Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
File:                     IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft (raw, json)
Hash identifier:          4/K0xF0ZEeBjjp93kD/lZV6SEx/8jXwQ4TYGGD7DYrM=
Subject key identifier:   CA:FD:32:F0:41:65:A0:79:4B:5F:92:F4:A2:C7:48:8F:32:2A:C1:E4
Authority key identifier: 21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B
Certificate issuer:       /CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
Certificate serial:       019237381A31B16CCD021CEB08CF8F9C0645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
Manifest number:          0A2A
Signing time:             Sat 28 Sep 2024 06:01:16 +0000
Manifest this update:     Sat 28 Sep 2024 06:01:16 +0000
Manifest next update:     Sun 29 Sep 2024 06:01:16 +0000
Files and hashes:         1: IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl (hash: votAROREu4r+wXPJccHiPEA71iw2uSpRnA8gA32NJwI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:38:1a:31:b1:6c:cd:02:1c:eb:08:cf:8f:9c:06:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2158ccf267455ecb09ee84c9ad9aeb007dd1ea9b
        Validity
            Not Before: Sep 28 06:01:16 2024 GMT
            Not After : Sep 29 06:01:16 2024 GMT
        Subject: CN=cafd32f04165a0794b5f92f4a2c7488f322ac1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:86:43:fb:8a:15:41:a9:62:cf:21:94:86:8b:
                    05:0d:58:8a:a8:9d:b6:28:38:7a:1a:c4:17:19:00:
                    a4:f6:1c:59:ca:d1:57:7d:7b:f6:33:b2:fa:ed:75:
                    51:3f:7f:56:d5:3c:8f:2d:6f:63:ca:cf:2a:d9:9d:
                    e5:d4:21:68:f3:f8:13:a2:f6:cf:59:04:6b:9b:22:
                    e8:63:e2:2e:8e:cb:46:1b:d4:13:d6:c6:89:e9:bf:
                    70:88:53:2c:e1:51:87:df:5e:73:f5:c6:28:56:02:
                    ca:46:25:d9:e8:06:38:59:ec:78:89:7d:65:d2:97:
                    0d:38:e2:75:b8:4e:54:49:bb:3c:34:39:46:be:3b:
                    57:d5:8a:44:6c:4a:93:f2:33:b4:2e:d2:01:a6:06:
                    41:b9:09:38:d0:e0:29:75:24:2f:d4:d0:22:24:e1:
                    7e:2f:a5:f6:bf:a2:de:69:10:62:54:4b:46:87:6a:
                    66:2f:99:37:11:ba:32:21:b2:73:9e:84:d3:b2:d5:
                    d9:8e:17:b8:53:60:85:a8:56:88:b9:71:65:07:51:
                    88:72:0b:bd:7b:75:08:e4:d5:5a:83:9c:c8:81:14:
                    58:3c:92:87:01:46:df:b2:e5:f8:fb:7c:f0:dd:84:
                    f9:e7:14:bf:53:cd:cd:8f:54:88:37:8a:e3:58:99:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:32:F0:41:65:A0:79:4B:5F:92:F4:A2:C7:48:8F:32:2A:C1:E4
            X509v3 Authority Key Identifier:
                keyid:21:58:CC:F2:67:45:5E:CB:09:EE:84:C9:AD:9A:EB:00:7D:D1:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVjM8mdFXssJ7oTJrZrrAH3R6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f10eb1-4e8f-439e-9683-f53325767b57/1/IVjM8mdFXssJ7oTJrZrrAH3R6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:a9:15:29:30:05:13:45:57:f8:9b:1c:16:5d:4f:41:c3:
         69:3a:d8:3a:67:47:f4:cf:b4:cb:27:a2:76:21:c3:b7:9e:5d:
         7f:19:a7:79:e9:41:3d:be:8d:36:cc:22:04:8e:96:34:4a:20:
         c7:b8:6e:14:82:ce:93:43:8a:12:ab:4f:2b:67:66:88:0a:53:
         81:a1:1f:df:46:b5:35:ff:f9:00:9a:43:05:37:16:21:23:d7:
         2a:f1:f9:63:7c:e2:15:95:48:76:c1:ea:a9:4a:8d:48:e8:66:
         07:7a:f4:76:34:48:ba:0d:b7:94:9f:1c:55:12:96:e2:62:76:
         ae:37:12:8c:4a:50:d2:aa:d8:c2:b6:2a:63:0c:2b:54:7f:8c:
         dc:d2:0c:92:c9:eb:03:59:d8:c2:d5:db:5b:36:59:41:d7:69:
         54:7a:ef:71:94:ec:12:4c:30:09:d2:d3:d1:ca:1f:31:21:6c:
         de:2f:56:ab:48:61:a5:a5:d9:d4:d1:a6:e7:f3:67:0d:e7:13:
         c5:64:da:e2:36:4f:91:5c:27:84:7e:aa:f0:05:67:8b:3b:f4:
         7a:15:01:e6:27:e0:92:e2:cf:e9:7d:60:68:98:96:ae:51:e8:
         da:74:db:84:78:c8:17:7f:aa:82:0d:2e:32:f9:42:4d:d8:23:
         6e:07:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:32 2024 by rpki-client on console-fra.rpki-client.org