Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File:                     JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier:          LtCm7m5KRezCqf5y1Ycm4pc6pP2VxJhgJ7M+p1gnlaM=
Subject key identifier:   F2:E2:9B:48:3A:91:05:CF:F4:CA:25:BC:FD:29:E1:F8:1E:67:47:C8
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       019369DA493E6BFCD17006DEEF234844B819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number:          11ED
Signing time:             Tue 26 Nov 2024 19:02:13 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:13 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:13 +0000
Files and hashes:         1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: Msqb6Clkx641X5fFstXvzdWZMjLIWdAM28Ptui520Ag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:49:3e:6b:fc:d1:70:06:de:ef:23:48:44:b8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Nov 26 19:02:13 2024 GMT
            Not After : Nov 27 19:02:13 2024 GMT
        Subject: CN=f2e29b483a9105cff4ca25bcfd29e1f81e6747c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:9f:19:8a:43:54:75:a3:e2:c0:04:7c:41:
                    c0:bd:e8:63:30:ca:02:7e:57:36:23:3a:c1:88:07:
                    ac:42:c0:29:27:ef:c6:7c:f7:07:82:c2:c5:01:b2:
                    8f:c6:9c:c4:bb:1e:8e:62:04:b7:e1:9b:4f:e6:0d:
                    5e:bc:c5:a9:c0:4a:02:af:d3:e3:87:fd:3b:44:eb:
                    33:51:1a:a1:cd:31:f0:54:27:06:63:bf:65:41:b7:
                    06:bb:87:30:26:a7:d7:19:dd:11:a4:29:02:8c:e1:
                    2a:22:1d:ec:51:cd:e5:78:e7:4b:0e:0d:8a:5f:af:
                    42:d3:bb:b9:85:f5:a8:59:93:73:ca:3d:b8:3a:1f:
                    ed:3f:a3:65:54:1e:72:de:77:24:b9:bd:d6:d1:38:
                    d2:8e:ba:b6:b8:1c:6d:5b:94:05:ae:64:fa:c2:fd:
                    6a:c4:76:79:7f:f8:0c:fe:bc:b4:f5:c8:eb:03:ac:
                    a8:39:2b:6d:3c:2a:72:35:51:57:28:94:42:7f:01:
                    46:9d:b0:aa:d0:bc:0c:d6:5f:f1:c2:1e:82:a9:d9:
                    92:07:3f:af:57:e4:e5:f2:c3:87:30:50:5d:fe:1b:
                    cc:a8:5d:19:50:b0:34:ee:26:8d:4c:97:e3:70:68:
                    e6:81:b2:6e:54:a2:ab:c3:09:da:18:e2:8a:ba:c5:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:9B:48:3A:91:05:CF:F4:CA:25:BC:FD:29:E1:F8:1E:67:47:C8
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e9:d3:1c:c0:e2:5b:ed:4b:b7:e8:71:7a:84:ca:0b:c0:44:
         5c:1e:b4:b9:3a:24:95:1b:04:44:1e:15:20:4d:0b:a0:76:ee:
         0b:af:ac:5d:c6:78:c3:49:43:0c:3f:da:80:cb:14:70:6e:dd:
         81:5f:a0:21:6b:59:a4:a7:0b:58:b4:c1:00:11:13:5b:c1:d1:
         82:64:89:3b:d0:4f:c1:92:11:66:91:df:97:52:95:d7:7c:d4:
         fa:9a:0c:72:64:74:28:59:c5:b3:8e:f3:49:e1:f5:0a:fe:42:
         4d:4c:93:1a:f3:20:8e:21:13:dd:77:06:83:5f:48:48:56:9d:
         f5:e8:e4:f9:5f:6d:8e:17:4e:52:c6:d4:da:0a:66:ab:38:7c:
         d0:da:d0:1b:93:05:17:29:62:35:d3:dc:5b:0a:ef:e1:40:18:
         c7:8d:9f:8e:e3:25:9a:05:4f:27:e8:b4:1a:66:84:2e:00:63:
         94:14:83:23:e3:d1:8b:32:f9:3c:df:24:90:e2:19:69:95:41:
         96:55:46:41:5a:7a:ce:54:f1:6d:b9:e2:e9:8a:68:07:15:1f:
         1d:3c:35:6a:23:d7:67:89:4b:a6:6b:0c:52:2f:0c:a0:82:5a:
         9c:72:a8:0e:42:a2:70:0f:2c:bf:80:7f:8a:13:a3:37:da:3b:
         77:25:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:55:49 2024 by rpki-client on console-fra.rpki-client.org