Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
File:                     0PncQczPGwp4tNaiRk59u8YhwCE.mft (raw, json)
Hash identifier:          rsGGjBsPg6QOygaSWQXbRIcqsJUMI/l3XZM7kc54w4c=
Subject key identifier:   1E:1A:52:D5:50:31:96:F0:60:37:C8:CC:37:C5:21:86:37:E6:4C:3C
Authority key identifier: D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21
Certificate issuer:       /CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
Certificate serial:       019365FCCC3056E8B1BDB74A4F4AA1EBADD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
Manifest number:          030D
Signing time:             Tue 26 Nov 2024 01:01:26 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:26 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:26 +0000
Files and hashes:         1: 0PncQczPGwp4tNaiRk59u8YhwCE.crl (hash: dA+CbCDjgqLXEcdZUIHYr6iHDgRdHQQ+ef8z/nAVW+I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:cc:30:56:e8:b1:bd:b7:4a:4f:4a:a1:eb:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f9dc41cccf1b0a78b4d6a2464e7dbbc621c021
        Validity
            Not Before: Nov 26 01:01:26 2024 GMT
            Not After : Nov 27 01:01:26 2024 GMT
        Subject: CN=1e1a52d5503196f06037c8cc37c5218637e64c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:ff:41:b9:5f:a9:50:d2:c8:9c:32:36:18:
                    5d:a2:e3:bf:39:8d:05:2b:b8:15:bc:c0:7d:6c:7f:
                    a2:55:e5:04:20:ea:30:97:b9:a3:a3:a1:be:e0:2b:
                    f1:98:f1:94:aa:63:23:84:76:c7:91:62:b2:c9:88:
                    63:1e:2e:76:fd:a9:a8:8f:05:15:19:b1:28:9b:26:
                    ce:2c:29:ce:9b:fc:d4:29:e9:4b:52:f2:01:31:af:
                    ee:63:11:15:67:b2:31:49:6b:ab:92:b4:f9:62:42:
                    1f:6f:f4:87:d5:e4:86:cf:4e:8a:74:4c:76:2f:ee:
                    29:3d:1b:79:74:a5:fc:0a:57:03:89:76:13:ea:b4:
                    51:ba:ed:1b:a2:63:4b:93:7c:ad:7c:a8:e4:7a:68:
                    f7:4f:ac:39:9a:30:32:94:95:61:87:2c:3e:cd:6f:
                    39:eb:27:86:9c:4f:ff:ba:75:68:74:4e:ba:08:0b:
                    1f:2b:52:ef:51:4e:36:82:bf:14:a2:fd:f0:03:65:
                    d0:00:08:02:b7:f0:ca:bc:af:8e:ef:69:ea:5c:6d:
                    5e:84:67:d3:d3:80:93:7e:3a:f2:30:c1:c9:0b:ca:
                    68:90:35:5b:ac:7c:e1:75:11:46:0d:1b:f4:ec:32:
                    73:d7:08:4f:a4:d7:62:5d:c9:a1:5b:72:47:e7:77:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:52:D5:50:31:96:F0:60:37:C8:CC:37:C5:21:86:37:E6:4C:3C
            X509v3 Authority Key Identifier:
                keyid:D0:F9:DC:41:CC:CF:1B:0A:78:B4:D6:A2:46:4E:7D:BB:C6:21:C0:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PncQczPGwp4tNaiRk59u8YhwCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5c8735-4cdd-4f84-bc23-4bb48d28390a/1/0PncQczPGwp4tNaiRk59u8YhwCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:27:8e:7c:b1:f3:70:d5:18:c1:77:70:b1:b1:85:46:d3:
         aa:fb:da:21:6a:57:5e:e8:3c:d4:7f:af:97:84:a4:3a:97:73:
         37:e1:f6:60:bf:63:97:41:ba:06:b4:2b:3b:b1:1f:83:09:a2:
         6f:23:58:66:75:ea:4d:5d:bb:69:55:4e:79:88:ac:4a:db:60:
         1f:70:e5:9f:a1:c9:08:38:c7:1f:37:b1:a5:d1:ea:55:07:53:
         01:5b:53:36:4f:94:5f:fe:20:b6:a3:29:34:f5:a3:fd:a5:53:
         c2:4b:41:29:da:b4:3a:9d:84:05:9f:66:8a:e0:f3:af:80:2c:
         ae:bd:b8:b2:c7:c8:ca:76:04:77:df:ce:44:2a:e4:ae:97:88:
         66:d2:0a:17:32:b9:2c:82:a4:85:91:87:04:33:f5:bd:7a:2b:
         69:99:6a:b7:0c:18:26:eb:d2:1a:66:cc:90:bc:12:a3:d6:13:
         a9:d3:97:d8:da:a4:b3:04:73:86:bd:95:68:ec:40:2b:a4:32:
         17:49:80:4f:82:7e:98:c9:06:8b:ef:62:61:bb:20:ce:e5:04:
         6b:8d:a9:ca:bd:c1:d1:a8:2d:92:dc:7b:39:13:fb:fb:45:e4:
         ac:ef:f1:aa:45:2e:80:63:4c:dc:93:0d:8c:f6:77:0b:30:96:
         6a:6b:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:11:56 2024 by rpki-client on console-fra.rpki-client.org