00:41 2024 GMT
        Subject: CN=5d32d4d4cc6fce198bc5189f9453024228778e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fc:00:c8:9c:ef:db:01:a2:35:33:f1:5e:32:
                    95:a3:43:ba:5e:8a:71:76:b6:5c:80:d5:e7:67:e4:
                    47:34:57:28:ce:a1:c8:6f:c2:8d:a5:59:ea:d9:35:
                    b1:47:1c:78:64:f7:8e:b9:77:f0:39:1b:44:b3:19:
                    4e:d8:dd:fa:59:4e:3d:d1:ac:41:20:af:95:81:53:
                    2a:8e:98:19:f3:b0:2b:05:c0:82:8f:70:ab:9c:7d:
                    a5:d4:13:e6:ea:0b:91:ad:2d:69:46:a0:71:da:77:
                    0d:b0:d9:5c:8e:c9:18:3d:76:60:54:11:d3:4b:fb:
                    bb:03:cd:97:3d:7c:cf:6a:c9:84:ba:4a:aa:a6:f8:
                    33:ab:06:7c:fe:bc:78:6a:95:ce:13:e7:60:af:16:
                    94:65:a9:08:7a:d4:06:50:ae:b6:f6:6a:d8:c1:81:
                    1c:b5:54:f8:37:60:b8:b5:8f:b2:0c:7b:4b:de:47:
                    d7:54:4c:f7:b7:71:dc:71:3c:85:e1:b7:d8:0b:c1:
                    c7:db:ab:ad:97:d5:57:65:32:e6:44:7d:7a:80:61:
                    69:e8:16:e5:ef:3b:91:17:ab:cd:0d:d4:ae:23:87:
                    f3:eb:83:d5:84:d5:8e:ea:e6:f9:84:49:c8:8d:82:
                    44:6d:c8:af:7f:a0:61:64:b3:c5:b2:3f:16:d4:99:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:32:D4:D4:CC:6F:CE:19:8B:C5:18:9F:94:53:02:42:28:77:8E:74
            X509v3 Authority Key Identifier:
                keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a0:eb:73:3e:52:1d:e1:f5:61:03:22:b3:6b:73:06:e2:54:
         39:7f:d8:f0:e3:19:82:bb:52:14:e7:39:a9:17:d8:85:0c:f2:
         cb:58:b7:4c:5b:b3:dc:39:31:c6:b9:5c:49:78:90:9f:b7:49:
         a0:63:44:1a:83:a3:f2:d4:8e:d1:a4:82:ee:86:d2:43:1b:5e:
         0d:b0:de:82:2e:b8:55:42:8e:85:b4:cf:c2:e8:53:ce:70:6d:
         a6:d3:04:e7:c0:3a:1e:6d:51:b5:87:7e:ab:92:bd:c3:78:70:
         70:ad:42:01:f6:04:53:64:43:c6:21:12:ad:2b:91:d4:f0:83:
         2c:58:34:89:9a:64:28:9a:62:1e:8c:36:3b:ce:eb:c6:bc:d7:
         87:09:17:c6:a8:5e:45:42:2e:21:40:3c:b0:e2:b9:3a:cf:9d:
         20:f9:45:bc:82:73:dd:e2:26:ae:a1:dc:e9:dc:4d:6e:33:6f:
         c7:1e:25:aa:c4:c4:64:14:85:b5:43:ac:9d:49:85:13:02:f2:
         d6:12:95:91:dc:38:90:15:50:9e:a7:44:d4:40:dc:d5:36:db:
         8c:bd:d9:2a:fa:18:9e:ca:24:df:e3:98:47:93:f4:7a:5c:ea:
         39:b3:bc:3a:6c:a5:c4:d4:ec:8a:b6:85:2c:1f:5d:70:93:64:
         2a:58:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:19 2024 by rpki-client on console-fra.rpki-client.org