Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File:                     9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier:          WvPqpaY9S5s/sTW9H9u1T5T55+UcXmDoWMKmUCgcieo=
Subject key identifier:   78:58:A8:A7:EC:52:C4:A3:80:5A:46:AB:25:22:9F:05:F2:27:2A:80
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer:       /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial:       01935764504943E79080671ED6AC249D1A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number:          0F43
Signing time:             Sat 23 Nov 2024 05:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:12 +0000
Files and hashes:         1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: jKsKIDet5T6DA+9v7o+pXJOmmqvUQw3PtO1PLA1RxmQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:50:49:43:e7:90:80:67:1e:d6:ac:24:9d:1a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
        Validity
            Not Before: Nov 23 05:00:12 2024 GMT
            Not After : Nov 24 05:00:12 2024 GMT
        Subject: CN=7858a8a7ec52c4a3805a46ab25229f05f2272a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:41:8f:22:02:25:1a:5f:ec:25:a5:94:d5:
                    93:ac:fe:b8:1d:29:30:11:2e:80:94:41:5a:d8:ec:
                    fa:46:2d:7d:eb:5c:ad:17:bc:96:42:05:3d:ed:6a:
                    46:70:a6:94:a8:b3:e2:fe:fc:19:b9:2a:2d:34:04:
                    d5:83:f9:67:cc:09:ce:95:f7:93:b9:8d:56:cf:dc:
                    c7:4a:ae:67:16:1b:da:fa:3d:38:05:9e:df:eb:80:
                    a3:12:0a:99:69:e3:95:b0:5c:54:6e:f0:f4:60:d0:
                    77:64:67:b4:08:f6:3f:9e:1d:36:b9:69:f9:ef:a7:
                    12:a9:c3:ca:4e:39:ba:17:f0:bc:a6:72:f3:94:64:
                    51:68:6a:14:01:06:ba:fa:5d:3a:b1:af:58:4e:fb:
                    63:2b:51:02:1a:0a:52:c5:a2:54:99:7d:9c:0e:3d:
                    d4:66:da:aa:d5:8e:21:46:82:f0:e6:1b:8b:58:6d:
                    ac:8c:41:ff:a5:8c:e8:fd:1c:40:48:52:95:34:e9:
                    cb:9d:81:96:9a:a7:77:00:91:36:09:b2:60:75:06:
                    d1:5a:21:43:25:d3:00:36:62:95:b4:db:a7:7d:0e:
                    dd:b6:42:49:ca:f6:bc:63:f5:8e:21:1e:fe:69:41:
                    2c:dc:7c:d5:be:68:51:42:ed:62:a9:e3:33:fb:12:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:58:A8:A7:EC:52:C4:A3:80:5A:46:AB:25:22:9F:05:F2:27:2A:80
            X509v3 Authority Key Identifier:
                keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:70:c8:0a:5c:71:5f:47:34:29:8e:4e:7d:c3:23:b7:40:
         9a:57:5e:6a:3c:d1:20:6c:2e:30:5f:98:97:ae:a6:68:e8:58:
         c1:8b:1b:54:97:29:2d:fe:a4:ba:f5:d4:e5:5b:60:36:e1:7e:
         fa:21:c7:2c:22:ce:12:02:06:fb:de:8e:bd:9e:c2:00:fe:aa:
         96:80:69:c4:6f:07:4e:85:b8:cc:fa:7d:e1:ae:54:15:60:23:
         4f:31:ae:08:ea:3a:a1:63:9f:4c:52:26:3c:09:2e:75:6b:22:
         ec:7f:a6:5e:7b:04:5e:2c:b0:28:99:5b:48:28:fe:58:c7:c1:
         ef:2f:bf:a9:22:2a:4c:3d:8b:5a:ef:9b:e2:4f:a9:c6:6d:cb:
         62:8a:2c:76:ec:86:9c:7e:45:ae:3c:a7:d9:0d:16:03:fc:97:
         90:14:27:31:a0:c3:52:68:02:35:41:7f:8c:0a:48:77:9e:2f:
         0c:47:8e:79:67:9d:ba:0c:f6:6b:33:3a:a4:88:f6:9b:20:da:
         c7:9d:e2:1c:e2:c0:a7:d1:ed:e0:77:cf:55:4f:e5:99:57:a1:
         30:0a:34:1a:f6:1f:0c:f8:d2:0d:69:77:d6:ae:92:e3:df:05:
         1a:5e:6f:ef:41:1f:bd:70:b2:9d:d6:87:b3:cd:c6:ea:f7:b3:
         8c:3a:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:16 2024 by rpki-client on console-ams.rpki-client.org