Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File:                     crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier:          ATDzD76e0rbSRMQZPtPb7d+xelt4TFtxia5OjCxqu5E=
Subject key identifier:   73:46:37:57:83:4C:87:F8:31:87:06:12:6B:65:C1:0E:47:89:E7:BB
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer:       /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial:       01936B22BB7F0441C87FB3996421F2AD3097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number:          066A
Signing time:             Wed 27 Nov 2024 01:00:58 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:58 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:58 +0000
Files and hashes:         1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: rMmbbc4S7v3p0Qe77mfGhSkUHbmnQmA+Z6kmPoHQPq4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:bb:7f:04:41:c8:7f:b3:99:64:21:f2:ad:30:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
        Validity
            Not Before: Nov 27 01:00:58 2024 GMT
            Not After : Nov 28 01:00:58 2024 GMT
        Subject: CN=73463757834c87f8318706126b65c10e4789e7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:18:e6:ff:aa:c9:4a:9a:3d:59:53:81:ab:
                    4b:a7:9c:b3:0b:62:22:c5:1f:e2:c5:69:cb:38:ff:
                    88:3e:83:91:e7:2f:3c:0a:e4:ae:ca:26:16:7e:1b:
                    7b:be:a3:ed:69:6f:2d:c8:eb:86:2b:db:c7:85:02:
                    ef:29:05:52:d8:77:8f:dd:f2:c7:21:70:28:32:fe:
                    6b:3b:c1:a1:fd:b0:31:34:af:b9:ef:46:0d:76:bd:
                    d6:2c:6c:02:b3:48:83:e3:37:01:45:7e:97:c0:43:
                    2f:de:5f:da:a7:05:99:79:5b:c0:34:97:8a:17:79:
                    dd:c8:56:36:f2:2b:b2:6b:20:2b:50:0a:4f:02:bc:
                    c4:23:0d:d2:2d:66:6b:d9:44:0b:d6:d5:ab:ee:60:
                    f8:48:f1:03:0f:58:dd:f6:9d:5f:55:a4:1b:5c:c7:
                    7c:a3:74:8e:ac:a9:e1:e3:f7:7a:38:d4:da:a0:fb:
                    e6:ae:12:e5:5e:18:e0:fb:f1:48:38:25:09:30:33:
                    98:d2:65:c0:e2:8e:6a:a1:9f:07:5c:a0:03:cc:31:
                    0d:bf:c7:8e:41:ae:d4:ea:6a:0c:89:c7:ce:42:7d:
                    88:be:8b:29:3e:15:a7:2b:df:73:f6:20:e1:ba:de:
                    45:58:cd:68:b8:bd:e7:be:cf:72:6e:3e:d9:86:e4:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:46:37:57:83:4C:87:F8:31:87:06:12:6B:65:C1:0E:47:89:E7:BB
            X509v3 Authority Key Identifier:
                keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:75:7e:85:a7:16:aa:ce:f0:3d:e2:f0:a7:44:9c:ea:c7:
         49:c5:2b:a7:1c:9a:9c:7b:fd:dc:2e:a4:76:21:aa:b8:e7:84:
         c2:72:c4:69:6e:52:97:56:60:d3:a0:e3:35:4e:31:44:07:e8:
         37:aa:1f:b5:7b:44:0a:4e:4e:38:fc:05:f4:43:e8:79:39:5f:
         93:45:f8:bf:b6:9b:d0:2d:c7:b3:30:e1:ae:9e:5b:d6:69:94:
         b4:de:f3:0d:c0:7b:9f:5c:95:ac:68:c1:63:a5:0c:69:4a:52:
         58:12:e7:27:1a:43:58:14:92:8f:d9:59:1e:ce:17:53:50:83:
         d7:37:e7:bf:ca:bf:cd:8a:15:b6:9f:85:66:89:22:6a:2b:7a:
         8b:de:3b:b5:d3:05:be:3b:95:1e:be:66:d8:3b:1e:b1:02:07:
         bb:cd:b8:26:aa:9f:08:e2:03:02:1d:4b:cf:01:17:fd:74:93:
         38:1b:47:44:cc:f0:df:fc:a3:44:91:66:43:be:cf:04:8e:33:
         e7:0e:b1:52:ba:95:13:e2:8c:31:96:5b:8b:ae:05:74:52:45:
         08:4a:86:07:72:55:df:4e:e0:3c:2c:73:12:cd:ea:89:2e:b8:
         30:1c:dd:d3:2b:4a:9e:a5:8e:0b:39:8e:26:d4:f0:24:ca:05:
         e1:eb:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:49 2024 by rpki-client on console-ams.rpki-client.org