Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File:                     GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier:          AO6zlImllVjMxAPqMkKHfzhvBQp3+Zp7DoYAfbdXWdc=
Subject key identifier:   B3:24:CF:2D:0B:92:68:3E:04:99:A7:A7:C1:AF:83:B2:20:74:39:74
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer:       /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial:       019369DA6899310DB9D1B3C2FB71A945BFA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number:          0C9D
Signing time:             Tue 26 Nov 2024 19:02:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:21 +0000
Files and hashes:         1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: +12BMSNsNfcGg/gCuy2BQvyPfz/1KgPk/BtR/NYAauU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:68:99:31:0d:b9:d1:b3:c2:fb:71:a9:45:bf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
        Validity
            Not Before: Nov 26 19:02:21 2024 GMT
            Not After : Nov 27 19:02:21 2024 GMT
        Subject: CN=b324cf2d0b92683e0499a7a7c1af83b220743974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:52:11:78:f3:f3:f7:fc:f3:2a:bd:a2:25:
                    77:8c:f9:a4:e0:61:90:4d:dd:2d:bc:7b:84:07:f1:
                    bd:58:97:fe:f1:21:2f:57:65:30:4a:df:3d:07:e2:
                    7b:ef:9e:fd:58:89:34:d8:bf:6d:b8:4f:11:bc:ec:
                    d3:c3:43:8d:bf:bf:2f:3c:c5:7f:10:3f:a4:3c:a9:
                    82:9b:1e:d7:32:84:b7:54:0f:d5:50:03:68:5f:22:
                    eb:51:d4:fd:a7:8e:05:fb:1d:4d:6c:15:29:ba:26:
                    22:77:9a:3a:6d:76:d7:ef:b7:64:44:e5:8e:d2:a9:
                    10:96:dc:4a:c5:94:9e:78:68:cb:99:70:ab:f5:d5:
                    09:6e:8b:de:f4:32:c7:65:e4:ac:c6:78:d6:57:43:
                    d0:13:8d:0a:69:0c:18:ec:2b:bb:93:e1:6d:16:3e:
                    c6:d5:0a:09:9e:dd:16:65:a7:b1:b1:cf:64:9d:d4:
                    9e:1b:9f:3a:ae:2b:e4:e2:75:51:d9:c6:01:9e:46:
                    2c:11:ae:2d:54:44:b1:58:70:7c:93:a9:34:d2:67:
                    c8:bd:38:39:42:28:85:48:59:9e:ce:42:2e:48:f7:
                    f6:d5:58:2b:d2:ec:3d:9c:e0:c3:a0:b8:23:ce:98:
                    17:6c:10:f0:b8:0f:8d:bb:bd:ae:12:54:2a:77:09:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:CF:2D:0B:92:68:3E:04:99:A7:A7:C1:AF:83:B2:20:74:39:74
            X509v3 Authority Key Identifier:
                keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f4:8b:08:f4:44:87:e4:3c:ac:3f:93:77:9d:48:da:17:8a:
         8c:29:4a:67:77:35:29:1e:a9:14:4d:c1:61:e3:30:b1:19:3f:
         12:d6:90:c4:31:da:53:fa:14:8b:f6:ac:c7:86:b7:29:84:2f:
         cc:3f:05:ce:9f:b3:6c:a0:4e:2a:f3:02:28:ab:e4:f5:f5:6d:
         63:ce:a7:c3:20:b9:6c:19:0f:e5:ae:70:c9:fa:71:e1:f2:60:
         a5:37:4c:38:e9:80:6a:75:58:87:47:fe:99:e3:cf:eb:c1:76:
         45:2b:1a:a4:1e:f2:02:02:e7:e1:5b:5b:07:c1:c6:94:d1:72:
         3c:6f:90:57:a5:70:75:83:b5:0b:0b:68:0f:8b:85:1f:5f:d6:
         e7:cd:e1:8e:d2:d7:32:6a:b1:27:79:37:40:45:47:37:74:b0:
         58:dd:d3:a0:5b:c0:6b:59:e5:85:17:e0:21:4d:dd:b4:e6:17:
         53:63:8d:39:e4:cb:74:4b:be:da:a5:e0:9c:53:9f:97:ce:e9:
         2b:1e:b4:ba:0a:22:08:2e:11:fc:13:7d:e8:a2:f1:9e:a3:b4:
         34:e2:c2:b6:23:0a:fa:da:98:ae:a1:8d:ff:b8:46:b3:df:9a:
         23:b2:a8:79:32:8a:a3:47:6f:93:15:f9:b9:aa:ec:e6:3d:69:
         e1:d9:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:14:41 2024 by rpki-client on console-fra.rpki-client.org