Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
File:                     97LAktArE86qejP_BXqECmjXFSE.mft (raw, json)
Hash identifier:          e17B7PQLugOeRkmT0wMBkZ5cc7iXxHF75s6SNhSZF1c=
Subject key identifier:   74:A6:85:86:CF:FA:B6:8E:88:C6:AB:0E:38:3F:59:DD:D8:A8:69:C2
Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21
Certificate issuer:       /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
Certificate serial:       0193568B07C3D5E7F3A061F2859628F1F227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
Manifest number:          0D92
Signing time:             Sat 23 Nov 2024 01:02:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:52 +0000
Files and hashes:         1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: qyE9KqERswFfj/qcwR0rldq5nxcBM5cuOPizGYRM84U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:07:c3:d5:e7:f3:a0:61:f2:85:96:28:f1:f2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521
        Validity
            Not Before: Nov 23 01:02:52 2024 GMT
            Not After : Nov 24 01:02:52 2024 GMT
        Subject: CN=74a68586cffab68e88c6ab0e383f59ddd8a869c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:72:0d:c6:35:45:bc:cb:22:37:83:5d:77:
                    17:fb:68:9f:06:95:c3:5b:77:5c:3a:28:f5:e4:a7:
                    d1:60:b4:bd:bb:70:98:e9:b5:a1:8b:30:45:3e:17:
                    e7:46:e5:84:a1:b4:72:07:91:f4:35:6d:22:80:5a:
                    ac:b0:82:49:b4:9f:32:bc:ef:f1:75:44:93:48:c6:
                    3a:44:f0:c7:36:2e:fe:90:b4:7a:bf:38:80:bd:64:
                    6c:07:bf:b4:7d:ed:20:f2:46:f9:47:81:85:4f:69:
                    d9:ab:9c:ad:03:7e:e7:69:f8:53:b0:0f:18:18:7d:
                    6e:b0:92:7b:0e:5a:35:1b:91:6f:b1:f8:3f:4c:cc:
                    7f:1c:87:45:3f:48:7a:a1:0c:d6:6e:af:50:87:73:
                    01:92:4b:b5:ee:b4:36:fc:1e:23:09:57:69:3d:29:
                    da:40:13:ff:9b:a2:a8:75:6f:af:77:10:52:fd:57:
                    4b:64:5d:be:b7:d8:e8:01:ad:88:ba:a1:8a:50:01:
                    f9:39:f8:34:0a:64:6a:82:70:ee:a7:5d:e8:f4:2a:
                    b2:d6:f2:90:ac:b0:2b:69:b3:6d:33:b9:71:47:56:
                    f9:21:08:da:f0:e7:8d:a0:e9:e1:fb:fc:fb:7e:a0:
                    cb:0d:15:c5:b5:47:52:00:40:14:a4:f2:db:a2:e3:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:85:86:CF:FA:B6:8E:88:C6:AB:0E:38:3F:59:DD:D8:A8:69:C2
            X509v3 Authority Key Identifier:
                keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:92:47:2f:91:10:59:88:4a:9c:28:e4:88:4c:44:a0:39:
         be:5e:03:2a:1c:75:fb:75:3f:8b:68:31:62:f9:d8:10:0c:30:
         96:81:65:23:86:e6:70:26:53:64:ce:4c:f1:40:3c:1c:c3:55:
         da:b2:15:6a:28:65:3e:7a:76:78:f1:46:43:77:76:0d:61:8e:
         64:b9:7c:44:49:f6:82:de:7b:cd:7b:43:f4:34:75:19:36:0e:
         34:a2:ff:cc:30:d9:28:91:33:96:72:39:af:0e:42:01:dd:81:
         ac:cc:47:8a:aa:52:e8:42:e7:ff:0f:c3:53:67:c1:4a:f5:71:
         dc:2c:c9:3b:b9:f6:b1:81:6f:c0:22:48:a9:90:e5:f5:20:dc:
         c4:56:71:63:49:95:ae:6c:af:17:e2:46:0d:47:5e:29:09:d6:
         ca:1e:6d:90:8d:cb:eb:31:f2:08:40:98:f2:f4:20:51:92:0e:
         12:42:85:65:32:51:24:3e:55:cb:dc:71:85:e4:7b:29:0b:bc:
         40:08:7b:b9:ab:e5:a7:a4:60:e9:f9:a2:ec:6f:ef:83:bd:c5:
         72:81:76:fe:bf:a1:bb:9a:fc:67:e4:80:30:bf:cb:08:f3:a1:
         00:70:c6:67:d8:9b:a5:21:71:e9:a0:13:71:59:d6:66:62:32:
         d6:2d:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:46 2024 by rpki-client on console-ams.rpki-client.org