Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File:                     EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier:          KRb/A+hDg6BOVhG+tODClCNydcdS5662DrjeXHk/Crc=
Subject key identifier:   B3:A3:48:5D:25:8D:C9:F0:57:27:13:E0:D2:69:FB:DB:18:05:1C:A8
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer:       /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial:       0193688F01E9527F442ED493D711D70FEC1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number:          1374
Signing time:             Tue 26 Nov 2024 13:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:22 +0000
Files and hashes:         1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: Lxt259nht5Jt0KFYVuRRQVoPZViM9DA9fSr9Yq4h7g8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:01:e9:52:7f:44:2e:d4:93:d7:11:d7:0f:ec:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
        Validity
            Not Before: Nov 26 13:00:22 2024 GMT
            Not After : Nov 27 13:00:22 2024 GMT
        Subject: CN=b3a3485d258dc9f0572713e0d269fbdb18051ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:07:04:fe:2b:1b:e5:66:2e:56:7c:fc:60:
                    1b:0b:92:0e:b9:1c:3a:98:ef:39:ff:b9:7e:f3:29:
                    13:9f:f2:9f:95:3e:da:ca:65:69:69:6f:34:07:ee:
                    e0:ef:da:c6:dd:78:aa:5b:6a:34:89:f6:a8:7d:17:
                    10:b8:0f:13:74:2e:08:8c:dc:75:78:3c:0c:bb:03:
                    48:79:1c:d1:b7:b3:4b:92:fe:e6:f7:25:23:1c:35:
                    57:c1:a1:e6:68:6c:fc:8b:ba:4e:a2:65:39:cb:c2:
                    2a:6c:72:bf:2e:e9:ad:c1:c4:e1:44:3e:05:54:52:
                    85:53:29:6e:fb:a1:0a:40:09:fd:7c:80:26:7e:4e:
                    06:ad:74:77:5c:04:28:90:d3:33:aa:82:c2:3d:fb:
                    d1:86:1f:25:c4:61:fb:f1:cd:db:a1:3d:6a:eb:30:
                    4c:cc:9d:7c:18:34:c0:02:2d:af:44:98:14:63:f6:
                    b0:09:88:c2:38:e0:ec:fa:2a:94:e0:4b:d2:24:12:
                    22:dc:6e:1a:89:f1:20:57:e4:27:bd:f7:3d:75:ea:
                    88:0b:57:ba:d8:98:2b:c6:45:a1:dc:05:40:82:3e:
                    6b:89:f8:09:04:3e:05:57:c6:49:96:bd:c6:76:f1:
                    70:5a:10:40:ed:c8:82:97:90:32:c1:8c:80:ac:8d:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A3:48:5D:25:8D:C9:F0:57:27:13:E0:D2:69:FB:DB:18:05:1C:A8
            X509v3 Authority Key Identifier:
                keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:8c:82:73:bb:bc:f4:87:db:5f:be:da:c5:46:85:40:f3:
         b9:56:07:d2:50:89:95:b3:9a:d4:f1:96:ca:fa:23:0c:f5:59:
         8c:30:a2:76:29:cf:c1:d2:e0:48:49:40:f1:36:8e:1f:21:28:
         cf:6f:53:0d:c5:70:82:4a:f8:18:84:81:4c:f0:61:58:cc:fe:
         87:18:a6:dc:3c:dd:54:35:d0:c6:0c:5f:36:5e:30:69:aa:a5:
         78:be:20:93:d4:3d:1d:f1:d0:01:f3:39:59:18:f6:9f:7b:21:
         d7:6e:52:ea:01:bc:ba:6f:96:32:24:ef:01:53:54:f3:23:5f:
         dd:bb:21:5f:ca:28:2a:71:70:a4:4a:e8:f6:93:d9:45:76:2a:
         5b:bd:a0:c1:89:75:14:3c:8e:6b:ae:13:dc:15:47:5f:5b:4e:
         52:61:24:f2:f2:db:d3:c9:b4:38:fd:23:0c:3b:d4:af:7d:54:
         e3:db:9a:e0:39:a4:19:8c:6d:30:bd:a6:75:50:99:29:e1:7b:
         b0:8d:70:42:bf:ea:bd:1e:b0:b9:b8:67:c8:9f:0b:33:e3:8f:
         89:8e:fd:eb:27:dc:ba:fc:b3:4c:29:16:a1:e3:df:dd:b0:70:
         15:2e:9e:3a:2d:ae:84:45:b3:e3:3a:03:07:dd:3f:f6:68:52:
         94:8c:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:32 2024 by rpki-client on console-ams.rpki-client.org