Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File:                     rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier:          edJD0vpzRz8DUgfMYdHLrDya1Tv9OboSAoVmfa7ytLE=
Subject key identifier:   EA:0E:88:85:C8:44:82:65:1C:06:AF:E4:5E:27:16:8F:F7:90:56:A2
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer:       /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial:       01936858A9D53C27A773C07731E40A177805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number:          0B2A
Signing time:             Tue 26 Nov 2024 12:01:01 +0000
Manifest this update:     Tue 26 Nov 2024 12:01:01 +0000
Manifest next update:     Wed 27 Nov 2024 12:01:01 +0000
Files and hashes:         1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: EZb/MgcehpLCD2JdmqIGusqUW6uHCCqTZieTvbHhXHs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:58:a9:d5:3c:27:a7:73:c0:77:31:e4:0a:17:78:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
        Validity
            Not Before: Nov 26 12:01:01 2024 GMT
            Not After : Nov 27 12:01:01 2024 GMT
        Subject: CN=ea0e8885c84482651c06afe45e27168ff79056a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:63:0d:23:e0:96:a8:6c:73:29:d9:18:00:
                    4a:53:cf:a2:02:c9:84:b0:b8:34:93:c7:e0:52:99:
                    eb:83:63:1b:15:97:e4:ef:96:62:3f:0f:03:fe:8c:
                    59:da:e5:56:dc:74:8b:45:25:a2:43:82:7d:d3:13:
                    d7:1c:4a:74:9b:b4:0d:55:77:aa:3f:19:2a:80:d8:
                    e8:25:9a:e0:95:1e:1f:89:58:b1:06:06:97:1f:29:
                    6c:71:d3:e8:96:d9:5a:65:cf:1e:b9:a1:2d:fd:da:
                    0f:ba:55:73:0b:14:8f:dc:d9:ed:6a:e2:4c:54:0e:
                    08:ea:55:28:9f:fa:5a:b0:89:11:68:54:2a:48:8e:
                    34:06:9f:94:0e:36:c8:7d:7b:fb:10:6a:2a:cd:36:
                    82:8b:37:16:25:2f:c6:c9:1f:c7:16:fa:8f:a7:dc:
                    93:e1:6f:4d:bc:0d:fb:2c:87:36:b8:43:85:90:f6:
                    06:cb:96:72:6c:a2:2c:31:a9:1b:54:6b:d2:5b:0c:
                    25:d7:d3:e7:cd:5c:92:2b:f3:8d:c4:e1:62:52:5d:
                    59:ad:04:4d:ff:3f:2c:1a:c4:7e:5b:a3:36:0e:51:
                    6d:59:54:71:d4:67:71:76:4f:56:47:73:d8:7c:52:
                    17:f6:57:f2:c0:4a:97:2e:da:d1:9f:f2:3f:98:cb:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:88:85:C8:44:82:65:1C:06:AF:E4:5E:27:16:8F:F7:90:56:A2
            X509v3 Authority Key Identifier:
                keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:d1:41:1b:66:cc:da:fd:f0:eb:a7:c1:99:c5:30:0d:f2:b8:
         2d:f6:4d:4b:b4:9d:4e:3f:ae:0c:b7:8d:60:8a:1a:df:f6:e8:
         14:97:ba:40:54:13:80:94:f8:d9:8e:d1:98:4b:7d:db:72:65:
         9f:ae:61:b3:83:4a:cb:d4:78:76:b8:24:d9:70:1e:54:16:06:
         61:bb:a0:cd:9c:97:76:89:c7:29:4a:77:1c:11:27:00:85:68:
         b6:20:a3:57:6e:7b:ba:7d:b4:5e:f1:af:2c:18:f7:43:0c:15:
         81:17:52:70:79:d2:9a:7d:a4:4e:c6:3e:ba:87:3f:56:18:59:
         66:ab:23:b3:11:d4:c7:53:26:16:40:6a:21:c2:d8:48:c1:13:
         eb:7c:e5:77:61:4a:de:a5:b5:95:33:26:b1:2e:b5:7d:a8:5a:
         de:90:80:bb:ac:21:e9:59:a1:30:7a:9e:53:2d:61:32:f9:c3:
         70:af:30:34:a2:7f:c0:51:6d:00:f4:59:88:d3:29:04:bc:48:
         dd:aa:2f:25:cb:87:8c:fc:64:a1:45:89:45:d0:52:de:12:af:
         18:03:21:60:25:38:cb:f6:13:13:42:33:7d:e9:7f:e4:fd:56:
         93:07:d2:02:4b:91:33:91:34:60:07:cf:f8:32:29:c4:ea:a8:
         40:bb:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:55 2024 by rpki-client on console-ams.rpki-client.org