Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1727a8-2c10-4e2b-8060-8f4d499d3913/1/zlM47hOxZpRvck19i--jtW__i-o.mft
File:                     zlM47hOxZpRvck19i--jtW__i-o.mft (raw, json)
Hash identifier:          3QEe4Zey+csuqNofM8bxZSYzjXRfCdP7VZX/vhvA2ug=
Subject key identifier:   98:80:FF:29:0D:7E:C4:A5:D1:32:5D:8A:5A:43:FD:12:09:D5:7A:06
Authority key identifier: CE:53:38:EE:13:B1:66:94:6F:72:4D:7D:8B:EF:A3:B5:6F:FF:8B:EA
Certificate issuer:       /CN=ce5338ee13b166946f724d7d8befa3b56fff8bea
Certificate serial:       019238BA782AEC5BCBEA14ADCF91EBCC2856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlM47hOxZpRvck19i--jtW__i-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1727a8-2c10-4e2b-8060-8f4d499d3913/1/zlM47hOxZpRvck19i--jtW__i-o.mft
Manifest number:          1269
Signing time:             Sat 28 Sep 2024 13:03:17 +0000
Manifest this update:     Sat 28 Sep 2024 13:03:17 +0000
Manifest next update:     Sun 29 Sep 2024 13:03:17 +0000
Files and hashes:         1: zlM47hOxZpRvck19i--jtW__i-o.crl (hash: If7L11vSdZ1UYZu3lZeQwVizLdC4qkmRldjv8ldB6iA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1727a8-2c10-4e2b-8060-8f4d499d3913/1/zlM47hOxZpRvck19i--jtW__i-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1727a8-2c10-4e2b-8060-8f4d499d3913/1/zlM47hOxZpRvck19i--jtW__i-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlM47hOxZpRvck19i--jtW__i-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:78:2a:ec:5b:cb:ea:14:ad:cf:91:eb:cc:28:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5338ee13b166946f724d7d8befa3b56fff8bea
        Validity
            Not Before: Sep 28 13:03:17 2024 GMT
            Not After : Sep 29 13:03:17 2024 GMT
        Subject: CN=9880ff290d7ec4a5d1325d8a5a43fd1209d57a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:74:0f:7e:0b:99:91:47:cf:3c:c5:94:a9:
                    13:32:fb:f3:f8:83:df:66:6a:3c:3f:a5:3f:a8:46:
                    cf:6a:ce:c8:d0:ef:b7:cd:8b:fc:93:9e:db:87:e9:
                    53:ae:18:a7:e5:14:3d:f3:ac:ff:9a:c0:c0:c8:e6:
                    94:d9:38:5b:7d:9c:90:fd:b6:01:2f:d0:7f:bb:dc:
                    9f:ec:0d:a1:10:5a:a0:5b:ca:dd:f0:bc:63:53:e1:
                    90:c8:3e:c6:98:aa:86:ec:24:34:34:c4:a0:ca:20:
                    66:cb:20:32:25:d8:9e:bf:49:8e:32:6d:2b:34:76:
                    a1:2f:15:85:51:fa:8e:aa:11:ad:f4:05:bd:1b:12:
                    ac:6d:10:b0:97:c1:6a:48:76:92:16:3b:25:21:b0:
                    ae:43:71:a1:ea:84:0c:ba:30:6c:d4:e7:e0:03:48:
                    00:f9:20:f1:2e:c9:41:35:ba:15:51:bf:9e:4d:17:
                    02:bb:5e:78:71:41:01:ac:09:85:b4:60:e5:d8:bd:
                    24:e4:f5:a5:d5:38:54:ed:02:8a:33:ae:4b:a4:ec:
                    ed:73:a8:2a:1d:07:24:36:13:e6:af:93:b0:56:2d:
                    2d:55:e2:39:86:90:3b:1b:6f:0c:9c:0c:e1:0b:56:
                    5c:6f:78:66:3b:e3:4e:30:cb:a7:fa:b9:13:a3:af:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:80:FF:29:0D:7E:C4:A5:D1:32:5D:8A:5A:43:FD:12:09:D5:7A:06
            X509v3 Authority Key Identifier:
                keyid:CE:53:38:EE:13:B1:66:94:6F:72:4D:7D:8B:EF:A3:B5:6F:FF:8B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlM47hOxZpRvck19i--jtW__i-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1727a8-2c10-4e2b-8060-8f4d499d3913/1/zlM47hOxZpRvck19i--jtW__i-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1727a8-2c10-4e2b-8060-8f4d499d3913/1/zlM47hOxZpRvck19i--jtW__i-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:44:90:e6:29:5e:1d:e8:1c:8a:d7:8b:31:84:4a:36:92:
         62:d3:56:7c:85:ef:fa:8d:99:ad:0b:aa:e3:52:88:10:1f:4f:
         67:3f:46:12:1d:3d:c8:3b:41:8b:ff:21:d8:f7:d2:66:33:44:
         6f:56:da:11:4e:6f:b6:a1:ae:c7:bc:29:20:aa:1e:05:b5:5c:
         87:31:2a:b9:3c:b8:8b:e2:c1:63:6b:b6:50:23:85:27:5b:06:
         c7:2a:8b:11:98:c4:0a:8b:a1:d6:01:fd:8e:f8:2b:03:d3:79:
         54:fc:3f:f0:f9:7c:c4:08:ee:71:43:f4:ec:26:3e:86:89:21:
         8c:d6:10:db:34:3f:45:ba:c2:aa:99:be:1d:4e:e2:ca:ac:e0:
         8b:d5:ee:f6:ef:40:72:08:c8:15:86:04:a0:e0:21:03:b0:02:
         da:04:1a:4c:da:94:4c:77:3e:4b:57:92:61:14:bc:6a:80:cd:
         7c:6b:a2:c6:59:1e:96:2f:c1:37:d4:28:6c:86:46:ef:b5:ed:
         18:23:8e:8e:74:37:6a:fc:b5:e0:38:01:7f:8d:a1:46:8c:ec:
         48:d2:40:a4:db:c7:53:a1:f4:7b:c0:1d:a2:8a:15:53:24:d7:
         3e:20:85:48:b7:01:12:ce:98:25:d0:f4:21:e4:85:df:65:93:
         77:c0:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:17:25 2024 by rpki-client on console-fra.rpki-client.org