Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          5umeZ3ze42nfvpTCYIDWNZHdwZnCQdProvDdr2XQQXI=
Subject key identifier:   09:6B:3F:FF:A5:F5:B8:BF:D5:9D:E5:B3:98:84:43:92:31:F1:7D:A4
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       019352E2DEC2D64CE6FFA24CE74D7C107098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          0E96
Signing time:             Fri 22 Nov 2024 08:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:20 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: 5aI8Srj0pX5VC8QGEcpUAoTGyYcrj1le7uMAsv4Xq/c=)
                          2: ptyWguMwDDRdhuUUmsdufQBzVL0.roa (hash: K0dpRTFW0hGCntfHaea8ipiQbzArPOAX7zyvVshVof0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:de:c2:d6:4c:e6:ff:a2:4c:e7:4d:7c:10:70:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Nov 22 08:00:20 2024 GMT
            Not After : Nov 23 08:00:20 2024 GMT
        Subject: CN=096b3fffa5f5b8bfd59de5b39884439231f17da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:26:3e:f5:44:a8:1e:ef:62:77:b5:64:af:
                    6b:21:d7:66:5c:fe:57:fc:3c:1e:30:7b:01:ed:af:
                    81:8b:a1:5a:70:de:f8:51:0f:d5:76:d1:b1:90:b5:
                    da:75:5a:e2:86:54:4d:7e:da:5b:e0:68:9e:e2:50:
                    94:f7:dd:ea:4b:56:8b:4d:ec:88:df:bb:c5:fc:2a:
                    03:45:af:27:8d:43:6f:59:56:a4:cd:9b:92:58:20:
                    61:86:fa:52:6f:70:e2:54:31:95:94:88:c3:4b:e6:
                    f1:b5:87:07:ec:07:cd:09:47:13:f5:17:f4:f7:01:
                    9d:5a:b6:1e:ef:83:28:34:81:64:23:d1:97:b1:2b:
                    51:03:20:e2:a4:4a:a7:3a:80:9e:df:35:23:d6:b3:
                    0f:fd:35:f1:d3:16:dd:47:f3:5d:86:5b:7a:be:be:
                    fc:07:d3:30:29:29:11:97:60:2d:8e:e5:f1:0a:e6:
                    d3:0e:40:3e:96:eb:0f:8f:64:e0:7a:62:64:1d:84:
                    0b:e7:7d:b2:25:c9:0b:4c:f5:43:57:22:4b:03:45:
                    a8:71:15:4c:a6:fc:bc:61:09:a8:1d:99:74:58:f6:
                    cf:16:4b:dc:dd:6f:47:35:c2:ab:91:8b:33:f2:56:
                    27:bc:73:88:5e:9e:57:d2:82:41:22:59:e7:63:d7:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:3F:FF:A5:F5:B8:BF:D5:9D:E5:B3:98:84:43:92:31:F1:7D:A4
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:16:ab:2c:ad:d9:ca:f4:d9:f1:91:05:e2:48:00:09:76:0f:
         65:b8:26:38:e0:d9:91:4c:59:0e:54:29:b5:80:73:a2:36:47:
         76:ff:13:cd:f9:03:3d:04:96:dd:53:c3:48:25:90:7b:6b:08:
         61:f2:7d:1b:24:ce:02:04:9a:fe:c4:90:bf:01:83:a9:91:b9:
         42:9e:f7:26:53:e6:87:30:c6:8a:d0:c4:0d:97:36:8f:1e:0f:
         19:06:7e:99:78:8c:b8:0d:b5:ce:81:25:6b:ae:c1:94:26:de:
         4a:e0:8f:54:07:65:9c:2f:55:bb:2c:dd:48:57:78:7f:2e:4b:
         0c:8f:b1:ad:22:b8:c8:96:ac:69:6a:2b:45:ba:e2:8d:59:c9:
         c3:20:11:33:f2:44:6f:5e:06:4c:b6:13:bc:13:de:ac:3c:79:
         68:7d:87:4b:57:15:f8:9c:14:60:2b:2d:13:cf:ee:00:55:c0:
         c4:e2:17:9c:0a:c1:6c:78:d5:4b:53:85:90:34:2d:e4:bd:e5:
         9d:b4:10:af:21:b8:63:92:4c:85:9a:cc:ba:26:7d:fd:34:af:
         07:2a:9f:23:a8:41:2a:df:0d:f2:27:fc:88:7b:bf:ff:49:e4:
         e8:c5:59:a5:0c:fc:63:87:fd:bc:1e:55:86:0f:ba:33:59:7f:
         0a:a0:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:24 2024 by rpki-client on console-ams.rpki-client.org