Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
File:                     ux1P6zEebC28c9UE_ISQzCFUY4k.mft (raw, json)
Hash identifier:          8Bwpky1ShZToJw9iYj97PLaBGsdPvNHlJrQyZsaQzSw=
Subject key identifier:   57:59:5C:6F:4F:D5:6C:FB:F7:FB:71:E6:E6:D0:AF:46:3A:9C:77:75
Authority key identifier: BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89
Certificate issuer:       /CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
Certificate serial:       019368C639F8A7BDE0B08F35311AB83E5B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
Manifest number:          BC
Signing time:             Tue 26 Nov 2024 14:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:41 +0000
Files and hashes:         1: ux1P6zEebC28c9UE_ISQzCFUY4k.crl (hash: lBzGL1Dwv791mWFb00SWZ0xh62pOAD4BboHAAJvOzQo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:39:f8:a7:bd:e0:b0:8f:35:31:1a:b8:3e:5b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1d4feb311e6c2dbc73d504fc8490cc21546389
        Validity
            Not Before: Nov 26 14:00:41 2024 GMT
            Not After : Nov 27 14:00:41 2024 GMT
        Subject: CN=57595c6f4fd56cfbf7fb71e6e6d0af463a9c7775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e0:f7:5b:86:c2:89:57:8b:4b:7d:b5:55:f4:
                    14:d3:f6:15:dc:9c:ab:4a:93:d8:0b:d2:ec:5e:51:
                    fe:f4:e1:d6:b5:dc:1f:76:31:fe:80:c2:6b:9c:20:
                    bb:6a:37:58:87:41:c4:cf:18:6a:b6:b0:b2:2e:1f:
                    b0:4a:70:84:b9:8e:81:aa:cd:b0:1f:70:cd:c0:83:
                    9a:0c:7e:d2:45:f2:5d:ed:95:a7:9f:29:d4:8e:b2:
                    9f:af:bd:d8:66:b3:b2:20:4b:36:cc:5f:f8:ef:56:
                    e8:c1:3e:24:34:5d:10:e2:dc:ef:ca:31:73:4c:f7:
                    a5:75:31:74:e6:26:73:ea:f5:b7:eb:6f:2c:81:58:
                    9d:00:da:0d:23:b8:5b:70:1d:1b:e9:01:f0:cd:bf:
                    ce:58:28:fa:14:08:23:bc:ba:35:1a:0b:73:1f:77:
                    2a:81:03:a0:e8:d0:1a:7d:38:e4:43:e1:86:52:d4:
                    f1:00:6f:65:d8:70:e8:47:d3:76:14:f5:43:58:8a:
                    20:eb:c1:8f:f6:80:32:32:a6:ec:2e:13:2e:28:64:
                    33:b0:1a:d7:23:3c:a3:33:e1:93:34:fc:5d:ab:89:
                    d0:f4:cf:b2:a2:cd:f5:86:55:6d:13:f4:3d:06:6a:
                    df:3c:fd:71:25:d4:c8:87:cf:3e:a9:0c:d8:f1:06:
                    ba:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:59:5C:6F:4F:D5:6C:FB:F7:FB:71:E6:E6:D0:AF:46:3A:9C:77:75
            X509v3 Authority Key Identifier:
                keyid:BB:1D:4F:EB:31:1E:6C:2D:BC:73:D5:04:FC:84:90:CC:21:54:63:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ux1P6zEebC28c9UE_ISQzCFUY4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3e2f13-5250-49f2-a472-771ab9fadf7f/1/ux1P6zEebC28c9UE_ISQzCFUY4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:7e:81:f0:a8:3e:0e:a5:1e:34:1e:df:9b:2e:06:e1:86:
         05:7e:49:59:f3:64:73:1f:b7:a1:b1:ed:7e:b3:c6:38:ac:36:
         71:01:a9:71:84:85:b3:97:a3:a7:cd:04:84:5b:41:92:51:d4:
         0c:1c:8b:96:5b:bf:bb:67:6a:f7:b6:55:de:94:72:da:d9:31:
         dc:c0:91:4f:de:64:62:c8:3c:9d:e8:08:88:0f:b5:82:46:fc:
         8f:6f:3d:9c:bd:6a:7b:61:a1:48:1f:0a:f8:c4:c9:57:f6:22:
         fd:80:53:36:d4:07:3c:43:bb:38:d9:2f:11:34:5a:fc:4f:88:
         e0:62:ca:fd:08:3e:3a:26:59:1a:c5:dd:68:49:c3:b7:35:c0:
         c3:b9:7d:28:30:ef:8d:57:64:04:ce:6b:c1:70:ca:23:b2:52:
         29:24:2b:42:de:5f:71:d6:52:ea:8a:77:92:7f:fd:f0:cc:8a:
         97:8a:03:d7:a0:ea:f1:6d:8d:6d:af:f4:7c:af:78:a9:1f:30:
         4a:b8:ed:76:c4:a0:c6:6e:e6:b1:81:20:b0:9b:3c:10:d6:f3:
         e7:30:16:44:8f:7e:30:0a:32:e8:14:ad:57:29:99:e0:12:3e:
         c0:ec:9d:20:99:9d:c7:f8:9d:d4:ea:07:17:af:f5:50:a9:ea:
         27:04:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 23:12:13 2024 by rpki-client on console-fra.rpki-client.org