Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          B72vQY/zUEAZMhXt6CGVo+nv5ebfq3sFwptX44D7vXY=
Subject key identifier:   AE:F4:D6:EF:88:E3:9C:60:52:8C:03:CE:91:F2:2C:38:8F:2A:C6:A8
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       01938B8911554FBA78AE01FF8A617AC46336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          0B91
Signing time:             Tue 03 Dec 2024 08:00:36 +0000
Manifest this update:     Tue 03 Dec 2024 08:00:36 +0000
Manifest next update:     Wed 04 Dec 2024 08:00:36 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: r85Z+C9ICsUUG8QvQyQsJZXioePvs4QB/zdJIdYcy5Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:89:11:55:4f:ba:78:ae:01:ff:8a:61:7a:c4:63:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: Dec  3 08:00:36 2024 GMT
            Not After : Dec  4 08:00:36 2024 GMT
        Subject: CN=aef4d6ef88e39c60528c03ce91f22c388f2ac6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:d9:1e:cf:2b:8d:3b:00:0f:7a:ef:51:3f:
                    a5:70:8a:20:bc:88:24:5b:37:86:12:a6:20:1d:04:
                    1e:30:48:bf:19:3b:d0:09:6a:50:1c:62:ec:bb:f1:
                    e5:ea:34:cc:18:c9:5e:02:ed:65:e3:01:fc:42:1e:
                    7f:1c:3d:0b:af:bd:9f:1c:7c:8b:47:4c:44:f1:86:
                    ce:82:b4:34:9f:54:29:a8:fa:bf:72:12:53:1e:2f:
                    56:da:d5:f5:60:8d:ba:f5:70:4a:33:5c:e8:83:19:
                    1f:75:76:5f:2f:22:38:4a:90:0a:f2:2e:eb:ef:ce:
                    1f:1e:e0:b1:35:9e:fc:bf:96:36:23:9c:07:62:33:
                    68:92:fe:f4:7f:85:e6:87:5d:88:97:9c:e7:f5:b5:
                    cc:67:29:d0:22:a5:60:bc:eb:15:21:07:fc:f4:8d:
                    6c:6f:ef:62:da:3b:3c:05:f8:ce:d6:0f:62:eb:7e:
                    03:b3:3d:5b:6a:fe:30:b1:64:6c:8c:a0:84:7a:b0:
                    b7:ad:b7:84:60:33:f1:d1:d9:be:c7:6d:72:a2:6a:
                    d2:fd:4e:77:e3:4b:3f:24:c4:f7:ef:54:97:e2:59:
                    31:18:3e:95:01:14:bc:45:b7:6a:61:06:eb:38:b9:
                    67:ce:eb:f8:68:02:1e:86:42:5f:f0:9b:19:e7:0e:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F4:D6:EF:88:E3:9C:60:52:8C:03:CE:91:F2:2C:38:8F:2A:C6:A8
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:43:b0:51:7f:16:26:2e:70:47:29:2d:9e:24:52:62:ef:8b:
         3b:a3:b2:08:09:b5:e7:3b:3c:b6:44:1e:df:6c:56:2c:67:12:
         aa:2a:1a:a7:a9:f7:56:0d:2e:7d:71:d2:62:f4:6a:59:36:1c:
         83:8f:31:db:ae:15:be:e7:dc:82:3d:32:47:c7:4f:42:96:65:
         96:e2:51:15:a9:2a:63:9c:bc:38:6d:23:eb:d1:b3:53:80:f7:
         4d:2b:60:ff:78:a6:7c:1c:fc:8c:11:07:8e:35:5b:bd:e1:3d:
         43:fc:d9:bb:3e:23:dd:e7:50:6a:2b:35:2f:a6:2f:83:9f:79:
         f9:6b:5d:e3:32:43:6a:ac:82:cf:79:2c:f4:5e:5a:7a:64:03:
         cf:07:fd:1f:ee:ae:85:14:d5:4c:22:b7:31:c3:cf:92:16:6a:
         47:d7:27:4a:27:33:a7:3d:2b:be:b4:23:a4:1a:8e:5e:5a:3f:
         02:9c:41:7c:4a:7c:bd:f3:8a:9d:9f:ea:df:53:de:a1:89:de:
         00:49:d4:8e:1b:88:00:70:1e:aa:f4:51:d5:51:3a:2e:7a:47:
         df:e3:8d:47:62:aa:56:ad:1a:a9:e3:5c:b3:da:81:b2:05:3e:
         6a:67:5f:37:7b:6c:ce:0e:c3:32:86:b0:fb:53:17:83:5a:67:
         98:fb:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 18:30:10 2024 by rpki-client on console-fra.rpki-client.org