Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          39ydEw5bH0JdqjzJkKWacsAOz/u7bQcz9Vn9JA7FX8o=
Subject key identifier:   1C:23:D3:BB:D5:BD:1E:40:DA:A2:1E:42:93:15:F3:EE:58:AD:2B:31
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       0193674564D6CB32C18CE963DB68C8934269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          80
Signing time:             Tue 26 Nov 2024 07:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 07:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 07:00:20 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: KdhxsMkuR7pRHu7O7q1Zw1cHOIs5cka7ZQA9+jM8Gdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:45:64:d6:cb:32:c1:8c:e9:63:db:68:c8:93:42:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Nov 26 07:00:20 2024 GMT
            Not After : Nov 27 07:00:20 2024 GMT
        Subject: CN=1c23d3bbd5bd1e40daa21e429315f3ee58ad2b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:a7:1e:45:ab:44:ba:9c:d9:e5:a0:af:f0:
                    46:ad:7b:cb:1e:31:27:92:ef:1c:78:01:e2:3a:87:
                    eb:cd:69:86:95:b8:81:7c:e5:44:b5:bf:cf:1d:e7:
                    9b:52:ed:18:11:f7:cf:56:e6:0d:43:9b:93:61:26:
                    c3:55:62:16:c2:02:33:6d:01:31:33:e3:31:03:b5:
                    e0:f7:8e:8c:76:2d:bf:76:64:d1:b0:0d:d8:4e:92:
                    cd:bf:9d:01:93:d5:3a:88:42:98:e6:39:6b:31:fc:
                    8f:29:95:2b:b2:87:7d:7c:f1:bc:dd:00:38:6e:e9:
                    6c:46:c7:f6:36:94:6c:b2:96:a5:19:e8:ea:f0:b4:
                    58:d3:55:60:78:3d:ba:57:4e:70:83:3d:06:95:2c:
                    f2:8a:e5:b6:5a:a6:73:ce:a0:d9:c2:f4:59:3e:e9:
                    5e:31:c5:43:dc:b4:5f:39:49:c6:e7:82:78:f5:02:
                    5e:33:55:07:f7:fa:c4:46:4c:4f:69:36:00:99:f1:
                    59:83:0f:a5:c7:87:53:57:18:ec:d0:3a:35:59:3c:
                    d6:2a:64:7c:86:d0:ba:59:66:1d:5a:c8:25:4e:f1:
                    ec:90:4c:0a:b0:c5:9a:07:6b:4a:05:2c:97:47:48:
                    b5:ec:29:cd:fa:7a:35:32:1a:25:35:3a:1b:2c:ea:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:23:D3:BB:D5:BD:1E:40:DA:A2:1E:42:93:15:F3:EE:58:AD:2B:31
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:28:37:19:14:78:1d:d3:a1:2b:75:bf:bb:f4:5c:19:56:
         6e:5c:9c:9e:49:74:55:3d:ac:c4:e3:e2:be:32:43:1a:0c:19:
         1b:af:cb:3e:65:b5:7b:1d:33:62:a3:74:00:85:cf:1d:84:a6:
         89:48:96:2e:88:49:c5:20:6a:4d:b8:90:3a:77:d5:51:fa:36:
         d4:34:bc:81:5e:20:28:5f:38:62:78:83:21:be:8c:bd:71:9e:
         32:12:2a:d2:cd:6f:c7:53:73:82:50:5b:4e:15:85:7e:d9:ae:
         b9:c5:95:db:84:8d:53:b4:66:da:93:5c:db:14:2d:e4:28:05:
         a1:0f:23:7e:bf:17:4e:a8:ad:96:9f:af:f8:43:51:61:df:03:
         33:61:c6:2c:5b:6a:d7:72:59:cc:23:f9:23:7f:3e:10:e6:5a:
         ba:60:fe:c1:a6:41:6d:9d:b1:97:28:8b:7e:26:83:6d:27:f1:
         59:79:a9:dc:02:e7:98:99:47:8d:ba:3e:a8:86:8e:65:3f:60:
         88:52:c7:16:37:e6:af:59:31:c3:af:1f:2c:26:1a:7e:16:31:
         07:31:d0:63:fa:83:ae:26:71:ef:02:b4:07:58:f1:f1:78:79:
         eb:f9:38:64:0a:cc:b4:b4:c5:e6:32:70:7a:06:95:1a:1f:3f:
         a6:65:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:55 2024 by rpki-client on console-ams.rpki-client.org