Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File:                     cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier:          fC2ldIeDXwEBwV4m1VWvSDU8slu1c8ZJ0hzTtlhwSKU=
Subject key identifier:   D9:E3:87:0D:21:2F:84:64:AC:44:79:25:12:3D:78:04:AE:DB:F3:D3
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer:       /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial:       019356F6D2F56059D5BB2A0709BC544CDEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number:          06B0
Signing time:             Sat 23 Nov 2024 03:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:36 +0000
Files and hashes:         1: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: LjzklVMt5vEd/eLNB6uICvheyW1zS+gBD82gOrpgA4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d2:f5:60:59:d5:bb:2a:07:09:bc:54:4c:de:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
        Validity
            Not Before: Nov 23 03:00:36 2024 GMT
            Not After : Nov 24 03:00:36 2024 GMT
        Subject: CN=d9e3870d212f8464ac447925123d7804aedbf3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:5d:b4:dc:df:62:73:1e:5a:d6:48:c4:80:
                    88:1e:6f:6e:86:f0:fc:cc:5f:65:0f:bf:03:d2:49:
                    6a:95:fb:37:c7:c7:a2:55:39:46:ef:d0:84:11:98:
                    b8:28:8e:be:1d:cc:33:67:b1:21:06:3e:50:d0:82:
                    8f:33:29:f4:e1:0e:a8:c7:e1:5a:5a:a2:09:33:2b:
                    10:5b:5d:d7:57:e5:18:2f:11:9d:2c:ce:14:5a:33:
                    bb:57:21:79:fc:8d:31:b1:5a:f1:d9:6d:48:c8:44:
                    53:e9:d1:f4:7e:57:11:40:9f:32:1e:b9:c2:21:95:
                    dc:ea:d9:f3:63:e9:48:5a:b2:88:a0:35:f5:fa:49:
                    f6:25:1e:23:3a:0a:04:46:9c:e3:c1:09:d7:e8:37:
                    54:76:93:ba:41:d3:c3:95:fc:eb:82:56:71:e5:40:
                    f2:88:c0:2b:79:c5:8a:98:00:e2:2c:80:76:c7:7c:
                    40:ab:77:f5:ec:c7:a9:4d:28:17:64:d1:4e:68:cd:
                    f8:9f:a4:d4:32:75:5e:f3:d4:c4:2d:8c:47:3f:83:
                    51:0a:83:2e:f0:fe:8c:b1:ae:04:99:50:61:73:32:
                    36:7c:eb:43:91:a9:b8:98:24:f3:9d:98:74:98:11:
                    50:a1:97:94:70:ae:db:4d:f0:18:b8:7d:22:1f:16:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E3:87:0D:21:2F:84:64:AC:44:79:25:12:3D:78:04:AE:DB:F3:D3
            X509v3 Authority Key Identifier:
                keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1e:24:08:26:aa:e8:a0:35:95:0a:d0:f1:b7:39:7f:b8:a6:
         8e:67:50:9e:37:9f:51:d1:d2:31:c8:ac:7f:b6:84:45:ec:b6:
         34:2e:5c:44:e9:04:33:9c:e9:64:74:78:7b:2a:6e:4c:95:d9:
         9f:11:03:36:c6:c4:32:dc:e7:0b:5e:9d:85:83:6b:2c:fa:1b:
         1e:f7:3a:8b:1c:a0:11:ed:c6:02:9a:88:e3:99:5a:1e:60:4f:
         95:8b:40:a0:d2:b6:b5:d9:57:bf:b9:23:1b:93:77:ad:b7:e0:
         55:7e:ac:11:ab:55:6a:59:a2:66:86:be:d3:ad:2b:ad:6d:0a:
         bd:1f:ed:c4:d3:cf:8c:fe:71:6f:8d:0f:c9:00:37:ae:1a:54:
         8f:cd:5a:99:aa:fe:ac:7b:64:93:2f:84:b8:fa:67:f9:29:6e:
         7b:b9:23:a1:83:ba:7d:fb:5a:e9:c4:a6:db:6c:51:ca:29:ee:
         23:99:2c:40:dd:60:f4:ab:0b:a6:a4:67:6c:72:af:c0:7d:84:
         8b:cf:fc:99:46:23:83:96:16:d9:e8:64:28:03:73:e9:bc:18:
         93:ba:05:88:4c:08:7a:12:c2:03:71:49:ea:49:5e:4e:11:66:
         ae:1f:fc:28:29:41:98:8b:12:26:69:25:53:59:bf:22:fb:51:
         24:13:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:54 2024 by rpki-client on console-fra.rpki-client.org