Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
File:                     1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft (raw, json)
Hash identifier:          gMKd2wIcv171rcliHNXangwcTrXPVn3+eLej8nwWIOc=
Subject key identifier:   D9:75:98:8B:0F:32:1E:06:CF:FC:80:60:A7:AF:FA:0F:55:90:58:9E
Authority key identifier: FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05
Certificate issuer:       /CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
Certificate serial:       019239940D1A4F9BBA66E32CA5EA55145E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
Manifest number:          029A
Signing time:             Sat 28 Sep 2024 17:00:56 +0000
Manifest this update:     Sat 28 Sep 2024 17:00:56 +0000
Manifest next update:     Sun 29 Sep 2024 17:00:56 +0000
Files and hashes:         1: 1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl (hash: 2/geI33Mpo0Oq2wrP217lREX3a+Fwsy9vk3tFnomPeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:0d:1a:4f:9b:ba:66:e3:2c:a5:ea:55:14:5e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
        Validity
            Not Before: Sep 28 17:00:56 2024 GMT
            Not After : Sep 29 17:00:56 2024 GMT
        Subject: CN=d975988b0f321e06cffc8060a7affa0f5590589e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:ee:36:a9:8e:61:b1:c8:74:75:d0:8e:94:
                    14:f0:21:58:20:2b:92:91:ef:16:6e:88:97:db:ae:
                    49:7d:03:4d:4e:d7:de:8c:b4:0f:97:35:39:0f:8d:
                    cd:5f:d6:cb:70:de:1c:b1:02:3b:6a:b5:69:70:fa:
                    71:92:9f:4d:6d:35:0c:b1:0e:75:ae:1b:ee:30:48:
                    74:9b:d1:42:f8:e0:1f:ba:ff:32:ff:cc:b6:f8:de:
                    01:e5:f8:63:c3:54:9a:e6:de:8d:a5:5f:5b:27:57:
                    15:ec:5d:a7:bb:5d:49:91:52:3f:f4:9a:df:d0:97:
                    30:8b:03:b1:be:c8:2f:7a:59:82:cd:3a:aa:29:65:
                    06:58:d1:43:21:f5:27:2e:d3:34:78:f3:81:f5:70:
                    cf:2c:a3:49:4e:c4:41:d4:9d:d1:18:ba:43:47:94:
                    df:55:ef:80:56:31:41:2b:8f:10:33:3b:0f:bd:01:
                    81:90:a9:00:e9:6d:7a:b1:21:79:e9:a1:86:e0:67:
                    ea:39:d8:b2:0a:e4:1b:a6:7a:30:e9:d2:c7:e9:8a:
                    34:15:6d:23:c4:64:df:48:db:d3:e7:df:ec:3b:8d:
                    b0:d1:5c:f3:5d:f6:88:c4:91:bd:ad:6d:ee:a9:bd:
                    74:ad:ef:f2:d0:93:a3:00:8e:87:96:55:c9:77:09:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:75:98:8B:0F:32:1E:06:CF:FC:80:60:A7:AF:FA:0F:55:90:58:9E
            X509v3 Authority Key Identifier:
                keyid:FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b8:9c:6d:83:15:ef:63:ff:e4:97:db:b2:b2:b0:1f:65:52:
         56:4b:83:0b:ab:e5:8c:65:e6:3e:81:bb:fe:92:bf:d2:b9:ed:
         36:82:cd:77:0d:b4:41:0c:09:8e:35:8e:e0:0a:e3:fb:b5:70:
         e8:9f:ad:54:b3:1b:b7:52:aa:e7:61:84:f6:8c:bd:73:f1:6a:
         fd:b2:5a:03:77:98:8e:d0:15:27:05:43:8e:5e:a1:69:d3:68:
         e8:57:37:c3:87:f0:2e:e9:09:70:d6:21:0f:45:3a:1f:62:fa:
         2d:6b:c7:2b:ae:c2:a9:21:64:7d:e3:60:9a:ab:6b:dd:a0:17:
         b9:9b:32:1e:04:7f:b8:d6:1e:c5:e5:85:ec:10:0e:1e:6b:b8:
         15:9d:b4:ad:5f:c8:cf:44:ce:fb:24:1e:b4:84:15:62:70:51:
         ca:a2:65:80:ec:8c:ca:57:80:98:3d:8b:82:6b:07:03:98:cf:
         ea:6f:0e:17:07:a9:dc:bb:91:84:14:99:f3:b5:df:8c:0f:5b:
         54:25:82:64:e5:09:f5:7b:33:a6:a8:f7:5f:1e:ac:f8:ed:40:
         41:3b:13:77:1e:52:1f:95:6f:2c:e3:ec:33:86:d7:bd:51:da:
         c6:de:4f:b1:78:03:e7:22:fb:59:73:fd:5b:0e:73:c9:6e:db:
         d3:6f:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:15 2024 by rpki-client on console-ams.rpki-client.org