Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
File:                     9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json)
Hash identifier:          M6Ahu5G2UNsAvcqFyb7lb7jqULZJ/uwPqKwPUYHpdtY=
Subject key identifier:   4B:82:E7:11:E3:44:8D:46:78:5D:0C:E9:3C:7A:E6:5F:DF:FC:92:2E
Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF
Certificate issuer:       /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
Certificate serial:       0192395D9C2B066568A5757E605718DB051A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
Manifest number:          0D53
Signing time:             Sat 28 Sep 2024 16:01:28 +0000
Manifest this update:     Sat 28 Sep 2024 16:01:28 +0000
Manifest next update:     Sun 29 Sep 2024 16:01:28 +0000
Files and hashes:         1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: qxscP36p/393bx+1S6anNhbmzrGvLF8VU/oYCQKRPI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:9c:2b:06:65:68:a5:75:7e:60:57:18:db:05:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf
        Validity
            Not Before: Sep 28 16:01:28 2024 GMT
            Not After : Sep 29 16:01:28 2024 GMT
        Subject: CN=4b82e711e3448d46785d0ce93c7ae65fdffc922e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:23:63:31:09:92:6f:49:db:f8:39:c8:d0:
                    6e:ef:c4:e2:fb:7d:fe:7c:4a:8d:ac:cf:0f:43:d4:
                    b8:ae:bf:01:48:f0:a4:72:f3:54:81:ed:e8:a2:00:
                    92:ff:77:6e:b8:47:ae:bb:df:7f:78:84:5a:14:f3:
                    e7:7f:a2:11:df:7a:09:1b:45:e3:1e:50:ef:dc:1c:
                    72:6f:ee:e4:63:38:a9:3c:c3:03:09:ea:85:74:de:
                    42:34:29:7c:1b:4f:5b:1a:0e:a6:38:4c:cb:a3:3d:
                    07:cd:22:fa:e8:a9:22:75:1b:fb:1b:20:be:d5:ef:
                    a7:c0:be:e3:10:2a:69:c0:03:e7:f9:9f:42:5d:a3:
                    a9:3f:40:35:7b:ea:b6:6c:db:85:c3:ae:5f:68:a1:
                    04:62:4c:dc:6c:48:4a:58:5c:16:4f:cc:83:73:78:
                    e6:18:f9:db:fd:38:d5:b3:86:16:03:93:ea:20:bd:
                    31:b5:9b:3b:a8:08:16:87:03:f0:18:46:16:a8:3c:
                    7c:0d:85:90:05:a2:0a:46:7d:3c:32:a2:79:82:11:
                    51:fb:60:d2:8a:e6:74:3b:a1:e7:34:5d:05:0c:29:
                    60:2b:72:e9:96:c0:cf:09:8c:37:80:7e:8e:66:89:
                    53:92:b8:ac:43:b4:7c:03:ba:22:11:4d:2a:ac:98:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:E7:11:E3:44:8D:46:78:5D:0C:E9:3C:7A:E6:5F:DF:FC:92:2E
            X509v3 Authority Key Identifier:
                keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:b0:9f:66:8f:80:e0:90:b5:a3:48:37:50:28:79:82:c6:
         09:ac:a0:53:3a:75:e8:60:b1:be:9d:9f:ad:0e:d4:87:dc:54:
         d4:e4:5a:de:6b:04:2e:25:4e:55:c9:36:88:01:5e:30:19:a5:
         e5:06:30:49:c2:c9:c0:93:93:33:b4:a6:ce:29:e5:eb:d3:7d:
         90:9a:cb:7f:f9:db:fb:ad:3b:39:a0:99:f0:f5:ce:92:28:ac:
         97:12:91:1f:e9:8a:57:da:69:ce:1c:31:69:b0:de:08:1e:a5:
         e7:cd:a1:5b:70:e3:3e:a7:d3:ee:62:4e:d3:e9:5b:d1:86:1a:
         df:c1:9f:ba:4f:a4:2d:a8:b8:25:8f:65:7c:03:ce:3e:c6:e0:
         45:3c:f0:8b:3f:22:24:cf:74:5b:a3:fc:81:8e:04:47:5c:93:
         01:41:f5:9b:38:77:c1:c1:82:7f:af:0d:ab:fa:f9:a0:a6:00:
         93:ef:5f:14:45:10:e0:3e:71:82:a4:44:6d:2a:0d:38:9b:0a:
         cd:58:3b:1f:09:61:87:f4:aa:43:e1:b8:cc:ba:63:7a:c4:f3:
         0a:56:db:79:d3:17:3f:c4:7d:19:75:d0:7f:65:65:36:7f:a4:
         ea:cf:a3:37:4d:e7:7e:7c:da:83:59:9c:3b:92:2e:5e:71:b8:
         66:5e:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:34:33 2024 by rpki-client on console-fra.rpki-client.org