Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File:                     pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier:          TWtHIJfl4PxQdkLCRiYMmjzwr73+vH2nuv61u5cKaoM=
Subject key identifier:   84:2C:79:20:F6:2D:94:5B:68:AC:30:19:3D:47:87:D5:2C:37:CC:4F
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer:       /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial:       0193580953D3A469716E639C39AEB261E93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number:          0201
Signing time:             Sat 23 Nov 2024 08:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:26 +0000
Files and hashes:         1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: 1RfhLpqucpTCgvCyyqUYSLKupmfjnur1E2XI0xYf1aE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:53:d3:a4:69:71:6e:63:9c:39:ae:b2:61:e9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
        Validity
            Not Before: Nov 23 08:00:26 2024 GMT
            Not After : Nov 24 08:00:26 2024 GMT
        Subject: CN=842c7920f62d945b68ac30193d4787d52c37cc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:5d:21:8d:5f:1d:54:3b:99:9c:66:2e:dd:
                    d4:16:12:39:b5:3c:1d:1c:c8:e0:3a:66:2e:1b:48:
                    fb:9f:bd:0d:5e:99:44:85:15:77:5d:7a:74:b3:57:
                    f1:dd:20:0c:ff:71:c1:7f:5b:cc:f7:70:9b:58:66:
                    16:3a:8f:0b:ba:dd:ce:6b:33:ee:11:33:16:75:51:
                    ab:96:97:03:4d:09:f5:4a:ae:9d:93:1c:c3:0f:2b:
                    3c:6a:9f:c9:98:6d:5c:08:04:fa:94:6f:87:26:ea:
                    df:89:26:b5:14:08:f8:cb:65:fc:50:14:34:ee:82:
                    55:31:f8:00:7d:19:ef:a8:df:55:41:90:8c:8f:27:
                    25:ca:18:25:37:00:c5:06:55:dc:51:76:fd:87:61:
                    7e:4c:17:e9:94:9f:11:aa:6a:a7:50:5b:6b:aa:41:
                    da:56:dd:f9:6c:b6:36:6f:bc:b0:74:b1:06:d2:1a:
                    1d:d4:39:b7:8c:34:df:ae:13:8b:2e:2c:0a:42:41:
                    1d:83:f8:00:da:15:9b:1a:80:bf:5c:46:d0:5e:21:
                    37:9d:b7:9f:88:05:56:fd:89:0e:de:18:de:b3:d5:
                    c1:67:60:73:7b:1b:5b:c1:20:87:3a:c3:8a:8d:10:
                    4c:79:3b:c9:b1:22:00:14:68:47:71:85:7a:04:27:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:79:20:F6:2D:94:5B:68:AC:30:19:3D:47:87:D5:2C:37:CC:4F
            X509v3 Authority Key Identifier:
                keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:07:7a:35:c1:1a:70:1d:f1:ad:d1:e2:79:66:00:2c:a0:
         8e:ec:5a:32:ad:03:ae:db:d9:5c:9c:d2:fb:5c:d0:69:5c:b8:
         86:86:c0:a2:c4:36:ca:80:18:92:6e:23:52:24:ae:44:07:56:
         8a:54:f0:cc:21:c5:bc:d4:de:2d:25:da:d6:55:5b:7d:f6:c0:
         a3:96:63:72:10:4f:26:57:26:b9:9e:b3:95:b1:34:12:e3:44:
         69:7f:9c:77:d3:d5:8a:3c:0c:91:5d:d2:3f:64:a3:6f:7e:5f:
         85:b1:ed:90:1b:3b:92:bc:3d:9a:d2:0d:1b:69:e6:86:53:ef:
         40:28:1f:ea:4f:55:91:d5:09:7c:01:fe:aa:f4:1a:2d:b6:ac:
         9a:76:4c:6b:89:7a:a1:1c:f5:00:45:ff:f0:84:c8:da:22:1a:
         1c:c9:1d:e0:3c:ab:cf:80:d6:00:2f:ad:58:0c:f5:3a:8f:da:
         33:a7:5c:38:3d:69:b4:c5:41:7a:82:1f:0c:43:ba:14:50:4a:
         c2:ae:0d:bd:ba:2c:be:2d:a3:cb:cf:af:cb:5d:d2:e3:b9:55:
         67:77:7a:a9:2f:b7:b7:1f:be:85:0f:09:ff:29:8b:35:1c:63:
         91:76:c1:72:f0:e2:fa:0d:4c:5e:60:8b:05:7d:9b:4f:4e:b4:
         af:80:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:50 2024 by rpki-client on console-ams.rpki-client.org