Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File:                     _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier:          ZjQko3TC7ci08xDBATmDBhi6vMdTs1DyK+9iX8OK8Y0=
Subject key identifier:   86:1E:55:A9:0D:ED:4A:C4:28:28:AD:A4:6A:2D:04:1B:62:1A:51:15
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer:       /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial:       019357D25A0056C41EBD1F9FB170D9EE0996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number:          028E
Signing time:             Sat 23 Nov 2024 07:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:23 +0000
Files and hashes:         1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: xb8z9BDBb9GmxLE8PhVsZ4k2AwvYzROZWOwb10wNqA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5a:00:56:c4:1e:bd:1f:9f:b1:70:d9:ee:09:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
        Validity
            Not Before: Nov 23 07:00:23 2024 GMT
            Not After : Nov 24 07:00:23 2024 GMT
        Subject: CN=861e55a90ded4ac42828ada46a2d041b621a5115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:29:b6:34:6a:2e:50:ff:10:d0:b3:27:0b:
                    d1:4f:7e:1e:15:f0:d9:eb:13:07:65:c7:46:de:44:
                    22:c0:ed:6e:4e:e9:bb:2b:14:d0:96:fd:9d:e2:fc:
                    1e:cd:c8:19:38:7a:43:91:86:3a:72:8f:0e:00:2d:
                    76:1c:fd:78:0f:56:96:6c:ae:24:62:f4:2e:6a:8b:
                    8c:99:ac:16:a2:df:39:72:9a:37:f1:e3:70:6b:42:
                    9f:47:5b:3a:be:12:b4:25:45:b5:20:cd:d3:dd:2e:
                    2c:d6:2a:d7:88:f5:42:1d:9b:70:41:24:b5:af:51:
                    c0:b9:32:09:4a:71:f3:e1:ab:3e:e1:2f:8b:e9:3a:
                    51:3f:a5:16:8f:8d:44:50:d4:0a:92:3c:ac:e9:65:
                    96:2a:0d:02:6e:c9:02:74:80:83:f2:00:12:db:9d:
                    ba:80:a1:70:61:14:4d:37:92:4e:fc:69:6e:5e:6d:
                    e4:1a:39:dd:a5:e0:3b:f6:d4:d9:f8:e0:7f:60:f5:
                    a0:14:98:49:70:3a:33:d7:59:f0:ab:a2:84:05:4f:
                    c2:f9:ef:e1:0a:d8:fd:28:ba:ad:57:f1:27:0e:f2:
                    cc:ee:40:fc:80:af:a2:8d:78:11:7d:36:1d:42:02:
                    c4:d9:45:6e:6c:21:e6:06:c8:c4:43:cb:66:a3:2e:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:55:A9:0D:ED:4A:C4:28:28:AD:A4:6A:2D:04:1B:62:1A:51:15
            X509v3 Authority Key Identifier:
                keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:54:01:74:15:69:54:af:fb:34:a7:6c:68:2a:c2:a8:49:b8:
         5f:a2:91:d9:b6:06:2d:71:3b:d0:d3:ff:c9:76:7d:7b:ac:b8:
         58:a6:10:83:ed:9c:32:82:b7:02:62:0d:e9:f7:79:82:91:fe:
         cf:73:f5:c1:4d:90:a7:27:b7:5f:d4:08:e6:99:d8:c0:ce:53:
         19:b5:1c:a8:d7:20:6e:68:e3:fc:98:b8:26:e3:03:d0:1d:71:
         f6:ea:c8:11:b6:2f:e7:99:e0:f9:7c:fa:93:b8:dd:e0:56:e8:
         f6:bc:0a:1c:17:03:b4:f7:21:36:03:83:80:10:53:55:27:f6:
         44:2b:c4:24:4b:7e:d0:e5:fd:af:d7:16:af:f3:74:2a:5e:d0:
         21:10:ac:0e:12:68:db:0b:db:20:d0:b2:86:6e:fe:95:7b:7c:
         31:69:33:cc:16:b9:0e:2b:2a:24:6b:7d:7f:87:4d:7d:6b:fa:
         6f:b6:70:64:a4:9d:91:c3:2c:f0:a2:92:c2:be:53:52:d5:88:
         de:da:eb:a8:87:d8:ba:ea:8f:6e:3c:e3:3d:69:2a:04:c2:64:
         bf:82:1b:13:77:a6:30:4a:66:c7:d9:e6:26:aa:df:f4:a9:67:
         b0:3b:db:b2:7a:0f:97:42:24:eb:e8:05:01:9e:d4:7d:64:f0:
         7f:a3:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:02 2024 by rpki-client on console-ams.rpki-client.org