Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File:                     D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier:          659MW+Zzs53xDMlaxIn4+c21GbFBOTK4Qtf6V27Nr0A=
Subject key identifier:   CE:66:85:7A:96:CB:47:48:1D:14:9B:A2:70:A9:80:D2:96:38:BB:2D
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer:       /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial:       019357649E6C4E3926E2F26F82A615435B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number:          04CC
Signing time:             Sat 23 Nov 2024 05:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:32 +0000
Files and hashes:         1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: T7Tc02v58n0CJD1igUZItKsXW3+44mCJshG0J14crB0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:9e:6c:4e:39:26:e2:f2:6f:82:a6:15:43:5b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
        Validity
            Not Before: Nov 23 05:00:32 2024 GMT
            Not After : Nov 24 05:00:32 2024 GMT
        Subject: CN=ce66857a96cb47481d149ba270a980d29638bb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:65:79:09:86:e1:18:e1:7d:94:22:2b:54:b1:
                    c6:4c:d5:e7:c7:1c:1a:32:41:75:fb:4e:66:d3:da:
                    aa:af:d3:fb:2c:f8:f1:28:ab:df:25:e9:23:e3:89:
                    12:39:67:f0:0f:60:e7:fe:f0:96:79:04:59:af:28:
                    88:56:ba:35:06:87:aa:84:e1:48:f5:4a:dc:0b:87:
                    a3:00:c0:12:f1:1f:d7:c0:26:a3:50:81:de:b1:0d:
                    ca:ff:f6:4b:a5:f5:9a:42:0d:85:74:a0:17:35:5b:
                    e0:90:74:5a:44:42:ee:7d:15:98:b4:50:36:00:0e:
                    79:a8:76:44:84:10:05:f0:74:e4:4d:3c:24:e6:a7:
                    27:c9:91:21:81:89:ff:bc:65:5a:62:df:3b:b1:f2:
                    aa:e4:39:8f:02:49:ca:29:92:0a:78:98:ba:a4:2b:
                    64:95:f8:0e:e8:c3:ed:ff:43:dc:ff:d9:0f:d8:ef:
                    ce:73:cc:24:0d:cb:70:f6:90:93:59:1f:25:4a:82:
                    0b:fe:e3:80:84:0e:d0:32:22:2e:58:64:d4:24:11:
                    de:18:6b:96:c0:68:4e:43:36:bf:7d:2e:e4:81:73:
                    ff:82:5b:f8:16:d8:b9:4f:d1:aa:1c:20:62:5f:57:
                    2b:39:2e:70:df:e6:e1:f4:7f:ac:09:00:9b:e2:e3:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:66:85:7A:96:CB:47:48:1D:14:9B:A2:70:A9:80:D2:96:38:BB:2D
            X509v3 Authority Key Identifier:
                keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:ee:91:d3:aa:21:da:8d:1c:8a:2a:f5:da:c7:32:37:85:
         bf:f5:6b:5d:55:3d:aa:77:4f:19:a9:ab:f9:20:51:73:24:62:
         00:f2:6b:7e:88:80:fb:ec:05:6e:31:f7:3a:6c:22:8c:8d:57:
         de:c1:7c:14:76:5f:ad:b7:c9:01:b1:07:07:20:e8:23:96:1f:
         f7:17:3a:6e:3c:0f:9f:03:bb:0a:44:d1:79:d7:68:18:83:91:
         74:e1:cb:29:95:5b:95:48:29:d4:c2:70:66:ff:3c:3a:be:e1:
         40:ad:75:78:86:5d:bb:1b:b7:dd:f7:1a:70:76:9a:0f:79:0b:
         41:6f:9c:18:28:4e:ca:2e:00:5f:15:49:79:8f:31:80:af:5e:
         12:75:df:96:9b:34:1b:8b:9d:63:ea:18:fc:02:69:c6:b8:39:
         74:b7:a4:4f:ce:8d:ac:5c:37:8b:f7:18:cc:04:a8:39:5f:88:
         0e:b3:b5:95:cc:8e:32:21:03:5e:af:05:4a:1f:f8:62:f4:bb:
         fc:54:f5:6d:87:00:74:57:b8:6b:e7:e5:b4:06:fd:4a:9a:79:
         b0:39:02:be:25:34:6d:4d:2f:88:c2:17:80:f0:da:d8:d6:01:
         c7:8e:2b:7a:44:84:25:59:b8:41:12:92:9b:39:59:07:9f:9e:
         4d:e5:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:26 2024 by rpki-client on console-fra.rpki-client.org