Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File:                     y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier:          Jx0M4FDaPYKiHjqlz0NKI8PIDgMvaujRvybd8H+AnM8=
Subject key identifier:   A8:45:C6:A8:2E:56:FE:0E:1F:1A:B4:94:54:CB:19:77:72:8E:58:97
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer:       /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial:       019369D88BD081162B4F715A8476B115C485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number:          01DD
Signing time:             Tue 26 Nov 2024 19:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:19 +0000
Files and hashes:         1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: 8zL9sIealNlIeeU5hpzMry+qAWtJ3jgahkza2k8zip0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:8b:d0:81:16:2b:4f:71:5a:84:76:b1:15:c4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
        Validity
            Not Before: Nov 26 19:00:19 2024 GMT
            Not After : Nov 27 19:00:19 2024 GMT
        Subject: CN=a845c6a82e56fe0e1f1ab49454cb1977728e5897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:fd:fa:ba:fd:d0:63:76:f2:6f:ef:87:02:
                    52:1a:83:e5:a7:3b:db:7b:6e:1f:33:4a:8c:72:b7:
                    24:5c:93:cf:b4:72:d3:d5:0b:27:2e:01:bf:2f:d0:
                    8c:03:06:32:1d:ce:68:fa:c3:3d:19:b6:75:86:d1:
                    00:12:6b:d1:f4:39:c9:2a:1a:bf:66:b1:4f:80:8a:
                    06:d9:3c:b1:f5:a2:7b:79:62:7b:df:cb:a8:db:be:
                    2e:47:30:6c:59:11:8e:d8:3b:f2:9c:ba:17:1d:90:
                    30:9b:3e:40:1c:2f:27:78:0c:4f:e3:19:02:83:b8:
                    5e:63:56:b6:f7:ff:b7:0e:2a:a8:89:bf:5f:fb:b8:
                    fa:3e:8d:98:81:af:09:25:86:2e:bc:1c:ce:da:3b:
                    a9:aa:1c:0f:33:29:c7:44:46:06:60:3a:90:5c:6c:
                    52:26:55:97:b0:ac:48:41:3a:80:4b:be:9b:ff:f9:
                    e8:f2:5f:62:f0:c3:9a:9c:39:d6:1d:ab:c6:8c:d7:
                    41:1e:ad:6f:3b:b5:c7:d1:6d:5f:2d:d4:21:be:28:
                    7e:da:89:8f:27:15:e5:f9:39:c3:c7:22:23:f7:3f:
                    76:29:78:c4:35:16:88:c6:fb:d8:bd:5b:fd:ad:64:
                    7e:09:bc:66:d1:d5:06:a9:10:33:9f:75:e7:39:5e:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:45:C6:A8:2E:56:FE:0E:1F:1A:B4:94:54:CB:19:77:72:8E:58:97
            X509v3 Authority Key Identifier:
                keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:14:92:15:87:02:17:9d:b6:46:46:62:dc:0d:46:a4:ad:
         3d:45:b0:b2:9a:42:ee:4c:4d:a1:53:aa:98:9d:b0:5a:e8:62:
         5a:1b:89:d3:3d:55:df:a3:15:3f:33:9f:14:d4:96:c6:a6:d1:
         b9:fe:f9:6d:50:84:6f:0f:17:a7:74:94:e2:56:03:cc:3d:21:
         49:f3:96:5c:f2:a0:16:d3:83:9b:2f:4f:ee:e1:7c:b5:4e:38:
         bd:0c:7c:85:5a:3d:38:a1:cf:e7:d0:4c:22:2c:51:44:74:04:
         53:f1:c5:f5:30:51:27:fc:6f:22:c4:8e:80:21:21:1c:73:1a:
         61:69:cf:43:66:63:9b:ae:cc:72:18:b1:0b:ac:d5:fe:90:c2:
         68:65:63:2f:1b:1d:fd:ec:db:3f:f6:f4:8c:7f:11:51:b7:26:
         8b:63:03:83:3d:0d:98:26:c7:e9:ed:8d:cd:ac:14:b9:ab:44:
         9d:e6:0a:1b:73:d2:dc:56:23:07:46:df:a4:19:6c:13:78:43:
         a1:46:b4:68:b2:c3:fd:4a:97:70:f8:c7:dc:16:ce:7c:2d:06:
         3a:75:bc:28:12:64:11:74:0a:d0:b2:1d:96:e2:ac:5f:53:46:
         08:ba:dc:f0:3f:ca:59:a7:44:a5:bf:29:98:f8:56:d6:80:05:
         64:9d:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:05 2024 by rpki-client on console-fra.rpki-client.org