Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File:                     FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier:          qnNNRq57S0rN7lc5lClghT5alTxmdD/UESoVdpg708w=
Subject key identifier:   8C:5E:CA:01:B7:77:DF:6F:F8:9C:DD:A9:05:A5:91:54:8D:30:A4:B3
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer:       /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial:       01940646336FC5A4CF0E0B39159805C66FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number:          13C8
Signing time:             Fri 27 Dec 2024 04:00:51 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:51 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:51 +0000
Files and hashes:         1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: Imr/eNwzOjN8CF8i2rw3AQXNKJ6H+PxsCR2rscFtJOY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:33:6f:c5:a4:cf:0e:0b:39:15:98:05:c6:6f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
        Validity
            Not Before: Dec 27 04:00:51 2024 GMT
            Not After : Dec 28 04:00:51 2024 GMT
        Subject: CN=8c5eca01b777df6ff89cdda905a591548d30a4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:2b:9a:60:9c:49:c1:63:25:b0:4e:c9:b0:
                    0b:51:e2:44:77:ba:56:2b:d6:29:89:b3:10:12:c3:
                    03:a1:b1:b8:2f:d6:5f:0f:c6:7b:87:7a:37:61:50:
                    d9:da:3f:24:d5:ea:91:30:df:a3:83:b7:b2:8a:38:
                    5a:98:3d:b1:9f:4b:fa:85:bd:c9:28:98:37:59:f8:
                    81:4f:09:b9:30:78:b9:3e:c7:8a:83:b3:9e:cb:78:
                    79:92:8a:60:3d:4a:d2:b6:01:ba:32:66:ba:cf:db:
                    31:27:f3:e4:10:d1:8a:6e:f0:b7:b9:b6:4a:77:e1:
                    93:6c:52:a0:d2:51:f8:19:ed:67:8e:fa:9c:2a:81:
                    cd:90:75:5c:23:dc:3b:30:2e:27:d5:b3:3c:1a:76:
                    83:64:dd:c5:4b:70:ea:a4:a2:f1:ad:e8:b5:4c:c6:
                    bc:2d:ad:89:57:d2:07:2d:08:fa:dc:a0:85:37:c4:
                    54:61:9e:d5:e5:fb:25:5f:5b:25:b4:33:5b:26:29:
                    f6:1b:10:92:a9:2e:81:e6:5d:ec:9c:d5:ad:63:eb:
                    84:bc:53:88:a2:9b:15:4c:10:2b:a6:19:71:30:ba:
                    80:72:86:98:ed:fc:3c:8e:c5:a3:52:f4:5c:dc:bc:
                    8d:f7:fc:a8:46:b6:ed:68:68:f4:3b:2c:50:f2:4b:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:CA:01:B7:77:DF:6F:F8:9C:DD:A9:05:A5:91:54:8D:30:A4:B3
            X509v3 Authority Key Identifier:
                keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:a9:34:be:a5:cd:05:99:ca:9a:26:16:a5:2d:dd:11:eb:
         f6:8e:7b:4a:80:d3:07:47:88:fd:76:41:b4:2d:09:b1:91:47:
         d6:f6:af:b4:40:8b:98:b1:f6:0b:63:e1:da:6f:0b:7f:f1:03:
         b6:bb:6b:5b:1f:1c:98:cd:fb:e7:ee:69:f3:9f:65:7d:fa:05:
         fa:45:90:54:a4:31:4a:82:5c:b3:ac:0e:f2:6a:97:64:33:16:
         c2:09:c9:f9:3c:3a:1c:c3:c7:68:56:9a:84:01:de:44:ec:e7:
         fc:d9:8e:a4:a3:45:ff:65:e7:8e:cc:56:fa:b6:3c:7e:4f:b2:
         64:54:51:c6:d3:55:fc:c2:7d:d8:ae:f7:16:60:fc:0f:6e:9a:
         2a:19:20:38:80:84:54:d0:ab:b4:c9:7d:4f:69:a6:85:fb:b2:
         a9:92:96:bb:2d:52:e9:16:d2:f9:2c:74:da:be:ab:4e:49:5b:
         70:ed:1e:a2:5a:de:f3:b8:de:62:48:e9:03:ff:bd:50:cd:90:
         79:ce:55:e2:32:d9:21:97:a8:0c:80:e8:e0:8f:54:94:50:24:
         b1:c1:2f:18:29:6f:d5:7f:7d:fb:ce:72:7b:9b:a7:96:77:44:
         4f:d8:ae:a2:07:d8:a8:b5:78:74:5d:e6:d5:28:6a:33:2f:fa:
         72:98:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:08:37 2024 by rpki-client on console-fra.rpki-client.org