Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File:                     ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier:          AuSU6hO02wR2l7gWU5EKk+b7jOErHYNQ8iiVBi8f4WM=
Subject key identifier:   C3:84:5B:9B:C5:0A:6F:B8:35:E0:46:F6:E4:71:B5:2E:D4:03:00:76
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer:       /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial:       0194BB298B82CBF57293FCC67E5558CEE6FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number:          10BB
Signing time:             Fri 31 Jan 2025 07:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:49 +0000
Files and hashes:         1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: f5r7FDwIdI0srImXfGZwPr+uimGA3/b4tjjWFWxIwIA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:8b:82:cb:f5:72:93:fc:c6:7e:55:58:ce:e6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
        Validity
            Not Before: Jan 31 07:00:49 2025 GMT
            Not After : Feb  1 07:00:49 2025 GMT
        Subject: CN=c3845b9bc50a6fb835e046f6e471b52ed4030076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:8e:40:d1:8f:fa:b4:9b:87:2e:41:25:54:
                    c7:a6:2b:65:09:c8:8f:7b:57:7d:b1:88:b8:a3:a7:
                    6e:dc:84:b0:c4:10:ec:25:ba:5b:71:da:c9:21:09:
                    5c:e0:c7:3e:7a:20:b9:cf:e5:60:7e:15:5f:2f:9b:
                    6b:19:20:2f:eb:1f:54:27:23:d1:b3:87:97:0a:3d:
                    55:ef:b9:ac:67:1e:ec:fb:12:2d:fb:44:37:9a:90:
                    c7:7b:aa:53:bb:38:ea:91:e2:75:49:2f:f8:a3:be:
                    2e:d9:65:80:e4:ba:e4:89:ce:36:98:f4:67:85:24:
                    2f:ab:17:c7:53:01:1c:05:a7:16:99:63:ea:0f:de:
                    a0:96:9e:cb:46:c5:37:db:ac:bf:c0:75:3a:e3:8c:
                    ea:90:cd:e0:e2:29:d1:eb:24:d4:a4:fb:ff:fe:62:
                    1d:cb:d8:c3:6f:bc:a8:d7:2f:9c:72:5f:5a:ab:66:
                    1b:a8:96:e0:3b:05:66:a7:61:53:ae:e4:c5:be:b3:
                    c5:6b:f6:57:08:96:63:38:42:0f:6f:7b:84:ea:57:
                    28:3e:57:0e:c6:84:15:76:ec:3a:ad:f9:a3:f3:18:
                    c2:09:bf:75:6c:de:8d:9d:4e:47:b9:4f:4b:ef:b8:
                    a0:2f:88:4a:b8:3f:4f:0e:74:4a:e7:8f:4d:ae:b2:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:84:5B:9B:C5:0A:6F:B8:35:E0:46:F6:E4:71:B5:2E:D4:03:00:76
            X509v3 Authority Key Identifier:
                keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:7d:89:a2:eb:5c:90:4d:a5:fe:e8:67:3f:46:37:6d:fe:
         26:90:9e:79:e1:78:29:54:1d:4f:ac:0a:e4:df:a7:ee:ad:3f:
         3e:6d:9b:bc:1b:5a:3b:0f:d2:ff:1a:a1:b6:b4:a8:a9:79:01:
         2d:9d:dd:a3:b3:6b:9e:cf:ab:f6:c8:18:7d:ee:2b:ae:ef:b6:
         91:50:79:00:6e:c5:7e:e5:9c:98:2d:bd:58:9c:dd:3a:49:65:
         b6:27:3a:32:1a:6f:91:88:79:46:0a:80:88:0b:ee:58:19:85:
         23:30:60:24:a6:a3:cf:26:17:85:5a:7f:46:11:ec:7e:ee:60:
         fa:ab:7b:18:2c:a8:95:9d:2b:df:57:4f:df:96:7a:1d:b7:81:
         e7:c1:86:14:b5:7a:33:7b:ff:b6:fc:36:98:f4:16:6a:dd:d7:
         4a:6f:a2:75:19:19:31:90:a8:44:2d:f6:17:96:82:ae:a4:e2:
         e7:b3:0c:4b:4c:0a:4c:33:ed:f5:7b:68:16:1c:6b:8e:fe:e9:
         24:4f:69:41:32:06:c7:f8:73:99:9e:c8:eb:be:fd:27:ba:bc:
         ef:65:6d:6e:c3:9a:f9:08:ae:c2:77:05:76:79:4e:21:ac:a8:
         f1:16:8f:1f:6c:47:f4:88:77:b6:6e:ba:9e:c8:46:3e:d6:e2:
         de:5e:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:41 2025 by rpki-client on console-fra.rpki-client.org