Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File:                     mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier:          4V3hGIm3oYUOnH96foyhrn6VmzAFFIW+gvJ6W+zXOY8=
Subject key identifier:   7B:D6:5A:D4:89:B0:C3:E5:97:92:67:BF:FF:E0:46:FC:61:47:11:68
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer:       /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial:       019358796322598F2D06F31EA5698557E62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number:          0E14
Signing time:             Sat 23 Nov 2024 10:02:50 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:50 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:50 +0000
Files and hashes:         1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: wz6Lof0tGwOpC/UkC/xb8Wh6aZsy23BusRAGhiEskew=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:63:22:59:8f:2d:06:f3:1e:a5:69:85:57:e6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
        Validity
            Not Before: Nov 23 10:02:50 2024 GMT
            Not After : Nov 24 10:02:50 2024 GMT
        Subject: CN=7bd65ad489b0c3e5979267bfffe046fc61471168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:af:c5:3f:a7:cf:46:c0:cc:45:84:64:46:
                    2f:37:93:67:53:08:9a:2a:2f:52:7e:a7:7b:3e:f1:
                    92:15:15:af:72:e1:65:f7:48:11:cd:df:a5:a5:b3:
                    1d:9a:48:eb:5d:57:1b:d1:26:2e:58:60:5a:34:74:
                    64:33:2d:f1:8f:4e:ca:77:24:de:0f:d4:cc:f7:62:
                    c5:36:32:6c:5f:61:e7:fc:57:33:0f:38:0c:81:00:
                    19:e4:c2:6d:af:94:70:a9:f3:74:9b:4d:a4:56:8d:
                    6f:7e:9d:36:d1:06:cb:2b:ca:a0:28:2d:11:70:38:
                    6b:52:36:12:c5:5e:2c:10:1a:eb:98:5a:ff:89:23:
                    78:43:39:90:43:5d:25:b9:8d:29:50:53:52:66:a4:
                    68:29:94:ee:9d:b2:f3:7c:3a:86:92:d6:85:e4:28:
                    79:e0:10:4d:6b:4a:f8:2f:99:0d:2a:44:0e:dc:dd:
                    cf:73:64:d6:3f:da:c4:ca:7d:ad:68:ca:a3:ef:27:
                    b1:85:92:de:46:97:8b:47:13:19:de:6c:9c:b2:81:
                    1b:39:9c:10:ab:12:4f:d5:e5:d9:3d:76:8d:d3:f0:
                    9a:34:9d:a7:e0:3d:1d:f8:d6:88:7c:81:26:9b:94:
                    ac:f2:f1:4e:1c:52:8d:5b:12:f7:67:18:d7:62:30:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D6:5A:D4:89:B0:C3:E5:97:92:67:BF:FF:E0:46:FC:61:47:11:68
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:e1:d1:c0:dd:44:a1:78:b3:f1:5b:26:98:0b:92:7b:f4:
         61:df:8a:40:3c:a0:09:df:bb:8b:b2:f4:7e:76:cd:cf:f5:8d:
         5e:db:17:83:07:ec:91:e4:6f:63:b9:a5:c3:ab:6a:e7:54:de:
         95:66:fd:a3:4a:89:a6:80:4b:6a:ce:d1:87:53:de:46:b8:79:
         f4:6d:63:31:e8:c3:4d:61:bb:20:1d:1f:b4:fd:3e:10:f0:3f:
         a0:51:9e:9f:3d:61:36:bb:d1:fb:21:e9:d7:10:62:d4:4e:22:
         c1:a5:a2:51:58:5b:84:78:f8:4d:22:d7:66:e2:fc:da:45:dc:
         b2:43:b2:27:37:fe:71:f7:3d:85:d5:4a:4c:b0:bc:6b:4d:1d:
         d9:7e:80:18:53:43:b3:2f:40:5b:82:8b:d5:5a:6b:dd:27:04:
         66:72:9d:a5:d7:c8:9b:42:ab:d9:6f:b2:b7:41:e0:49:a7:c4:
         8f:e5:24:ba:28:91:f1:83:59:b7:35:8a:7f:b9:fb:b1:8a:20:
         80:0b:11:b3:60:23:85:8d:1f:ef:0f:e2:03:19:49:b3:e0:51:
         fc:b8:d4:9e:20:96:c4:fa:6d:38:49:5a:25:b3:63:f2:94:b9:
         50:b7:7f:2c:9b:23:50:6c:92:85:e3:c2:97:76:7b:4c:43:4d:
         e7:26:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:58 2024 by rpki-client on console-fra.rpki-client.org