Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File:                     bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier:          9gfsEP/iBjdpNci7s2R/yz5wm+G8pOvqq7VnctkAud0=
Subject key identifier:   A4:B3:A2:7E:7F:AD:0C:53:BC:F5:E8:5D:A9:6C:DA:94:11:EC:54:4C
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer:       /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial:       019368C653607ED2E4A7F78BDCAFF2D7BBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number:          0E7A
Signing time:             Tue 26 Nov 2024 14:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:48 +0000
Files and hashes:         1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: FjohyPKtrTpO2sj3/3bMxS62g20VwMuj1Bi5AAXSMaU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:53:60:7e:d2:e4:a7:f7:8b:dc:af:f2:d7:bb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
        Validity
            Not Before: Nov 26 14:00:48 2024 GMT
            Not After : Nov 27 14:00:48 2024 GMT
        Subject: CN=a4b3a27e7fad0c53bcf5e85da96cda9411ec544c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:ec:ff:48:bd:45:38:dd:04:89:47:ce:e4:
                    a8:66:70:43:39:a6:a9:b2:fc:33:c1:de:1b:28:1b:
                    cd:3b:fb:5f:e6:b5:fa:a0:c9:e4:26:44:a9:27:f5:
                    4e:f4:86:c3:50:05:fb:91:72:e5:a8:9d:b4:b1:6f:
                    ef:95:ef:55:70:04:1b:01:fc:e3:55:52:3e:20:80:
                    b0:24:80:e6:37:5c:30:94:80:99:d2:35:2f:3f:98:
                    1f:1c:3c:86:43:6b:58:a9:00:16:b0:64:1c:10:62:
                    7b:9e:24:a5:35:33:e7:2a:bf:75:e6:77:4c:b8:fe:
                    e0:b3:da:1f:48:05:80:a0:0a:1a:b7:e1:a0:ef:2c:
                    b5:30:34:20:cf:29:7f:97:2a:9d:8d:69:6b:23:28:
                    2a:51:63:83:50:f3:66:6e:97:20:14:cd:c0:85:85:
                    e1:1d:8b:78:8c:bf:fd:93:77:db:26:9c:db:fa:c9:
                    39:5f:06:48:4b:8f:33:f7:0c:f1:80:d9:43:d8:2c:
                    fd:12:16:37:fd:26:d0:d2:22:95:26:c5:38:46:3d:
                    fb:2a:bb:41:f0:b7:8f:52:28:3a:10:86:05:57:e6:
                    10:b7:96:de:9d:cd:b6:0f:45:d8:92:6a:3d:5d:3c:
                    2e:9a:a4:91:7b:c6:18:8c:6e:41:7b:6a:ee:80:d0:
                    bd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:A2:7E:7F:AD:0C:53:BC:F5:E8:5D:A9:6C:DA:94:11:EC:54:4C
            X509v3 Authority Key Identifier:
                keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:85:0d:7c:11:dd:7b:44:a7:2e:cc:eb:6d:b8:da:81:3e:d0:
         1e:dd:73:86:44:75:0b:73:ed:9b:eb:a4:c4:bc:f5:e8:e4:7c:
         f5:1a:0f:aa:8b:fa:da:3c:11:f2:c7:a1:7f:90:64:5c:5a:7c:
         29:71:8b:55:73:81:10:dd:8a:44:06:16:a4:70:52:bc:c9:30:
         e7:f3:46:4c:44:35:8b:39:23:e3:8c:e5:d1:29:ca:43:99:f7:
         e5:d9:c7:7e:0b:b2:2b:80:54:ae:dc:8b:4c:f2:0f:64:c2:7d:
         8a:54:43:eb:57:af:49:13:b8:a7:1d:16:1f:51:75:50:3d:aa:
         ae:03:5e:d7:90:3f:52:68:1d:0d:af:f4:9d:c8:82:ce:53:a7:
         47:b1:f6:7e:e8:8c:ae:06:a3:c8:33:d4:19:9d:84:a0:81:3a:
         46:c3:28:9e:ed:61:b5:3b:36:b8:9d:f5:a7:a0:8c:6e:e0:46:
         1a:da:86:50:9f:65:b1:55:4b:8f:1e:41:33:07:97:04:de:54:
         c0:5c:64:9c:6c:2c:d9:11:73:03:69:1a:7b:c4:20:b7:5b:a8:
         33:d9:d0:46:87:98:eb:d2:07:ca:76:c9:c2:12:02:ee:9d:b4:
         bd:a4:73:37:31:a5:83:7c:e2:b2:f6:b7:af:09:80:02:f3:91:
         1e:28:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:50 2024 by rpki-client on console-fra.rpki-client.org