Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File:                     SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier:          OXFzO6RQb9twaiCmEmMipd4Ex9g6NUMevQvVm95WyNc=
Subject key identifier:   37:F2:78:1C:24:E6:E2:5D:23:2D:02:81:CC:D3:DC:A3:27:1F:BD:EA
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer:       /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial:       01935764C1D2EBD2A581642813AA3459499D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number:          094F
Signing time:             Sat 23 Nov 2024 05:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:41 +0000
Files and hashes:         1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: DEGqCMUPzP4fazdtVohHKcDYuLDwImmEOwQVccQBSbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:c1:d2:eb:d2:a5:81:64:28:13:aa:34:59:49:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
        Validity
            Not Before: Nov 23 05:00:41 2024 GMT
            Not After : Nov 24 05:00:41 2024 GMT
        Subject: CN=37f2781c24e6e25d232d0281ccd3dca3271fbdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:ac:07:f7:48:74:bf:85:30:e7:3e:d2:ce:
                    f1:0b:16:af:91:71:7c:51:0c:12:89:2c:35:70:91:
                    81:3f:6a:ab:f6:e5:74:0d:f5:11:44:47:ed:b4:ba:
                    2f:d3:cb:2f:7c:06:71:01:01:7c:88:1d:88:4a:5b:
                    81:9f:29:ff:96:7f:ab:de:b5:37:1a:ed:db:cb:17:
                    97:02:52:21:35:da:3f:76:99:dd:15:a4:d5:e3:38:
                    66:a1:cf:bc:6b:a8:5b:41:ea:5b:0a:d4:39:71:20:
                    89:89:c8:29:92:9b:75:14:cb:6d:82:41:22:54:5b:
                    f5:dd:96:e3:dd:b0:78:a5:98:86:f2:db:67:6a:cc:
                    b6:d2:0a:49:bc:44:78:6b:7a:b4:2e:2f:62:23:e1:
                    6d:fd:77:0f:ac:4e:b7:11:74:91:9a:31:8f:c9:5d:
                    11:65:d8:fc:29:2d:8a:a9:37:31:47:b0:a9:7f:84:
                    23:19:5d:10:c2:56:f0:2e:1d:74:ff:8f:22:1f:1d:
                    f2:c3:23:38:2b:da:a6:8f:2d:af:ac:a1:7a:ef:a3:
                    0e:18:ed:fe:ad:da:a0:3b:0c:a9:1a:a0:e1:cd:bf:
                    ca:4d:70:ef:23:e1:22:2f:10:c7:67:be:7f:69:b5:
                    6e:e7:9d:0a:b0:44:a8:e4:ed:0c:9d:bb:46:52:08:
                    be:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:78:1C:24:E6:E2:5D:23:2D:02:81:CC:D3:DC:A3:27:1F:BD:EA
            X509v3 Authority Key Identifier:
                keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:a9:53:fd:38:55:7d:8d:0d:8c:48:0b:bf:11:28:61:bc:
         1f:39:3b:06:33:6e:04:be:32:a8:52:0e:2e:1c:50:26:40:c1:
         e5:42:d5:23:89:ec:0b:dc:9a:21:c1:d2:fc:3d:1d:46:29:d2:
         f4:a7:65:15:b4:8e:6a:8d:1b:78:6a:ea:6e:1c:76:ad:ce:8b:
         dc:c7:2b:a6:60:a6:c8:24:93:e4:b8:e1:96:d6:4d:6b:5a:56:
         2d:f5:d1:34:d1:eb:cc:31:c1:c9:4b:a4:fb:21:01:53:51:10:
         19:8c:3b:24:83:4b:2a:f2:0c:8b:e3:ce:d6:66:95:0b:8c:78:
         14:a5:c5:aa:2c:1a:27:e7:cb:ae:a5:b3:07:45:55:55:30:27:
         cf:20:e6:5a:eb:6d:6d:ae:a7:35:60:82:bc:3a:ab:7e:fd:8d:
         6b:57:bf:33:22:57:e4:0c:d6:63:3b:fc:06:39:6f:ec:ed:04:
         98:f8:8f:60:20:46:d0:26:f5:76:54:a6:f7:bb:1b:b5:21:3d:
         0c:2c:d4:63:26:8d:02:51:d0:d6:49:e5:78:e8:4c:c4:04:7e:
         e4:aa:d3:23:6f:6b:e5:1f:89:53:b7:ec:cc:51:eb:76:aa:08:
         44:f0:a3:c9:6b:59:c3:96:d6:74:90:47:e9:13:14:53:9d:23:
         8c:af:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:14 2024 by rpki-client on console-fra.rpki-client.org