Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File:                     z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier:          5Es2134dslSPilD2Xrkr7C93P1YKMHWuUldF+zZmuG8=
Subject key identifier:   53:87:12:DB:66:2D:C5:FE:1B:C4:E0:5C:47:96:82:75:AD:84:31:47
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer:       /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial:       019369343B4979A907C540CE9882B114B12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number:          0913
Signing time:             Tue 26 Nov 2024 16:00:50 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:50 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:50 +0000
Files and hashes:         1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: S0wY12/Bw3Gaq/K1KFWrcP4/G9fshDprpeWlrBvZUbw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:3b:49:79:a9:07:c5:40:ce:98:82:b1:14:b1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
        Validity
            Not Before: Nov 26 16:00:50 2024 GMT
            Not After : Nov 27 16:00:50 2024 GMT
        Subject: CN=538712db662dc5fe1bc4e05c47968275ad843147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:02:24:de:5a:b4:9e:98:5c:dc:b3:ee:b3:
                    3b:70:fc:3b:a7:1b:0d:58:80:7b:5e:41:de:cc:3c:
                    a7:ba:b6:01:77:74:c0:4a:c7:f0:27:46:5d:fe:21:
                    4d:18:98:7d:f5:ce:d0:4e:27:fe:8f:9c:3c:09:4c:
                    1d:e9:af:0d:eb:e9:8b:a4:2f:3c:36:e0:a6:bf:7e:
                    b1:32:2b:e9:ca:90:79:ed:81:3d:8c:ee:55:d8:27:
                    bc:85:4e:be:ed:c5:17:e9:4c:fa:c8:ea:0b:f3:a5:
                    9a:e3:a6:16:7e:cd:20:a6:13:96:c5:86:69:b8:07:
                    e2:6f:1e:eb:6c:3a:51:05:69:e2:6e:45:d1:64:dc:
                    0f:9b:29:e8:6f:15:2b:0c:c9:b5:cd:5d:57:18:c5:
                    70:93:03:4e:c8:99:d7:36:e7:50:c4:92:56:9a:1f:
                    49:ab:21:fe:74:43:09:9e:a8:35:cf:78:d7:fa:5b:
                    82:39:9d:2e:39:e2:b7:9d:0a:fb:77:fa:9b:5d:5d:
                    ac:45:c4:79:2a:96:2a:90:3f:1e:5f:f4:76:c0:a7:
                    06:51:b3:38:39:ff:eb:50:60:f8:f9:0f:ab:0c:3f:
                    09:84:bc:93:23:8a:ff:75:5a:1c:72:c8:fd:e0:ef:
                    93:94:e0:16:97:f5:2a:a4:aa:8b:c7:e6:b0:bf:89:
                    e9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:87:12:DB:66:2D:C5:FE:1B:C4:E0:5C:47:96:82:75:AD:84:31:47
            X509v3 Authority Key Identifier:
                keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c3:cd:05:2a:d4:44:d4:b8:1e:ec:1f:83:75:3c:69:15:90:
         50:9d:8c:bc:84:23:28:a5:2d:0b:62:80:5b:d5:ff:b6:ff:c0:
         9a:1d:4c:5c:2f:49:4a:8c:50:4b:78:2c:99:a4:44:ca:71:5c:
         cf:db:6e:fe:b1:e0:08:96:83:45:2e:80:1c:64:82:2e:c2:4c:
         50:87:c8:90:7d:0d:8f:40:df:62:f9:50:37:e2:ed:05:9a:bf:
         d8:35:e7:63:c6:a2:a9:4e:8f:a1:b3:b2:76:e3:b6:1e:e6:5b:
         30:d8:9f:0b:1d:cd:e8:09:b9:bf:cf:16:36:51:d2:3a:82:8b:
         e5:41:54:e1:37:3f:32:0a:58:5c:d2:be:36:d6:5b:ec:4c:4e:
         55:7d:d3:8f:34:26:76:17:67:d2:c7:47:cd:85:7d:39:3e:59:
         61:80:9f:d8:3b:fe:7b:fb:01:bc:a6:94:b2:d5:9d:63:23:da:
         24:38:a9:c7:d7:a2:af:c3:23:23:57:b6:07:5e:d1:65:40:11:
         21:2d:e1:77:39:2a:bf:03:68:44:16:31:32:21:74:69:40:b4:
         5c:da:d5:72:8a:07:cc:05:da:83:65:4c:77:60:03:f4:f1:12:
         89:04:66:44:0a:7c:d1:8b:55:34:da:19:cf:29:2d:4b:00:cb:
         7c:70:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:58:27 2024 by rpki-client on console-ams.rpki-client.org