Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File:                     JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier:          x+dS3T0annjhGiDO/W2GfV0zjs/wyGXs0NDyAjRL+AI=
Subject key identifier:   42:E0:1B:13:B8:65:30:BE:2E:78:98:32:A9:05:34:74:32:02:88:B2
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer:       /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial:       0193595355B661C2CDDEDCBC6C8D76117E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number:          04DC
Signing time:             Sat 23 Nov 2024 14:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:53 +0000
Files and hashes:         1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: UQa1O3vraNK7c1pUCSE2nfflbFyV7iEYh3jYJdHXWPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:55:b6:61:c2:cd:de:dc:bc:6c:8d:76:11:7e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
        Validity
            Not Before: Nov 23 14:00:53 2024 GMT
            Not After : Nov 24 14:00:53 2024 GMT
        Subject: CN=42e01b13b86530be2e789832a9053474320288b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:13:50:ee:d9:8b:56:82:01:87:1d:52:65:73:
                    48:cc:d6:85:52:bb:11:63:24:ba:2e:59:04:59:2c:
                    4a:9b:17:46:5b:6a:96:85:f9:3f:40:33:b1:3e:4c:
                    c5:b1:57:f9:43:45:83:46:82:79:5c:d2:bc:cd:f7:
                    3a:53:92:a7:b2:f6:90:d3:57:cb:ea:6b:dd:c8:10:
                    ef:6e:15:3c:2c:46:42:63:01:b9:66:a7:11:5f:d5:
                    91:e7:fb:52:d2:3c:84:b9:f8:69:66:c9:01:12:99:
                    65:09:b3:55:32:ce:d8:8b:75:fd:b8:8a:1b:28:a3:
                    4c:8e:70:a0:95:58:88:70:fe:93:4e:24:0e:b0:4a:
                    33:0a:55:a5:a3:c9:de:13:ee:e2:fb:fd:3e:c7:08:
                    55:64:66:43:82:39:67:a3:8e:89:49:ce:4d:6b:35:
                    df:fe:ab:89:c4:28:b6:02:a1:c7:d6:49:44:03:59:
                    54:35:dc:76:91:f4:8d:3e:a8:95:5e:dd:a6:94:f0:
                    02:72:7c:20:20:57:d5:a7:8b:a8:07:53:50:4a:c2:
                    12:7b:24:be:4b:20:85:9f:17:57:b9:b9:3a:1d:6f:
                    7b:18:74:07:24:ca:17:b8:54:9d:5a:00:ff:8f:c7:
                    0a:ec:2f:f1:b0:95:af:0e:64:c0:13:eb:85:4a:72:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E0:1B:13:B8:65:30:BE:2E:78:98:32:A9:05:34:74:32:02:88:B2
            X509v3 Authority Key Identifier:
                keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bc:13:4e:49:16:3d:48:14:5a:d8:96:57:a5:8e:72:29:08:
         48:47:5b:91:69:4a:94:18:f1:8b:fa:1d:c1:2e:f9:ec:5f:3f:
         f4:ea:17:16:66:f9:64:c5:27:69:88:5d:13:e9:b9:6e:81:1b:
         fc:4e:97:cb:2b:e2:61:07:15:62:4b:ab:ce:c0:8c:bb:21:cd:
         39:12:d0:e5:10:6c:a9:5f:b5:58:d0:37:d6:cd:32:74:ef:40:
         74:f2:e6:38:81:fa:85:41:0f:5e:4b:ca:7c:36:f5:6f:12:0a:
         99:cf:3d:a0:70:c6:e0:33:96:4d:10:f7:8f:7f:79:e4:83:7b:
         33:a4:fd:2d:e1:74:9d:ee:0b:76:6c:3d:e4:b8:35:58:08:3f:
         23:a3:16:3e:bc:68:01:97:4f:c3:ad:5c:65:e7:42:86:f5:4a:
         b3:6f:73:85:c6:d1:37:23:48:d6:71:77:45:e2:b1:65:fb:7a:
         f6:ff:4d:76:73:d3:7f:d7:ad:b7:8f:df:92:97:cb:50:37:3c:
         aa:7b:36:1c:d8:18:fe:10:a9:a2:32:2f:35:ca:91:1e:41:a7:
         c8:8b:7f:13:e9:88:a7:9c:a5:08:d5:ce:aa:02:c1:f7:8e:be:
         a2:e6:77:43:55:15:c3:be:14:c3:8c:8d:b3:4b:dd:43:a2:9b:
         c7:f9:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:01 2024 by rpki-client on console-fra.rpki-client.org