Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
File:                     Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft (raw, json)
Hash identifier:          Yqct6gifa1PiMg+Uwdsa+5X1UlgMMKGCaNnaxOJGQjQ=
Subject key identifier:   98:85:24:56:69:4C:B7:75:01:BF:AA:BA:3D:A7:7B:6F:30:BB:68:61
Authority key identifier: 0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20
Certificate issuer:       /CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
Certificate serial:       0193572DFF5BD05D8981D452693B3F2ECAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
Manifest number:          04C4
Signing time:             Sat 23 Nov 2024 04:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:52 +0000
Files and hashes:         1: Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl (hash: 2ol4DEadnNknicmvI5Iw0jEhaNumCUOEVy3uSvUz9xU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ff:5b:d0:5d:89:81:d4:52:69:3b:3f:2e:ca:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
        Validity
            Not Before: Nov 23 04:00:52 2024 GMT
            Not After : Nov 24 04:00:52 2024 GMT
        Subject: CN=98852456694cb77501bfaaba3da77b6f30bb6861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:e4:89:fa:cb:5c:42:f5:52:3c:46:5c:5b:
                    7a:2e:97:73:e3:b8:e5:bd:dc:cf:98:1e:ad:ac:76:
                    0d:5a:18:ad:e3:8c:a8:cb:9b:a8:5d:14:8f:19:d9:
                    8f:28:cd:5e:8b:d5:74:ab:61:72:8a:42:e9:84:7c:
                    8e:ee:e1:ab:38:76:23:d9:45:29:fc:d2:23:dc:56:
                    24:02:46:cd:d7:06:91:11:fb:ea:62:48:39:42:ba:
                    12:b8:93:49:e0:81:de:88:f1:06:b4:dc:35:f8:b1:
                    11:c9:5c:4f:2d:b3:8e:9b:3f:1a:c1:c0:63:dc:60:
                    59:be:dd:51:3e:cf:49:b0:dc:d3:70:67:4e:9f:24:
                    58:d9:d2:e1:23:81:39:b0:9c:52:fc:da:e9:a8:0f:
                    0b:ca:89:87:e2:a8:86:51:c6:77:59:6c:23:7f:18:
                    32:df:4b:45:dd:53:b9:26:e1:3c:1c:36:8c:00:ff:
                    1c:57:80:66:60:94:49:5f:f5:ba:59:b9:5a:67:45:
                    bc:e1:42:d2:ee:01:9f:bc:cb:f7:d0:89:99:0c:5b:
                    90:0b:d7:f8:18:32:e7:d3:8d:65:96:37:9f:d6:06:
                    c4:ff:3d:d8:eb:bf:9c:85:af:21:b5:4c:b4:09:e4:
                    13:9e:a6:40:03:8a:af:55:81:34:b3:f9:d7:24:67:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:85:24:56:69:4C:B7:75:01:BF:AA:BA:3D:A7:7B:6F:30:BB:68:61
            X509v3 Authority Key Identifier:
                keyid:0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:aa:00:dd:22:97:80:58:82:ca:0f:9b:5d:37:b3:a6:36:
         3f:e7:e8:49:e4:c4:f1:16:67:93:b8:f9:0f:b2:6f:da:b5:15:
         9a:a5:d4:c8:88:c4:11:2e:3f:b1:27:c7:b7:9d:59:78:f0:fd:
         58:35:8c:15:60:01:de:bf:7e:1c:7c:d3:e0:15:08:69:c3:4c:
         47:f3:d4:29:74:97:a5:74:d9:f7:34:6b:fc:d9:2e:ea:30:36:
         0a:45:6b:c8:9a:8e:f4:36:59:06:aa:3a:ba:a0:97:56:5b:9b:
         33:3a:66:d9:c1:b1:29:56:b7:a0:be:91:3d:b8:43:09:16:9d:
         ec:db:4c:85:2f:0c:d5:08:f4:1d:0b:df:14:ce:26:4f:cd:26:
         4d:82:51:7e:b6:59:ba:92:b6:30:d9:c2:b2:d5:25:fd:53:85:
         b3:07:54:2c:bf:3b:53:fc:96:b3:70:52:1e:b0:f1:4e:63:d1:
         73:60:f8:06:3b:ca:a5:db:7b:20:84:89:6c:25:fa:33:94:f7:
         c3:7b:83:a2:ab:f2:93:e8:7d:51:b1:84:11:69:82:fa:af:f9:
         81:ed:01:1e:c1:fd:38:23:0a:63:ad:c3:52:d6:51:b7:d3:64:
         7c:c7:48:aa:8d:07:39:35:51:d2:54:49:22:0a:5c:b1:38:8a:
         98:3d:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:36 2024 by rpki-client on console-fra.rpki-client.org