Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File:                     kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier:          nNvwSCKqcNV1SB/uUUOHElQsUxhWtBcel65kfi0oPm8=
Subject key identifier:   A8:34:13:E0:88:04:CC:06:4A:B7:1F:D9:F4:D9:9B:6F:DE:CB:0D:FA
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer:       /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial:       019369D9F8789A752FB33EF0AB48F18E5902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number:          053B
Signing time:             Tue 26 Nov 2024 19:01:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:52 +0000
Files and hashes:         1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: aisiZt+E7eS/yCE3atxY53MNyBWXytT9PmSjR+z1pv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:f8:78:9a:75:2f:b3:3e:f0:ab:48:f1:8e:59:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
        Validity
            Not Before: Nov 26 19:01:52 2024 GMT
            Not After : Nov 27 19:01:52 2024 GMT
        Subject: CN=a83413e08804cc064ab71fd9f4d99b6fdecb0dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:0f:f7:96:be:a6:23:11:65:b6:93:16:26:
                    98:4e:6b:6e:32:bc:ef:9f:6a:c2:08:6c:e2:df:1f:
                    09:85:43:75:31:8b:ec:66:3b:6b:1d:fd:41:ab:c1:
                    fb:b5:7f:b0:96:50:30:28:22:1a:49:8a:86:b9:68:
                    c1:30:50:1e:05:51:15:0a:9b:13:5c:0f:8d:2b:c6:
                    26:9f:65:a2:14:6f:e7:f5:5d:9b:f1:1b:4f:56:40:
                    69:62:f5:4f:5f:3b:06:d2:f2:f3:2e:cc:a4:45:e7:
                    e5:7b:0e:2a:68:90:18:9a:14:23:1a:85:47:8b:45:
                    d3:1c:f5:63:d4:8a:05:b8:96:5e:f1:38:05:f1:c3:
                    a9:f3:b8:ff:43:6b:bf:9f:c0:69:35:54:94:c3:8e:
                    6e:c7:b0:4d:ab:a8:d9:d7:1f:78:30:59:dc:a2:1d:
                    a8:86:e1:8d:4b:0d:c4:e7:88:eb:82:f2:20:98:4a:
                    d2:05:01:23:79:4c:d3:33:27:ca:3e:4b:fe:b2:82:
                    4d:08:8a:51:27:db:9d:8f:46:46:ae:c5:07:03:f0:
                    32:13:f8:64:46:ef:2b:e3:ed:5a:cf:bf:ef:a9:5d:
                    1e:fb:15:91:0c:80:ad:25:c5:3a:5b:b3:34:08:97:
                    20:fb:34:54:ed:1c:f2:bd:e3:f9:d3:fe:36:e1:4a:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:13:E0:88:04:CC:06:4A:B7:1F:D9:F4:D9:9B:6F:DE:CB:0D:FA
            X509v3 Authority Key Identifier:
                keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:36:5e:7a:f3:ef:60:55:f4:32:db:00:0e:e6:a8:ac:f8:18:
         f3:c1:81:0c:d8:fc:9e:2e:0d:66:90:d4:e7:7b:4d:22:cf:63:
         a8:28:7f:3d:8e:b6:c5:ee:4e:1e:d5:68:50:c5:af:d8:13:d0:
         b2:f1:de:7d:3a:10:70:4b:d5:85:c6:ed:a0:65:6d:bd:43:b9:
         99:86:34:df:56:24:83:5e:ad:34:5d:3b:37:ca:05:e1:14:cf:
         a4:de:72:2a:98:41:d6:33:6f:ea:44:16:48:5c:3a:2b:28:aa:
         78:83:09:54:e7:04:7e:74:dd:45:08:ed:45:8c:1c:1c:8c:7b:
         41:43:56:f2:ae:1d:24:42:10:db:42:76:74:df:26:69:ef:7d:
         0c:c7:5b:7b:92:1f:df:8c:9e:29:56:b1:06:b8:ca:a0:03:f5:
         33:df:aa:ec:7d:1d:b3:10:b6:57:57:de:20:8e:1d:eb:1a:94:
         c2:38:ac:eb:76:bc:3f:67:8c:3c:8f:bc:78:df:42:ae:15:92:
         15:52:5e:61:5e:68:3b:f5:bf:24:c4:db:e7:1a:7c:53:3a:48:
         a8:ea:b8:ba:0b:73:a3:2e:16:f0:9b:b2:eb:1e:f2:ff:b2:ff:
         4b:e5:61:6f:42:80:77:fe:ab:c8:39:45:e5:22:4d:5b:13:22:
         34:6b:78:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:58 2024 by rpki-client on console-ams.rpki-client.org