Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File:                     1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier:          uKeCclvnkWDtt+/Ub+mH89kKn4lTEgQD4ZToqJKdMgE=
Subject key identifier:   36:DD:E9:70:B7:81:29:C8:D0:A8:80:BA:51:ED:48:8E:BC:B7:9A:78
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer:       /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial:       019369D9F2215B77AB12FA72D7DD639BE7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:01:51 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:51 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:51 +0000
Files and hashes:         1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: 2AUSEiKgvM6+o58VzqjhJHuNBDfWBmt7L27TbnGYwGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:f2:21:5b:77:ab:12:fa:72:d7:dd:63:9b:e7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
        Validity
            Not Before: Nov 26 19:01:51 2024 GMT
            Not After : Nov 27 19:01:51 2024 GMT
        Subject: CN=36dde970b78129c8d0a880ba51ed488ebcb79a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:f0:7a:85:c5:d8:e8:ad:92:fc:e6:86:ed:
                    cb:a6:5e:4e:11:ae:87:51:92:54:3b:ba:1d:31:6a:
                    a2:ad:2d:f6:ae:c9:5f:b1:2e:79:ac:c3:18:5d:71:
                    0d:54:4e:26:93:83:8b:a5:07:c5:41:2a:4a:a7:3e:
                    27:16:fc:cb:c2:23:67:9f:29:59:8c:09:e5:b3:e0:
                    9e:9f:7f:26:eb:39:7b:41:3e:d9:0b:d4:be:55:31:
                    18:2b:be:fc:a0:5d:13:1f:03:89:00:81:57:d4:b3:
                    2e:77:fb:28:75:fd:94:3e:90:52:2c:c3:c1:29:98:
                    fb:fa:fd:e8:3e:76:8f:b2:5a:c2:7e:3f:dc:a0:52:
                    d4:bc:78:cd:23:0f:4a:89:df:3a:de:ab:63:db:01:
                    fe:17:e2:e3:ed:58:4d:a2:64:d0:47:b5:d2:a6:00:
                    5d:f1:4b:56:c2:00:96:db:8f:dd:7a:f6:75:35:7a:
                    11:3d:01:cb:3d:54:70:b6:c7:1d:e6:35:f5:a1:86:
                    e8:93:46:8a:76:eb:50:b6:8b:c8:37:bd:15:10:dc:
                    cf:be:2a:b7:fc:12:53:d8:d0:3d:11:15:3f:4f:a4:
                    28:36:6a:ba:5a:a9:9f:07:70:61:c9:a3:50:04:d3:
                    95:81:ac:b9:10:a6:56:80:4c:2d:a1:d7:f9:a5:d8:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:E9:70:B7:81:29:C8:D0:A8:80:BA:51:ED:48:8E:BC:B7:9A:78
            X509v3 Authority Key Identifier:
                keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:18:aa:59:ac:72:de:14:6f:5a:9c:9b:ab:a4:f1:80:e9:d7:
         ea:fb:6c:fb:2f:40:2e:8e:bb:93:93:96:87:50:71:0c:24:87:
         a2:c3:28:00:6b:18:1c:3f:dd:8d:49:fa:c2:38:2b:7b:59:51:
         d7:04:65:69:c7:af:a9:61:76:65:04:e9:1f:bd:24:7b:5f:db:
         ec:9b:ba:8d:4a:a6:2c:8b:b2:2d:bd:fa:56:e3:93:52:ed:ca:
         ee:c0:22:ac:41:8f:39:e5:ec:b9:c1:84:c1:0b:b1:c4:5b:06:
         59:0e:8c:8b:d7:e6:a1:d1:da:4a:40:ec:e1:08:b2:01:bf:5c:
         74:17:02:19:d1:e7:ff:4c:00:23:11:28:2b:f6:dc:64:f3:90:
         cc:b0:e9:44:e7:44:61:2c:cf:03:18:43:9d:d1:ac:62:ac:c0:
         c2:22:37:92:6d:c3:04:61:45:bc:a3:05:36:dd:29:c6:c6:61:
         b9:0f:51:0c:0d:ca:23:85:c2:12:34:5c:6a:f7:76:e6:7c:80:
         2c:84:86:de:72:db:d6:4e:ad:c6:cf:39:f2:c1:6b:a7:46:31:
         e0:d5:2b:9e:15:e3:b0:ad:a7:71:17:ab:1e:02:a7:b5:d7:08:
         e9:71:ed:5e:d2:79:c9:90:ff:51:3b:a3:91:f4:6d:18:b7:c5:
         42:98:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:35 2024 by rpki-client on console-fra.rpki-client.org