Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
File:                     JDPLPigynY7phe1GyEKDubN0CPM.mft (raw, json)
Hash identifier:          mvtrlX5gNZIGttFYuDbmPjub5tXeA/ovwHZr0EPkPJA=
Subject key identifier:   82:05:BA:83:1B:8C:D4:EB:05:C2:2A:8F:0A:83:68:AA:78:3E:08:54
Authority key identifier: 24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3
Certificate issuer:       /CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
Certificate serial:       019357D25D7A9B773D391828CEEE40B5CB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
Manifest number:          07CE
Signing time:             Sat 23 Nov 2024 07:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:24 +0000
Files and hashes:         1: JDPLPigynY7phe1GyEKDubN0CPM.crl (hash: coaFN4oQt1o6BIwdaOIQtRoQUntG6ugLI9YHwVY0WRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:5d:7a:9b:77:3d:39:18:28:ce:ee:40:b5:cb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
        Validity
            Not Before: Nov 23 07:00:24 2024 GMT
            Not After : Nov 24 07:00:24 2024 GMT
        Subject: CN=8205ba831b8cd4eb05c22a8f0a8368aa783e0854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:fb:f1:76:fa:0b:0a:83:09:c8:a9:99:0d:
                    42:1e:e2:aa:4b:15:e1:26:c8:8e:3f:b2:12:cf:6e:
                    04:0c:4b:00:96:79:a9:28:e6:de:bf:21:c6:6a:44:
                    d3:07:84:71:39:c2:a7:eb:51:23:be:0d:9b:79:cb:
                    57:bd:78:10:25:b4:77:4f:6e:f8:f6:cd:21:15:6e:
                    1e:6a:cc:6a:8c:08:07:4b:ac:71:d3:cb:6d:77:ba:
                    78:d1:5c:00:6f:62:1a:ab:4b:d2:49:21:16:26:6f:
                    fa:7f:cb:7d:f4:5e:29:f3:d2:43:16:96:02:c2:6e:
                    d2:77:a6:df:6c:be:02:65:fb:7e:a7:d8:95:15:89:
                    60:d1:93:29:fe:f2:ce:92:fd:ab:3c:a1:f4:29:b2:
                    cc:7e:93:9b:5a:74:80:87:0a:59:7c:a5:b9:dd:9f:
                    f6:ab:d1:2a:de:a3:66:2c:c5:32:48:3b:1b:e6:ab:
                    da:eb:0c:cb:88:9c:24:98:a3:5f:89:04:10:10:e3:
                    4d:de:ed:5c:fa:60:77:5b:57:b0:14:42:3d:8c:2b:
                    f8:0f:5b:82:31:29:8c:7a:97:28:c2:8e:76:d5:8f:
                    94:ee:93:22:54:05:3a:ff:c5:e7:56:0c:df:74:92:
                    a5:22:33:df:2c:50:93:55:7f:22:d2:67:d2:c3:3e:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:05:BA:83:1B:8C:D4:EB:05:C2:2A:8F:0A:83:68:AA:78:3E:08:54
            X509v3 Authority Key Identifier:
                keyid:24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ee:86:6c:d7:7f:66:9f:30:42:81:bb:20:d7:c0:a4:93:8d:
         99:43:00:e8:5b:12:a4:a8:bd:69:46:c1:36:0a:f6:29:5d:62:
         2d:68:27:05:ff:a7:4a:f3:00:71:cf:dc:f7:2f:65:b6:87:c3:
         df:ed:d6:65:25:30:80:19:dc:91:5b:df:d1:47:60:2f:f2:72:
         1c:0c:96:f9:1a:07:f8:af:f4:b4:96:4d:78:f9:6e:27:a0:90:
         51:3d:de:5f:e3:37:a2:ea:3b:30:e2:00:89:40:b2:20:83:d6:
         69:da:ff:19:d0:ac:80:ff:70:fe:84:59:2c:63:9d:24:1d:b9:
         55:20:39:77:f6:e4:5a:57:12:b0:09:1c:ea:0c:53:9e:7b:28:
         98:0c:e0:df:bd:85:d9:0e:33:84:99:2e:04:e8:2f:80:ba:d3:
         ac:41:50:9d:17:1b:f2:cd:a8:ee:64:e5:cf:0f:c0:c3:93:d1:
         dd:64:b0:6a:fd:34:6e:bc:5c:a7:0b:15:58:f6:ce:73:d1:5a:
         a5:5c:1f:e3:7e:d1:59:b4:5f:4f:dd:99:bd:4b:42:4b:b5:f2:
         fb:c0:2f:45:c5:b8:40:8f:82:66:83:d4:ca:a7:f8:cb:1b:91:
         08:85:b4:fc:12:71:b6:46:82:17:b6:22:23:2b:ae:23:0b:70:
         8d:65:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:53 2024 by rpki-client on console-ams.rpki-client.org