Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
File:                     vxyx6NN85X_iALAnQQb1pYFeoi4.mft (raw, json)
Hash identifier:          ZwLxB3Qc1wE9+6/vbJrS1Ki5wEgF+8FcOeD7l5IUrXw=
Subject key identifier:   57:1B:81:47:1C:56:76:00:CF:D8:7C:FD:90:84:24:7B:E6:DF:B1:E1
Authority key identifier: BF:1C:B1:E8:D3:7C:E5:7F:E2:00:B0:27:41:06:F5:A5:81:5E:A2:2E
Certificate issuer:       /CN=bf1cb1e8d37ce57fe200b0274106f5a5815ea22e
Certificate serial:       0193568A28FD6F8A4D6A962CBC0FA145D180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
Manifest number:          136C
Signing time:             Sat 23 Nov 2024 01:01:55 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:55 +0000
Files and hashes:         1: vxyx6NN85X_iALAnQQb1pYFeoi4.crl (hash: H9L1pQkxcJp/bofZbWzAVwJIb7mf8N8o9dUZfmIr+v4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:28:fd:6f:8a:4d:6a:96:2c:bc:0f:a1:45:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1cb1e8d37ce57fe200b0274106f5a5815ea22e
        Validity
            Not Before: Nov 23 01:01:55 2024 GMT
            Not After : Nov 24 01:01:55 2024 GMT
        Subject: CN=571b81471c567600cfd87cfd9084247be6dfb1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:e4:09:6b:4d:aa:3c:4d:de:f3:fd:b4:e3:
                    38:82:66:d2:15:0c:7b:8d:ff:3d:86:ae:c0:dd:b6:
                    f9:7d:e5:3c:d9:3c:42:b0:bc:97:71:c3:08:56:33:
                    1f:7f:8a:4e:8c:2f:23:2b:14:f4:0d:5b:5c:db:6f:
                    22:76:6b:56:08:4c:54:0c:44:91:4f:a5:f7:10:48:
                    2f:e5:ab:e9:2a:8b:c4:49:16:4f:0d:ab:4f:bb:82:
                    cf:46:1e:3d:db:04:a9:02:97:e6:cc:1d:0a:78:ab:
                    30:40:dc:73:3d:4c:c5:34:c6:9f:a7:b6:4e:d5:f6:
                    47:d1:61:9c:41:81:b9:78:1d:6b:c6:44:c3:0c:30:
                    a1:c3:45:3a:1a:43:da:10:b8:c3:78:0d:7b:f4:63:
                    2f:ae:9f:c1:3e:3b:12:2b:bb:44:9f:f8:7b:b7:9e:
                    51:15:ab:5d:b4:1c:e8:94:de:39:ee:84:8b:1e:cf:
                    a3:e8:9e:9b:44:82:8a:cd:5b:06:45:9d:2f:76:bb:
                    64:7a:85:07:ac:3d:48:a4:09:3f:1b:d5:5a:c3:bd:
                    5c:a9:c0:cc:19:cf:43:50:df:32:d5:b0:8f:8d:70:
                    1a:46:95:6b:cc:d7:2b:e2:c7:f1:14:78:e5:8c:8c:
                    2b:c4:ad:43:0b:e6:08:3c:79:69:bc:9f:71:24:98:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1B:81:47:1C:56:76:00:CF:D8:7C:FD:90:84:24:7B:E6:DF:B1:E1
            X509v3 Authority Key Identifier:
                keyid:BF:1C:B1:E8:D3:7C:E5:7F:E2:00:B0:27:41:06:F5:A5:81:5E:A2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxyx6NN85X_iALAnQQb1pYFeoi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bc86bd-e3c4-4172-bc10-0251d104dd46/1/vxyx6NN85X_iALAnQQb1pYFeoi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:db:3d:34:6f:3d:2f:bf:db:85:42:c3:ca:a6:80:32:32:
         58:b9:b5:c1:73:d1:82:8f:ff:e2:ad:6e:38:cb:10:5f:51:d3:
         be:47:30:2b:c8:1c:2e:67:bb:0e:71:12:99:6f:07:e2:7b:30:
         b5:e9:5c:c5:08:37:49:d3:66:61:ef:8e:cd:45:45:eb:98:2f:
         95:5e:86:14:ff:9a:f8:43:cf:69:36:f9:73:03:f5:c1:71:6f:
         70:bc:a4:88:5f:ca:2a:ab:e0:ad:89:ec:d8:0f:f1:6c:86:52:
         6c:70:ea:9a:43:ed:a7:13:47:7e:15:66:89:47:28:5a:d4:e0:
         d5:e1:20:64:3e:7e:b4:8a:56:f7:d9:19:47:b7:cb:87:8a:17:
         fb:06:61:1b:8b:b3:66:2a:a9:db:4e:1e:f1:87:10:48:6f:ab:
         58:ec:f6:b9:49:ab:31:9d:ef:bb:03:90:2d:3b:bd:98:43:af:
         e4:45:3d:f5:2e:54:1f:44:55:71:df:2b:0c:45:9d:de:ed:0a:
         6b:07:65:18:b1:84:a9:26:90:26:a1:5c:48:b9:0a:c9:8b:81:
         93:d0:0e:c3:f0:62:b9:04:ed:3c:d4:67:cf:e0:81:45:82:5c:
         56:d5:9c:83:b1:6a:0f:90:13:6a:9a:98:59:6a:be:7d:8a:16:
         b2:a6:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:27 2024 by rpki-client on console-ams.rpki-client.org