Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
File:                     skX7DTNtIH91Ns4pX55phiihTuQ.mft (raw, json)
Hash identifier:          dt8hb5dIJN2M1IbgEkVMs1zA9bICmMuR542ZFJNJw2Y=
Subject key identifier:   5A:AB:8C:17:6D:97:3E:56:79:C2:6A:E8:53:AE:16:85:61:E8:78:15
Authority key identifier: B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4
Certificate issuer:       /CN=b245fb0d336d207f7536ce295f9e698628a14ee4
Certificate serial:       01935877D3B69BE416FF5D67AC78A53C95B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
Manifest number:          077E
Signing time:             Sat 23 Nov 2024 10:01:08 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:08 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:08 +0000
Files and hashes:         1: skX7DTNtIH91Ns4pX55phiihTuQ.crl (hash: D8mX1hSKRvvlSDYjbPBvU/9Exn6kX89K6nVuPtfHnPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:d3:b6:9b:e4:16:ff:5d:67:ac:78:a5:3c:95:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b245fb0d336d207f7536ce295f9e698628a14ee4
        Validity
            Not Before: Nov 23 10:01:08 2024 GMT
            Not After : Nov 24 10:01:08 2024 GMT
        Subject: CN=5aab8c176d973e5679c26ae853ae168561e87815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:19:07:25:16:cc:19:06:22:0f:be:39:57:
                    e7:bc:82:ca:96:94:90:c3:55:6e:b8:4a:4b:55:dc:
                    87:01:1d:ea:aa:9c:ed:cc:fc:70:13:82:98:66:c5:
                    1f:02:a8:40:0d:c6:f3:82:59:40:04:db:4f:93:ea:
                    a2:b1:1b:1b:79:67:36:23:2b:a3:9a:52:3c:6d:8d:
                    39:08:e3:50:56:49:ac:dd:72:af:17:ac:05:08:19:
                    07:8d:42:b3:c0:1e:7e:08:b1:da:5e:1e:4c:fa:ab:
                    56:27:7c:b2:e0:7c:ff:fb:29:e5:44:d6:93:0f:76:
                    db:98:ca:6b:c8:73:3f:1a:18:24:b4:9a:e4:13:ec:
                    79:cd:3e:0b:18:13:22:78:36:a6:2d:e3:6b:6e:db:
                    a1:89:ee:43:a0:ef:b9:7e:9d:c2:97:a5:d0:70:3e:
                    38:6a:7d:9b:af:a5:90:7e:d2:05:64:88:fe:56:bc:
                    7c:58:7a:35:22:2a:a1:76:22:4a:34:db:af:4b:df:
                    32:d9:4a:49:ac:e1:e3:fa:cc:bc:87:89:07:fa:99:
                    5a:c8:b4:d9:63:bb:48:82:be:55:4e:2d:85:05:f1:
                    cd:13:ac:85:58:5b:81:67:ea:9c:f6:7c:0a:ef:62:
                    be:23:66:c3:17:ca:fd:19:2f:06:f9:23:46:d0:4d:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AB:8C:17:6D:97:3E:56:79:C2:6A:E8:53:AE:16:85:61:E8:78:15
            X509v3 Authority Key Identifier:
                keyid:B2:45:FB:0D:33:6D:20:7F:75:36:CE:29:5F:9E:69:86:28:A1:4E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skX7DTNtIH91Ns4pX55phiihTuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5172cb-4b4b-43f1-8d27-f62766974353/1/skX7DTNtIH91Ns4pX55phiihTuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e1:c9:15:6c:ab:19:bb:f1:ff:e7:5d:cc:a9:55:1b:79:83:
         12:33:3d:56:0d:0c:75:f7:69:3e:57:26:a0:c7:f6:08:6e:28:
         dc:d8:cf:62:85:b1:0c:f6:81:ed:51:b8:e1:d5:bb:7a:51:45:
         47:45:1e:9f:23:a1:7b:ca:ca:4a:89:b5:d2:2c:ad:2b:82:71:
         e6:c6:39:b9:20:b1:8f:c0:5c:09:a8:0c:15:f7:67:52:ab:fc:
         d9:b6:a3:f0:ce:2d:ca:7f:b3:6b:77:25:26:3a:fd:32:41:81:
         f8:3d:01:50:03:98:5c:c5:5c:93:98:1b:6f:fb:bd:0f:31:36:
         26:bf:99:09:7d:ef:17:f4:08:a4:ee:4e:ca:ba:ac:5a:64:ef:
         8b:e7:be:a1:89:a1:23:75:c2:46:09:77:97:91:b4:21:5f:a9:
         a0:b9:b6:9d:04:65:f5:6c:5c:29:3c:4f:24:bd:09:5f:4e:69:
         6d:c1:eb:a6:8a:b2:87:0f:45:7e:4f:1e:98:6d:dd:62:21:c9:
         37:55:9d:f2:9b:b2:e8:8f:85:70:1b:9e:ab:9f:8a:8c:9d:7e:
         f0:4e:5b:6b:58:b5:86:33:f3:b9:a8:c7:b9:59:d6:93:08:57:
         6f:e9:3a:5c:b6:7e:1c:5d:95:a1:f4:f2:6a:43:2d:eb:3b:2f:
         1f:74:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:43 2024 by rpki-client on console-fra.rpki-client.org