Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
File:                     U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft (raw, json)
Hash identifier:          jKOYrkArC4BBRWHRadMnAVx6AWnKTAH+XHSRR3eYAPA=
Subject key identifier:   62:80:BB:B2:E9:24:AD:07:A7:12:19:4A:DF:70:8C:D1:BE:7E:60:5A
Authority key identifier: 53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6
Certificate issuer:       /CN=53a3c4ee670dcea68b4d79ea6c3185fe029d97b6
Certificate serial:       0193572DB9D552C3CA6B1A1D22B25F68B46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
Manifest number:          1094
Signing time:             Sat 23 Nov 2024 04:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:34 +0000
Files and hashes:         1: U6PE7mcNzqaLTXnqbDGF_gKdl7Y.crl (hash: 52cDG/eY38dK60FZKJUEYV5Go2H1j3PLhJZwfMPZzDE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:b9:d5:52:c3:ca:6b:1a:1d:22:b2:5f:68:b4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a3c4ee670dcea68b4d79ea6c3185fe029d97b6
        Validity
            Not Before: Nov 23 04:00:34 2024 GMT
            Not After : Nov 24 04:00:34 2024 GMT
        Subject: CN=6280bbb2e924ad07a712194adf708cd1be7e605a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:fc:85:d0:bf:bf:78:7d:5f:be:6a:ab:dc:
                    f6:30:2f:15:3e:4e:fb:e2:de:ed:c3:69:69:d8:24:
                    3c:46:21:a9:d0:8c:6f:e7:e0:d6:f4:7a:18:79:f7:
                    b0:9d:cf:7c:a7:ee:c3:7a:87:ad:22:55:26:b2:dd:
                    cb:4e:1a:94:c0:c0:2a:0a:02:cd:be:79:af:e7:71:
                    bd:38:b4:0c:4c:85:d1:a2:c5:2b:b6:af:e0:c7:4f:
                    73:52:a2:c2:f9:95:15:ea:f8:8a:62:84:3d:8c:7d:
                    d1:0f:aa:4f:86:c1:3a:49:b8:82:2c:fd:2e:e3:b9:
                    e1:f8:6f:fe:32:cd:4f:89:bb:0a:66:e8:df:a7:46:
                    a2:65:39:3e:13:de:b3:51:ef:9d:55:2f:a1:0e:a3:
                    b7:1d:18:d3:a1:75:e0:1f:b6:42:3e:da:8c:fa:35:
                    e2:94:c2:bb:41:29:68:81:db:81:b7:8a:08:58:bc:
                    3d:a7:9b:66:32:3c:32:ea:c9:af:ce:f5:44:a3:58:
                    ac:e2:f5:b9:46:21:13:89:f1:82:c6:5c:28:0c:d5:
                    2c:19:81:66:27:eb:20:c3:b4:57:d0:8f:d4:32:f9:
                    a2:18:d9:54:63:bf:cb:5a:af:01:de:82:8a:d3:df:
                    76:0d:83:d3:bc:56:cc:76:ff:15:57:9e:86:c7:45:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:BB:B2:E9:24:AD:07:A7:12:19:4A:DF:70:8C:D1:BE:7E:60:5A
            X509v3 Authority Key Identifier:
                keyid:53:A3:C4:EE:67:0D:CE:A6:8B:4D:79:EA:6C:31:85:FE:02:9D:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa4e30-fd64-486a-bb62-044c32531ad3/1/U6PE7mcNzqaLTXnqbDGF_gKdl7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:9a:f9:07:56:56:98:89:64:a7:88:8c:ff:51:96:34:e9:
         b0:14:6f:ab:83:be:45:af:c8:e0:37:e2:ac:72:8d:56:4e:6a:
         94:39:1a:5c:91:0b:50:da:cc:1a:22:76:76:43:af:e2:87:91:
         9e:68:53:b2:b6:91:d0:1e:ee:9d:ea:91:23:1e:e7:81:53:21:
         ba:76:51:f5:8e:9f:b7:06:37:2c:c2:32:66:ec:73:a5:b5:72:
         18:6d:22:c5:a0:b1:47:8c:b4:03:1c:6d:40:0f:ee:30:f3:85:
         a2:41:30:80:e1:e5:a0:bb:1f:b7:a4:58:c1:d0:64:7a:29:b6:
         ad:46:45:52:c6:c0:9a:8a:26:87:96:13:3e:a2:87:01:aa:82:
         a0:39:29:f4:41:f3:7b:86:0a:96:12:5c:6e:58:40:67:ea:3d:
         a1:84:2e:d7:35:6a:f2:a9:d9:73:70:33:a9:75:c1:7c:e4:a4:
         9e:ce:db:e0:c9:86:90:49:7d:e2:98:a3:72:30:00:20:99:93:
         ee:c6:dd:e4:1c:29:e3:bc:3c:cd:71:81:cf:b5:18:49:33:09:
         23:a6:32:83:9c:13:f3:5a:69:92:71:ba:d2:dd:de:80:a8:b0:
         bc:a1:ef:74:12:ab:94:8d:0f:b1:76:11:19:50:c7:86:3e:27:
         e4:09:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:18 2024 by rpki-client on console-ams.rpki-client.org