Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File:                     jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier:          ISzEeULkfeGG9qvM5Y7YB8iPqV85DLD5/wSOleS1LsI=
Subject key identifier:   15:34:8C:5D:75:B3:8D:5E:05:BD:29:DF:85:8B:65:DB:C0:30:D7:DF
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer:       /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial:       01936A7DB3F9172510FCADC8F3602436438B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number:          0463
Signing time:             Tue 26 Nov 2024 22:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:43 +0000
Files and hashes:         1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: QPcjtj9H8GJSYN4wvaVznHYhQ6F4jgVRVjyu3orIx3s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:b3:f9:17:25:10:fc:ad:c8:f3:60:24:36:43:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
        Validity
            Not Before: Nov 26 22:00:43 2024 GMT
            Not After : Nov 27 22:00:43 2024 GMT
        Subject: CN=15348c5d75b38d5e05bd29df858b65dbc030d7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:58:bc:43:aa:4c:0a:d1:42:e9:af:62:a3:
                    bf:d1:1d:f0:21:62:0a:f1:56:e7:a5:fc:1e:8c:58:
                    0b:ae:af:6c:b0:6d:2b:6e:e6:0f:7e:03:e0:63:06:
                    be:08:34:b7:7e:a7:aa:b5:68:cf:7e:e4:92:1a:5a:
                    ef:6a:0d:a6:93:62:0c:6a:7e:ad:59:b2:0c:35:bf:
                    43:fb:62:06:ef:ff:3e:ce:89:5c:ad:30:ae:e3:e9:
                    ea:f8:94:fb:83:47:82:9b:24:eb:2b:5a:f2:88:4b:
                    ba:66:b7:d6:c1:53:3d:6e:b6:cf:ea:90:e9:c6:d4:
                    6e:b6:42:e8:3d:3b:e1:92:f2:13:70:b7:d3:b9:87:
                    09:5b:90:f3:82:04:e6:45:c4:1e:a0:db:32:48:1f:
                    f5:00:69:97:a7:34:75:dd:ea:1d:b0:eb:2f:79:43:
                    bd:bf:9f:c0:3f:59:0f:94:fd:95:83:76:f0:91:83:
                    43:2b:bd:21:d8:d0:b7:ea:f3:05:f9:6d:34:5f:e7:
                    4a:2b:67:28:c5:0e:ee:ca:ba:0b:f5:0e:8f:8a:ac:
                    7f:60:f5:14:f2:9d:0c:db:c6:d4:b0:4e:49:52:31:
                    71:4a:d2:d6:c6:13:49:39:f1:50:dd:0e:fe:fe:98:
                    32:87:47:5e:b5:09:83:69:5d:d6:9c:15:92:ab:27:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:8C:5D:75:B3:8D:5E:05:BD:29:DF:85:8B:65:DB:C0:30:D7:DF
            X509v3 Authority Key Identifier:
                keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:96:19:18:9c:37:ba:5f:e2:b9:6f:64:23:0c:8e:27:8d:
         8a:9e:97:40:d0:d8:e2:cd:8b:5a:64:ed:61:e5:0b:d7:ca:44:
         ab:22:9c:01:89:ac:7e:2a:64:09:c9:af:fb:af:e6:15:86:01:
         ac:ab:10:2c:d3:c9:b7:53:6e:81:79:9e:fa:6f:d6:dd:cb:2b:
         c7:3f:8d:5d:ce:37:84:46:6a:64:76:a3:9d:66:f7:91:c2:1a:
         52:7c:26:f3:ab:eb:a7:fe:d0:a3:3d:8a:41:6c:c5:48:f0:b5:
         c3:51:c8:0c:70:ea:a7:6a:7b:6a:c3:c3:a9:97:78:c4:e3:30:
         7f:16:66:64:73:5a:0b:49:4d:b6:bc:3e:b6:43:23:af:28:34:
         92:c5:9b:2d:6f:cf:53:7a:a6:78:28:22:0e:b3:9a:77:ec:fb:
         04:fe:a7:af:45:e7:bf:55:e4:bd:95:41:aa:e4:c1:ce:84:28:
         e7:d2:c4:c3:d2:cb:0a:46:32:92:2d:64:43:8d:74:1a:31:43:
         ce:35:b5:70:3c:ea:80:88:21:61:96:06:76:58:df:e6:95:b0:
         a0:f8:3c:c6:de:48:0f:2b:63:3a:d0:e4:e9:df:cb:e4:60:7d:
         67:24:8d:1c:da:8e:ba:f2:b9:8c:d7:fc:e5:9f:54:e9:58:8a:
         e8:39:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:38 2024 by rpki-client on console-fra.rpki-client.org