Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File:                     1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier:          os4b7/KxuI0MAz7i3kIez8BZQO/2tR1SOF1iFVajfZ0=
Subject key identifier:   94:12:2C:8B:4B:5B:DD:7C:93:1B:C6:CA:EE:2D:70:59:13:19:53:8C
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer:       /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial:       019357D2580D2A7BAC50216C9BE1F99AD1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number:          0476
Signing time:             Sat 23 Nov 2024 07:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:23 +0000
Files and hashes:         1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: U0QyjPULCc+gm+oZ3Zz74dL4ChqJluwWBuM5OwyzHS0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:58:0d:2a:7b:ac:50:21:6c:9b:e1:f9:9a:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
        Validity
            Not Before: Nov 23 07:00:23 2024 GMT
            Not After : Nov 24 07:00:23 2024 GMT
        Subject: CN=94122c8b4b5bdd7c931bc6caee2d70591319538c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:b7:bb:16:9e:87:a6:b3:ad:53:57:31:84:
                    fd:4f:c6:21:65:f0:89:9c:38:e0:35:8d:5a:28:91:
                    ff:23:d6:99:78:d5:01:68:f6:93:6a:c4:10:89:e0:
                    e5:b9:a9:6a:7a:27:b6:84:33:4f:6d:62:68:b7:0d:
                    16:ca:5b:f8:0f:0e:b9:2d:ff:6c:27:7a:11:05:4d:
                    e7:0c:45:e2:96:17:e6:c5:80:66:ef:b8:9c:cd:b0:
                    2c:ac:9c:81:fd:04:57:bd:4c:a5:05:78:2b:c3:71:
                    b5:5e:e6:a4:8e:4a:17:09:72:66:7a:70:b0:e8:77:
                    22:98:e6:18:e2:24:30:6a:e7:c6:1a:9d:08:a5:3e:
                    05:92:78:1c:59:c3:90:81:41:04:76:b3:8d:d5:40:
                    2e:46:aa:39:d8:dc:4a:31:1f:c6:b7:53:f6:1c:62:
                    f0:99:fd:64:07:9d:32:b1:25:97:59:0f:20:b8:80:
                    db:b2:ad:dd:13:1c:ff:ef:43:5a:de:63:d0:f9:f3:
                    2f:40:7d:0c:df:ed:cf:fb:5f:a8:f7:93:0f:54:9b:
                    6d:81:be:25:3b:9f:25:14:de:9c:36:db:41:e1:a1:
                    9f:49:68:81:f9:98:0b:d6:1a:3a:a4:89:56:ea:a3:
                    3c:2f:7a:c4:cf:f2:65:f0:94:5a:06:b5:60:79:59:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:12:2C:8B:4B:5B:DD:7C:93:1B:C6:CA:EE:2D:70:59:13:19:53:8C
            X509v3 Authority Key Identifier:
                keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ac:0e:a8:f2:1f:08:82:e3:5c:7b:d1:38:46:8c:e8:54:6d:
         1b:a1:42:fc:90:8a:ad:17:14:0a:9e:80:f5:e9:25:3d:5c:01:
         c8:ee:2d:b4:d0:b8:af:9c:26:29:b3:dd:dd:24:21:f4:e0:6c:
         68:2d:de:ed:c3:7a:27:75:18:50:e4:6c:54:18:8e:35:1d:03:
         30:bd:a1:ab:78:2c:57:89:f8:40:dd:3f:f8:36:4c:74:73:98:
         b5:50:08:ea:a5:03:72:ad:0f:4b:fa:f8:fd:dd:62:2d:ae:f5:
         55:b8:33:a0:49:7b:db:73:bf:14:0a:d1:4d:c4:9a:d0:e4:81:
         6a:e8:a7:12:dc:09:d0:d2:52:15:a4:c2:0e:4a:22:cf:07:8a:
         67:3b:c0:b4:f9:7c:af:4a:11:62:0f:1f:e0:0c:8d:23:fe:b5:
         60:af:e1:7d:04:4e:e4:95:6c:3f:92:74:2d:58:b8:14:af:66:
         a0:f1:80:2d:e8:f4:a9:f5:11:03:e4:a3:8f:3a:d9:21:4b:23:
         a6:14:81:1c:32:fd:9f:66:b4:f7:65:d8:b4:c6:41:7e:8c:60:
         61:ac:33:41:9a:43:48:b8:02:2c:6a:40:fc:95:e4:36:1f:3f:
         d8:7b:8f:57:04:74:e9:f8:53:52:13:94:1b:e8:c7:dd:5f:ec:
         c4:ec:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:18 2024 by rpki-client on console-fra.rpki-client.org