Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File:                     pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier:          e7Dib8Er96h/gxca/SXm8OETfV5scwj5iqdM521U0rc=
Subject key identifier:   C7:7D:05:58:29:13:F5:D5:9A:C3:B6:75:14:70:B0:2D:92:73:70:62
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer:       /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial:       01936B2276BF2044480A5BD4A497E391DE66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number:          0323
Signing time:             Wed 27 Nov 2024 01:00:40 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:40 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:40 +0000
Files and hashes:         1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: zvY8LNypa/2Oy7Lr/8JzuJzcS+EcI1COQozbh3l0FqE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:76:bf:20:44:48:0a:5b:d4:a4:97:e3:91:de:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
        Validity
            Not Before: Nov 27 01:00:40 2024 GMT
            Not After : Nov 28 01:00:40 2024 GMT
        Subject: CN=c77d05582913f5d59ac3b6751470b02d92737062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a7:dc:2b:bf:ff:de:94:76:b3:80:17:5e:9a:
                    16:11:a9:ea:41:d1:f1:18:5a:36:ec:3c:12:06:ba:
                    eb:4f:94:cf:1d:a9:ea:80:6a:e6:ef:83:3d:d0:7f:
                    6b:c5:8a:89:5a:ef:e0:10:d0:3e:c0:98:cc:9f:2b:
                    04:70:99:b3:bb:fc:53:26:28:4a:00:4d:ea:10:cb:
                    e2:4d:b7:be:0e:b6:df:43:87:b6:7c:2b:cc:19:f6:
                    0b:5f:9f:d8:43:1f:6b:7d:56:fd:9e:d5:d4:2b:6a:
                    77:41:d8:a8:97:a6:d9:68:1f:7a:68:82:03:8a:b5:
                    12:85:05:5e:34:9d:d9:b5:b1:94:3b:c7:84:65:4b:
                    5b:cf:26:5b:fc:69:33:90:82:47:bd:df:12:36:46:
                    50:7c:67:5d:fd:50:b9:70:7a:33:c5:5e:b9:63:d2:
                    d8:4e:f9:c5:69:07:2a:cf:29:d9:12:61:b5:16:94:
                    6d:22:3a:03:71:9c:f0:8d:2f:f9:68:c5:c7:13:91:
                    ce:c0:d8:1d:76:fe:fd:56:bd:59:27:c7:95:2c:8d:
                    bd:f9:cf:c9:d5:34:4c:24:d8:b3:71:95:f9:30:8f:
                    c0:81:90:10:c7:14:1f:7d:cc:f6:95:96:cb:dc:42:
                    12:6a:f0:cb:da:a0:7f:24:77:51:64:67:dd:47:a8:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:05:58:29:13:F5:D5:9A:C3:B6:75:14:70:B0:2D:92:73:70:62
            X509v3 Authority Key Identifier:
                keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:28:2c:f7:3c:78:54:97:5b:15:29:7b:b1:cb:04:2a:cc:23:
         da:05:0e:ab:b2:0c:82:22:97:cc:45:dd:50:e7:25:83:d5:80:
         d0:e8:ac:69:c8:2a:6d:a2:47:23:a1:b4:b3:53:3b:e2:50:a6:
         e9:9c:ed:6e:f5:b9:28:8e:98:48:5a:02:25:77:2e:b3:dc:da:
         fd:d8:8d:c8:82:ab:62:02:61:b8:50:75:64:b9:00:94:f7:9f:
         08:24:96:31:18:96:0c:e0:7e:c7:29:96:cb:95:c2:55:8e:99:
         1f:f7:04:14:00:7a:10:73:e0:59:ac:58:3b:66:c7:60:ad:20:
         4a:12:b6:55:e0:67:26:d4:29:b8:be:9a:3d:be:8e:56:0d:12:
         b5:89:3d:6a:b7:18:73:c4:12:93:d4:a1:11:9a:78:ce:f6:9f:
         a4:fc:33:52:df:2c:9d:51:bd:f1:9c:77:27:6c:f4:ac:a9:53:
         d7:f4:b0:08:0f:97:84:7f:88:08:b1:d9:21:2e:e8:6f:05:eb:
         6a:b3:51:6e:f3:a2:18:00:df:4b:03:31:47:91:bd:4c:9c:66:
         ee:04:ae:dc:66:a4:08:85:4c:29:d8:ca:d4:97:d0:10:e6:bd:
         5c:76:85:54:af:84:9e:50:2f:3b:ae:9f:f5:76:33:bf:31:2b:
         a9:7f:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:35 2024 by rpki-client on console-ams.rpki-client.org