Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File:                     tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier:          I1FTM/oha/d/l8y465jGTFJ8QppKjJijGUjN7qGBXk4=
Subject key identifier:   6D:D6:6C:01:A4:00:7B:9A:76:07:34:52:61:E5:BF:20:52:ED:A3:0B
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer:       /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial:       01935651D40038F7C202DC9F2F748B39D78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number:          010D
Signing time:             Sat 23 Nov 2024 00:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:23 +0000
Files and hashes:         1: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: CrsbxSL4C2XYx2MKyhrTNNPZBpsvsetHbtpf2HWIcoI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:d4:00:38:f7:c2:02:dc:9f:2f:74:8b:39:d7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
        Validity
            Not Before: Nov 23 00:00:23 2024 GMT
            Not After : Nov 24 00:00:23 2024 GMT
        Subject: CN=6dd66c01a4007b9a7607345261e5bf2052eda30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:d1:bb:36:c4:cd:90:91:db:0e:2d:0d:77:
                    d8:56:61:9a:95:3a:90:00:2e:ad:9b:31:12:4b:4d:
                    16:9a:52:14:4b:90:3e:e4:4d:d8:f1:d2:ea:93:cd:
                    f9:86:36:f2:52:bb:f8:c2:97:db:25:7b:4a:8a:cb:
                    52:30:f7:91:68:05:57:dd:68:c1:74:ca:a9:6b:ef:
                    b1:d1:23:59:15:71:61:58:3c:4e:ad:d3:ef:d8:a5:
                    e5:a5:92:cb:7b:4f:7f:b5:ab:83:7e:d4:82:03:d5:
                    b7:6c:87:92:84:85:f1:83:04:69:4d:b6:cf:a5:1b:
                    a7:1a:95:71:32:54:af:91:7f:93:0e:8d:67:8b:84:
                    c0:39:a5:5f:fe:4f:2c:06:d5:0c:c6:f1:99:9a:a9:
                    bc:96:80:ec:65:4e:ac:7a:33:b2:b1:69:39:63:48:
                    ab:9d:19:d4:47:50:bc:28:4a:2f:9e:41:e5:1a:27:
                    52:dc:8e:ba:69:79:ec:4a:ab:92:53:9d:05:2b:1f:
                    10:73:6e:ff:73:19:9d:f6:9a:b8:72:f8:fc:15:5a:
                    d7:ac:6b:21:50:b5:9d:57:84:5b:33:9c:12:3c:c8:
                    4e:3f:8e:6b:dc:9f:43:60:58:01:06:a0:78:a0:3e:
                    77:64:05:32:6d:f9:29:32:70:1b:a8:cf:99:c1:38:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D6:6C:01:A4:00:7B:9A:76:07:34:52:61:E5:BF:20:52:ED:A3:0B
            X509v3 Authority Key Identifier:
                keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:70:4b:bc:0b:b7:2f:fe:c4:9a:c3:3c:d9:2b:16:be:78:
         d2:58:24:a7:b7:66:9b:0a:e1:e1:a1:9b:ad:85:bb:42:e5:2b:
         eb:f0:b7:46:6c:b3:aa:5c:51:1a:b9:eb:88:09:e1:e7:e7:e0:
         cb:e3:fe:7b:d8:68:0d:51:8e:63:96:b8:2c:de:7f:ad:d7:3a:
         08:41:89:26:d1:d2:51:59:ed:e9:1e:11:1f:94:1a:43:89:8a:
         95:e6:02:06:18:82:fd:95:55:be:aa:be:88:1f:65:82:48:3f:
         71:9a:74:22:57:4f:c1:d9:c4:27:76:44:9d:61:d1:00:87:94:
         13:aa:74:83:4e:3a:ab:9d:7e:5d:a1:b5:38:b2:2f:c1:0a:fd:
         96:a0:09:14:8b:7c:9c:b5:98:53:c6:b7:56:35:8b:b7:d5:8d:
         2b:eb:00:fd:64:79:34:95:2c:48:01:42:67:70:a1:ee:fb:14:
         92:d7:a2:a8:33:ec:46:a3:57:02:e2:80:a6:40:bd:4c:91:19:
         37:c0:c3:f3:35:ab:4b:f7:8c:04:31:e6:05:00:94:60:69:84:
         38:18:1c:90:3c:d2:fe:c5:38:2f:fa:e5:23:4b:98:1e:eb:45:
         10:57:f6:02:b7:9e:5a:99:b1:a7:c6:30:b9:98:f9:9d:8d:b7:
         07:44:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:00 2024 by rpki-client on console-ams.rpki-client.org