Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
File:                     0elU3oMurd0srwpAxtM-8RiJlLw.mft (raw, json)
Hash identifier:          xUQFtPD/8VUT1aHQsGKGJUvQJ/se0HXNOb0PV9aq8sU=
Subject key identifier:   59:83:07:CB:54:EE:BE:BC:92:3F:77:9F:AE:73:CD:B6:76:40:A6:2D
Authority key identifier: D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC
Certificate issuer:       /CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
Certificate serial:       019369DA6FC558C3B606EF99FF7F9454F4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
Manifest number:          0472
Signing time:             Tue 26 Nov 2024 19:02:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:23 +0000
Files and hashes:         1: 0elU3oMurd0srwpAxtM-8RiJlLw.crl (hash: fNQpALP4hGE9T3eTUK+EOOsDtNOt2FXDWFA1uP5gHDM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:6f:c5:58:c3:b6:06:ef:99:ff:7f:94:54:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
        Validity
            Not Before: Nov 26 19:02:23 2024 GMT
            Not After : Nov 27 19:02:23 2024 GMT
        Subject: CN=598307cb54eebebc923f779fae73cdb67640a62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:b6:5f:73:8c:40:cb:82:bd:ab:19:14:b1:
                    e6:8e:3a:bd:8e:77:98:ec:d9:dc:ce:c9:01:51:9a:
                    57:bd:25:aa:b5:ee:a5:e7:ef:c8:ad:70:7a:43:b2:
                    c9:18:4f:dc:6c:09:15:85:f8:e5:3d:5f:89:92:f6:
                    35:5b:0b:ac:f1:ba:d7:a1:b1:e3:b9:ba:3f:60:07:
                    2b:f5:3a:00:c5:a5:a2:63:3c:a0:a7:29:31:ae:2f:
                    67:26:ca:92:27:03:98:e5:c3:46:05:d3:dc:53:da:
                    9d:11:50:1e:3e:c4:05:8d:81:8b:94:bf:57:ec:d5:
                    d2:b2:e5:54:09:dd:d9:ee:af:1b:68:36:87:97:9d:
                    59:0d:40:96:8e:69:6e:57:5b:9b:ae:89:c1:08:cc:
                    2a:7c:20:17:76:b4:25:87:c9:de:47:56:e0:ea:51:
                    83:a6:46:f7:51:39:0c:01:b9:be:01:52:e7:54:84:
                    33:13:59:4e:0a:cd:da:60:9e:8f:e9:d1:99:5b:d3:
                    e0:81:50:8d:ec:74:9f:9a:e1:23:4f:da:4b:d8:18:
                    78:b3:c9:b8:3e:9b:fe:3d:14:bb:b7:bf:3b:c6:e5:
                    e6:cf:dd:84:a9:3e:b3:bf:c0:0c:e5:6a:dd:b7:71:
                    55:6f:f0:6e:37:67:58:78:9e:76:2a:1a:a9:4a:37:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:07:CB:54:EE:BE:BC:92:3F:77:9F:AE:73:CD:B6:76:40:A6:2D
            X509v3 Authority Key Identifier:
                keyid:D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:c6:e4:50:dc:2f:79:05:32:79:91:e4:6b:68:49:f4:f9:
         e5:7a:fa:63:6e:ca:d7:77:90:d0:98:ce:86:b8:43:4e:7e:08:
         89:a3:e7:66:6a:eb:9f:c1:1a:6d:be:5c:ef:78:30:65:dc:5c:
         80:89:aa:73:8c:2c:f0:94:61:02:3b:69:ad:a9:d7:c1:35:16:
         1d:fa:0b:79:df:ca:eb:97:87:40:4b:f3:7b:e0:c5:49:3d:01:
         4f:a4:58:aa:9b:5c:c6:69:97:ca:4e:a0:b2:1f:09:08:96:b9:
         ca:d3:54:07:19:2e:1f:d6:5b:36:80:3b:4f:97:f1:99:04:c4:
         4c:e8:04:fa:8f:f2:09:33:a2:8e:a0:5b:a0:a5:dc:3f:5c:75:
         49:9a:7e:5e:e7:44:cc:fa:ff:c2:dd:3d:cb:ce:47:54:a7:e0:
         ab:79:5a:93:96:57:8b:1d:41:f8:52:58:ac:4f:7f:a3:1c:a4:
         aa:96:06:27:7a:3f:4d:2b:a7:d8:97:46:5d:5a:10:1d:79:82:
         04:61:5e:b2:7d:92:bd:93:bc:1f:74:3e:cf:b8:e8:11:eb:e7:
         4f:e8:72:0e:3f:90:3c:05:eb:99:03:8e:4f:da:fc:f7:d4:ce:
         d7:bf:d9:ec:38:8d:78:5e:39:5a:77:7f:7d:9c:46:99:68:95:
         0e:7b:39:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:18 2024 by rpki-client on console-fra.rpki-client.org