Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File:                     8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier:          5v1QAvAVoWgmG+Pthsfc9wz5nGDEgQR21bNUJm7rWtE=
Subject key identifier:   D1:83:B6:A5:71:E1:33:84:E3:F3:B7:E1:7D:CA:0D:5C:17:32:CA:64
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer:       /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial:       0193572DB455F336ED6CEC9E09A4B0A5C6E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number:          09DE
Signing time:             Sat 23 Nov 2024 04:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:33 +0000
Files and hashes:         1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: 9qwNC4NF2uU+x1ICIiBNglDhWwPqgpzac5Kw2wP2LtI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:b4:55:f3:36:ed:6c:ec:9e:09:a4:b0:a5:c6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
        Validity
            Not Before: Nov 23 04:00:33 2024 GMT
            Not After : Nov 24 04:00:33 2024 GMT
        Subject: CN=d183b6a571e13384e3f3b7e17dca0d5c1732ca64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:35:20:c6:77:ef:74:07:16:5b:8b:24:94:
                    74:62:76:eb:06:11:73:0a:41:8d:9f:c7:3d:46:c3:
                    7f:c2:04:03:3f:e2:e8:4c:13:14:ec:19:cd:2a:e5:
                    92:80:da:e2:ea:0c:7a:0e:b7:6b:5a:3d:65:e4:a1:
                    4b:bd:05:07:61:c2:4f:c2:09:ea:1a:cb:82:00:cd:
                    58:21:46:54:a0:33:ac:db:1b:f2:0d:68:05:95:1f:
                    e5:a0:92:f5:78:67:83:72:8c:38:f7:34:27:9e:79:
                    eb:d3:15:58:9f:5a:c0:00:63:37:5a:b1:ba:45:ae:
                    1c:20:40:af:e2:b8:43:ef:f6:ea:62:3c:e6:29:6e:
                    c2:c5:36:91:9c:21:ee:9c:90:a4:bd:7e:92:66:f8:
                    19:d7:ba:d7:c5:3d:7d:62:bf:0d:29:0a:d1:52:d0:
                    99:d6:5e:52:d0:e7:b9:a6:2a:7a:61:e0:8f:4c:6c:
                    97:38:4c:89:95:21:02:f1:6c:5a:7a:69:71:2c:fe:
                    74:7c:62:47:f9:ce:00:d6:89:5e:47:cf:4a:2d:d6:
                    47:26:6b:12:bf:66:80:86:63:33:5b:24:2a:f7:66:
                    d5:a2:b9:bb:0a:25:33:28:5c:fe:1e:28:69:a9:73:
                    d0:5f:f6:a2:50:96:d7:10:cb:b5:32:fe:56:f0:d2:
                    ce:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:83:B6:A5:71:E1:33:84:E3:F3:B7:E1:7D:CA:0D:5C:17:32:CA:64
            X509v3 Authority Key Identifier:
                keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:12:ea:b5:b9:7f:54:54:3c:7a:16:fc:67:2c:0c:f5:a6:
         80:28:24:42:4f:1b:30:2c:3f:8e:51:01:af:1e:05:84:24:00:
         73:6e:25:af:e3:bb:c7:59:92:34:96:7e:bc:a1:f0:4e:78:cc:
         a2:1c:98:8b:1b:92:21:00:f2:ed:6e:0c:ee:24:4e:47:fb:a9:
         37:a0:58:46:d0:b8:e9:a5:ba:c2:98:91:3d:35:d1:5b:02:0e:
         34:81:84:4f:0c:b2:65:ea:bc:62:9c:2b:f0:6d:ed:bf:89:dc:
         ac:24:27:5e:ad:4d:a5:a8:7d:d4:c7:16:3e:7f:31:7a:28:39:
         8e:fb:86:32:16:95:36:d3:44:32:55:45:8c:72:92:82:b8:ff:
         76:b1:c9:95:1d:7c:78:09:6d:ca:df:26:4b:81:42:de:d6:ee:
         0a:98:9b:04:e7:9b:fc:19:75:d5:69:bf:80:56:64:e8:3f:5d:
         8f:a6:f2:ae:41:04:c7:ab:39:69:84:f5:d1:c1:bc:77:e4:65:
         4d:08:07:ff:61:23:71:e5:b1:05:41:b3:60:89:5f:b8:09:9b:
         1e:45:73:8c:22:a4:f2:29:09:fb:cb:46:da:9a:c1:d7:92:e6:
         fc:19:fa:29:28:51:bd:c2:bc:3a:e0:00:a3:22:e2:17:03:28:
         62:cd:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:52 2024 by rpki-client on console-ams.rpki-client.org