Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File:                     DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier:          HFbLjrFp752ni8vxXSaWENHRda9pzmfq87Ue1K2Ruow=
Subject key identifier:   E6:76:76:A4:3B:57:DB:AF:63:88:FF:5D:C4:41:F5:8D:00:C2:CA:3B
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer:       /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial:       019369D9FAB19A0E3459C5834F2F059CF084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number:          1376
Signing time:             Tue 26 Nov 2024 19:01:53 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:53 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:53 +0000
Files and hashes:         1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: nF3CCbo9KGRhxcMS1XUuNWw75pI1ydHI+jaYXIRBNzM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:fa:b1:9a:0e:34:59:c5:83:4f:2f:05:9c:f0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
        Validity
            Not Before: Nov 26 19:01:53 2024 GMT
            Not After : Nov 27 19:01:53 2024 GMT
        Subject: CN=e67676a43b57dbaf6388ff5dc441f58d00c2ca3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:68:f8:f2:d4:38:0b:e1:3e:c6:ed:d1:c1:
                    00:f4:91:cf:09:d8:71:b0:53:74:e7:d9:81:01:e1:
                    39:98:41:75:95:6b:d4:ed:50:cd:32:f9:72:dc:78:
                    f4:31:f5:dd:3f:26:92:9c:bb:1d:cd:78:6f:ed:3f:
                    e8:1e:9b:1e:5d:cb:2a:93:e7:7d:54:f8:5d:b6:0a:
                    91:12:25:59:7f:bd:f3:04:03:31:55:c9:e1:8d:66:
                    84:a6:5c:6b:e6:3b:2a:c8:fb:aa:4f:84:70:48:70:
                    a9:73:f0:82:28:2b:c2:34:92:16:e9:27:d5:57:89:
                    6e:46:8b:08:97:58:ae:56:bd:4b:c9:5b:c6:09:aa:
                    12:61:7e:84:44:e1:db:c0:fc:dc:78:4f:f9:87:51:
                    49:cd:b9:36:aa:bd:59:6e:b0:5e:b9:81:f4:98:d7:
                    1e:73:6f:79:b9:29:6b:3d:e5:f3:0b:80:6b:ab:25:
                    91:6f:76:71:22:ba:92:87:e5:c8:6e:25:5a:5c:81:
                    34:7a:96:46:16:14:4a:12:c8:d7:f7:e4:0d:8f:b3:
                    e3:a1:84:ec:e5:dd:f9:c1:15:40:10:2b:f7:d1:26:
                    9b:33:d2:27:1c:91:ea:62:05:18:de:5e:84:c6:f4:
                    dd:5b:89:12:89:95:2e:60:d2:85:07:73:5d:00:26:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:76:76:A4:3B:57:DB:AF:63:88:FF:5D:C4:41:F5:8D:00:C2:CA:3B
            X509v3 Authority Key Identifier:
                keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:15:8d:d7:a2:a1:eb:e3:ec:b0:d4:9b:37:fc:4f:9e:00:77:
         dc:f2:34:0d:11:9c:0c:50:65:2f:c7:89:0a:ce:db:4a:77:f4:
         20:7e:51:b3:17:27:70:24:0b:d0:51:ec:82:5b:87:8e:5f:56:
         02:f5:c3:24:d9:a3:47:84:ad:2c:04:51:9e:f6:5d:e7:de:c0:
         ba:4e:48:fc:ec:09:0b:65:26:7a:5a:5c:3e:9b:16:25:e4:7f:
         e5:18:1f:b7:a8:8c:cb:09:7f:ee:3d:19:ce:c2:e5:30:b1:5d:
         fc:72:80:d5:0b:d2:fe:7e:93:43:7f:3d:0a:f5:ea:20:eb:1e:
         18:3c:1a:c0:ec:61:13:88:ae:33:5b:f6:4d:1c:1e:b5:78:2a:
         35:4d:8f:e9:91:01:58:5a:dd:9c:ad:68:65:a8:3b:23:75:37:
         98:c8:e7:c6:da:9c:e1:5f:04:39:35:f8:3d:db:eb:ce:af:83:
         d1:b9:a9:78:fc:98:28:fe:33:10:3f:49:5c:81:b0:4a:d3:53:
         50:11:ae:40:50:8d:3f:9a:a1:d9:9b:c0:a8:b8:af:f4:80:98:
         9c:e2:5f:ac:f6:60:d1:02:c1:0b:27:ab:d0:e7:ff:1f:23:89:
         30:19:ef:01:4c:4f:3b:25:de:6f:43:1e:ec:67:54:20:fd:47:
         c3:fc:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:28:31 2024 by rpki-client on console-fra.rpki-client.org