Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File:                     5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier:          e6KzjgY4RyJ2xzME2QObBL3b+njgyl257dWu7nCD6CE=
Subject key identifier:   CD:F3:90:84:00:05:A3:64:93:E6:C0:9B:E3:7E:38:9E:CB:DE:16:2C
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer:       /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial:       019356F731FE5F36284BF0A3A8A7BA4D865F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number:          11C0
Signing time:             Sat 23 Nov 2024 03:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 03:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 03:01:00 +0000
Files and hashes:         1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: GWf5/mCrzHvYkti8p8AKOTx8tcjmnCD952GplOL0iNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:31:fe:5f:36:28:4b:f0:a3:a8:a7:ba:4d:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
        Validity
            Not Before: Nov 23 03:01:00 2024 GMT
            Not After : Nov 24 03:01:00 2024 GMT
        Subject: CN=cdf390840005a36493e6c09be37e389ecbde162c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:6d:23:d1:d0:5d:6d:e9:81:55:0d:c1:60:
                    eb:f2:f0:0c:28:60:fe:36:e3:08:ba:cb:5f:48:ca:
                    d3:32:c9:55:f1:d2:a4:a5:a4:93:80:ef:b1:83:7c:
                    1e:65:59:b6:37:ed:2b:b6:28:b9:dd:a8:59:a3:d3:
                    3c:56:1e:4c:7a:9d:33:4d:f1:9b:48:e2:52:82:58:
                    f6:40:40:d1:85:3a:68:29:65:8b:1b:26:fe:18:9f:
                    3a:3b:11:b3:d3:5c:d1:97:1d:56:dc:50:cd:a7:84:
                    66:e3:65:89:a6:c5:24:e4:f6:c5:b2:08:8c:b4:4f:
                    1c:cb:03:b0:f7:d0:e1:8d:77:3e:1b:fb:e0:04:91:
                    ad:39:fc:f8:4c:f0:dd:88:30:f9:79:65:89:3b:18:
                    9a:c1:6f:eb:74:e4:12:06:e4:b9:9b:54:2e:f1:0f:
                    b7:6c:2b:6c:a0:75:1e:7a:4e:70:61:b1:9a:d8:7c:
                    d9:7e:d6:92:95:b6:14:ce:a1:6d:c1:ce:15:e7:9c:
                    c7:22:6c:7f:e3:63:eb:c8:05:9a:ca:26:f8:cc:9c:
                    be:77:ea:b1:22:85:2f:3c:4f:8f:ee:dc:69:69:59:
                    67:17:b4:ba:ad:3b:76:25:1c:b6:d1:a6:9b:66:c3:
                    30:b4:4b:0f:6b:91:f9:03:de:9f:2a:6b:1b:c4:24:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:90:84:00:05:A3:64:93:E6:C0:9B:E3:7E:38:9E:CB:DE:16:2C
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:8b:9a:a7:23:c4:0a:4b:e5:a5:92:2e:d6:92:8c:22:c4:
         5a:37:63:5b:db:90:47:64:95:16:e4:ea:4e:ea:3f:ee:36:f6:
         68:0c:ea:16:e1:33:df:9c:aa:6f:3d:cc:37:58:4c:4b:74:55:
         23:4d:a9:05:d0:7c:be:90:62:cb:bf:a4:43:d6:1d:cb:8f:02:
         fb:be:d8:c8:05:aa:9c:54:1d:65:8f:fe:9c:9d:2d:b3:67:1c:
         cb:62:a8:39:a3:67:78:41:64:b5:33:6d:c0:fa:ab:b7:fb:2b:
         40:6c:ec:cb:a0:33:74:29:e3:de:ee:da:fc:0c:84:50:35:55:
         05:8a:01:6c:32:ce:f3:cd:46:ca:c6:e5:3d:d5:25:28:ab:14:
         94:65:22:4d:7f:0e:9d:34:da:a1:84:fb:99:6f:33:84:b1:98:
         01:33:b2:a6:72:b1:99:59:8d:c3:f6:be:aa:f7:42:99:12:ba:
         e7:be:68:bc:3a:46:0e:6b:8c:51:3f:88:ed:2e:16:05:eb:1d:
         85:25:d0:39:ca:21:1e:c1:23:9e:00:aa:53:71:f7:a7:f9:6b:
         d8:a7:77:f1:b8:91:3f:84:4b:1f:58:09:4d:9b:05:73:d5:5c:
         6b:04:17:62:eb:02:e9:1d:4f:ff:b2:f4:f6:a5:7b:da:20:4d:
         a8:bb:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:11 2024 by rpki-client on console-fra.rpki-client.org