Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File:                     5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier:          lBbzKCPvSHxCW6ZrdPZeoAjrvUhytwvd49zWqF61P7Y=
Subject key identifier:   09:B9:F8:DF:A9:C6:04:CD:73:83:5E:B5:75:8E:92:AF:1B:75:5A:93
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer:       /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial:       01940647F59D2A96BE2B18CFDFAD038434D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number:          041A
Signing time:             Fri 27 Dec 2024 04:02:46 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:46 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:46 +0000
Files and hashes:         1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: wnnVnBqowhHe2ryj38aplFmaYTn1fxsFPSl32/3wS7o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:f5:9d:2a:96:be:2b:18:cf:df:ad:03:84:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
        Validity
            Not Before: Dec 27 04:02:46 2024 GMT
            Not After : Dec 28 04:02:46 2024 GMT
        Subject: CN=09b9f8dfa9c604cd73835eb5758e92af1b755a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:cb:69:05:fc:2b:bc:97:76:67:9e:b2:85:
                    15:9b:1e:49:52:e5:fe:f1:ad:24:24:40:90:5c:6f:
                    3f:03:9c:cc:24:bc:66:78:b9:05:8a:3c:3b:10:84:
                    c2:cc:68:1a:80:d2:eb:43:52:fa:f4:a7:93:e6:e7:
                    b4:0a:94:b9:18:03:6e:55:7d:3a:c3:13:51:8a:74:
                    75:41:5d:d7:3f:df:fd:37:a8:fe:2d:ae:05:24:85:
                    57:0e:ca:86:aa:7f:3d:81:34:09:fd:8f:d1:40:2b:
                    56:81:bb:07:7e:2b:59:a2:e4:1c:43:2e:1a:d4:9c:
                    94:2b:cf:43:15:39:10:d5:28:10:91:af:31:90:73:
                    51:d8:07:54:7c:ef:c7:c8:0b:e6:0a:0d:32:51:36:
                    6c:92:a7:3e:ea:63:2c:47:1b:64:05:82:23:72:06:
                    b8:10:5e:db:43:ac:a7:f8:05:ee:fc:dc:b7:ba:d8:
                    e1:80:8c:ec:bc:2f:c0:ef:07:a6:1c:79:e5:71:b5:
                    00:a8:6d:58:ea:24:b3:8d:ee:dd:62:19:5c:40:96:
                    95:8b:a9:08:7e:ba:c6:28:f3:16:8e:7d:f7:1f:01:
                    f1:60:71:64:e8:12:84:5f:99:6c:ec:c5:e9:ba:69:
                    8c:01:ca:f8:63:fb:0a:50:21:ef:dd:7d:20:29:64:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B9:F8:DF:A9:C6:04:CD:73:83:5E:B5:75:8E:92:AF:1B:75:5A:93
            X509v3 Authority Key Identifier:
                keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ca:11:e2:fe:92:5d:2e:b2:04:3e:7b:2d:b9:27:1c:9e:f1:
         85:a4:3d:6b:cf:e4:1a:30:f4:f2:45:2b:f1:3c:59:d9:52:f6:
         a0:b7:ef:2a:69:f2:e7:3d:fd:9d:53:0e:f7:2a:90:ac:9c:10:
         a3:83:31:88:c3:c2:c7:7c:05:b9:91:e9:e0:56:0e:45:9d:d2:
         62:3e:43:ed:06:e7:a3:02:9e:0e:6d:60:5b:7f:cf:55:53:f7:
         40:c5:bc:44:f0:e9:fc:84:83:a4:5a:4d:ef:56:56:ff:7d:7a:
         4e:f1:d6:b7:ff:19:5d:6a:55:25:b2:f8:29:a7:0a:f9:f3:12:
         6e:6f:47:bc:39:93:de:bc:ac:96:3d:bf:2e:2d:10:6c:ee:88:
         94:e2:f6:a8:28:39:f3:7f:b2:f5:c7:95:88:11:7b:5c:48:40:
         4b:21:83:9c:f1:13:15:b4:37:d8:9f:e2:0d:ee:c3:45:04:44:
         f8:3a:c9:48:bb:2b:b9:30:4e:ab:ee:a6:38:22:ad:3e:97:14:
         dc:c3:a2:e2:38:fd:e9:10:89:56:77:07:55:1d:25:4a:22:2e:
         24:dd:47:58:72:12:54:88:52:a3:ca:d3:52:e0:8d:57:af:0f:
         94:87:b6:00:c8:5e:18:6d:20:22:69:8e:5d:b8:b9:b6:19:cf:
         13:28:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:49:27 2024 by rpki-client on console-ams.rpki-client.org