Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File:                     LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier:          6KsgD4jCiGnYGCsopER5O7/1oik///x92ynyWQW9+r8=
Subject key identifier:   B0:02:CF:08:AD:B7:3B:89:D8:E1:4A:6D:FB:F8:63:99:FB:03:4D:E9
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer:       /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial:       01935764C7054AE9662E850BF892B7ECFC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 05:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:42 +0000
Files and hashes:         1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: lW99mjA5JVVSiuCkzOQ9dxHBoyiJLZuEpAmRMUQ2rbQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:c7:05:4a:e9:66:2e:85:0b:f8:92:b7:ec:fc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
        Validity
            Not Before: Nov 23 05:00:42 2024 GMT
            Not After : Nov 24 05:00:42 2024 GMT
        Subject: CN=b002cf08adb73b89d8e14a6dfbf86399fb034de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:be:04:23:6e:ec:8b:d7:8c:bc:69:90:bf:
                    11:41:58:ae:98:fb:97:e3:fb:f0:31:84:23:4a:8d:
                    22:7a:d3:dc:47:b5:82:db:d7:61:92:5f:d3:22:24:
                    ed:92:d3:3b:2c:72:7e:2a:fd:d3:32:7a:63:43:e6:
                    61:de:cd:8b:2a:92:90:1d:9e:dd:dc:e4:01:35:81:
                    75:b3:33:71:1f:37:36:49:c5:41:39:89:4d:1d:17:
                    aa:30:1e:1a:ac:61:b4:5f:4c:14:a2:8b:04:81:0c:
                    7d:ce:35:b2:ef:3b:77:e1:b5:d6:9b:27:7f:72:24:
                    44:dc:32:b6:15:31:40:6f:9f:3b:01:83:75:21:2b:
                    97:ba:ad:8c:3f:1f:58:fb:33:7e:5e:b5:4f:26:ea:
                    4b:92:af:93:61:ba:8b:11:1e:79:19:db:43:88:b4:
                    fd:78:79:65:1b:df:84:eb:95:3a:3f:ae:24:40:26:
                    06:b8:06:b9:be:b5:f7:d3:06:d3:c2:22:c3:90:d7:
                    df:dc:a8:6c:47:d3:dd:df:c9:3c:78:10:7b:ee:a9:
                    44:5e:08:e7:3e:e1:f2:98:18:b0:73:58:80:4f:89:
                    75:f7:0c:20:b7:e8:a8:56:23:b9:14:2c:4a:ac:48:
                    0f:36:88:8d:00:6a:83:2e:93:01:49:79:13:ce:04:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:02:CF:08:AD:B7:3B:89:D8:E1:4A:6D:FB:F8:63:99:FB:03:4D:E9
            X509v3 Authority Key Identifier:
                keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0d:a6:a6:65:77:d1:cb:65:76:1b:c2:69:6b:5f:ef:d3:6c:
         2e:5b:aa:83:b6:3f:75:f2:91:cf:ba:62:7a:2c:60:01:90:16:
         b5:31:35:c8:e7:50:31:59:ed:aa:4d:24:16:33:9e:f2:0c:fd:
         6b:bc:56:e6:0d:d5:d5:2e:8f:8e:34:19:9f:90:42:44:35:17:
         5b:9a:64:fb:d9:08:e2:18:20:da:63:38:db:c4:f8:91:b7:9c:
         3b:64:ce:7e:e7:67:b0:d3:61:f5:a6:66:20:b0:a3:e5:f4:2b:
         b8:28:81:1e:7d:63:f0:63:5b:77:f1:0e:c1:bc:0f:b1:94:d8:
         fb:b7:b8:cb:16:fe:50:7f:f1:e7:ee:fa:6d:1e:04:68:96:be:
         8b:ee:f7:37:7f:d5:ab:3e:28:a3:7b:fa:12:b6:dd:bd:8d:d6:
         ef:45:a6:e1:9f:c0:d3:52:04:ac:86:90:0e:60:f2:00:49:6b:
         18:de:d0:1c:fe:c5:62:83:fa:d9:bd:ba:f7:78:74:78:79:4b:
         60:97:d7:9b:30:60:19:25:4e:76:9b:e6:59:e0:00:41:08:6e:
         da:9d:8c:2d:cd:6e:83:19:ac:4a:0a:ca:53:e0:2c:c2:c3:a4:
         69:37:db:8a:5d:a5:86:5a:8b:ae:07:72:3a:f7:d8:01:17:1d:
         4c:d2:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:52 2024 by rpki-client on console-fra.rpki-client.org