Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File:                     msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier:          4tcxJpiR5kcYFy/Nha31eqPaVeFTkvmT+DX5INHB5kQ=
Subject key identifier:   4B:4A:56:64:9E:43:3F:71:E3:D4:0A:D3:45:C9:B8:B4:D3:29:A7:04
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer:       /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial:       0193688F75FB6996716F78E548B16DE86E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number:          0FEF
Signing time:             Tue 26 Nov 2024 13:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:52 +0000
Files and hashes:         1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: 10aIaAbM00UN2EWWtA7LsvcOEoWd7Wf0ngxPJsebTxg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:75:fb:69:96:71:6f:78:e5:48:b1:6d:e8:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
        Validity
            Not Before: Nov 26 13:00:52 2024 GMT
            Not After : Nov 27 13:00:52 2024 GMT
        Subject: CN=4b4a56649e433f71e3d40ad345c9b8b4d329a704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:21:b5:71:9d:c3:20:10:64:ba:f6:7c:34:
                    98:8b:a2:38:95:e8:0e:5c:3e:42:1c:0e:ac:b5:e4:
                    83:e9:a0:7d:8a:06:0b:63:19:3c:dd:f9:bb:a7:d4:
                    90:c9:0b:49:f8:97:cc:31:8b:36:e2:cc:8a:06:94:
                    96:47:db:13:85:b7:20:d0:78:a0:db:0a:cf:2b:1e:
                    38:ab:b6:ab:2a:03:a7:d6:f8:ff:f3:da:29:16:73:
                    b8:35:8c:15:d6:98:8d:88:f1:e2:ec:e0:b7:fd:c1:
                    6c:9c:1d:ee:1a:09:68:9f:95:c9:08:f0:2b:5c:a8:
                    0f:3b:7c:1e:ec:85:c0:a6:da:e0:99:32:56:7f:fc:
                    38:97:fb:41:a1:c8:9a:1d:76:ab:54:76:fb:d7:b1:
                    8d:22:b1:3a:11:32:34:54:e8:1f:ea:bb:da:da:5e:
                    42:ac:23:9a:31:f1:8e:1a:6c:01:2a:c7:42:f8:48:
                    28:fe:59:2a:c9:5d:72:e1:6a:4e:f6:03:99:44:e2:
                    95:81:5e:fe:83:56:f8:64:67:66:50:44:28:c0:03:
                    82:31:46:6f:db:01:4c:bb:80:86:e4:43:c9:af:77:
                    7f:42:39:0e:3e:08:87:f4:24:70:f2:4f:fb:30:8b:
                    b9:8c:f8:2b:1f:41:c6:ca:d5:20:10:d4:48:1e:46:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:56:64:9E:43:3F:71:E3:D4:0A:D3:45:C9:B8:B4:D3:29:A7:04
            X509v3 Authority Key Identifier:
                keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:48:b6:dd:4a:62:53:ef:58:4a:57:d6:32:d3:d6:1f:aa:
         32:54:13:38:2d:57:67:d7:86:88:8e:2c:22:ae:66:e8:30:0c:
         14:1c:8b:71:24:c8:60:0c:c4:41:11:4f:00:12:63:a7:41:72:
         3f:57:72:1b:4e:d6:d7:d6:9a:00:0f:6c:52:64:17:44:fd:ec:
         3c:81:56:1a:05:af:08:7b:8e:e8:f7:6a:77:17:20:2f:92:d5:
         0e:da:5e:b4:5c:ac:84:62:df:f9:3c:82:35:aa:c1:a0:68:93:
         c4:50:02:ef:b7:d3:1a:d9:c1:ef:c0:e6:93:93:f0:bd:ad:b1:
         c8:61:e9:0c:00:35:84:0d:9f:a6:31:75:b3:e3:79:b5:64:34:
         cf:8a:6a:1a:f9:f6:8e:99:5c:ff:e0:5f:4f:91:bc:ed:8c:1c:
         2b:32:38:dd:45:28:19:de:69:f7:c7:39:71:ab:62:90:66:39:
         ff:cf:82:c7:ac:15:7f:a2:bd:98:49:8b:7f:cb:e1:17:d6:82:
         ba:ee:1f:46:4e:e0:68:1e:7f:35:ec:a5:83:34:4f:fa:01:d8:
         76:6f:58:4f:03:51:db:be:f0:bc:ed:1e:24:94:73:88:3a:9c:
         01:f2:08:cc:2a:11:1c:43:cd:9e:71:cc:0d:6f:3f:2a:5c:3d:
         86:4b:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:51 2024 by rpki-client on console-fra.rpki-client.org