Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File:                     CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier:          IbgvypSp7cpJoMoeDsIxpsgSuKogNkL04r/l9pbb654=
Subject key identifier:   2E:3E:87:1A:96:35:93:55:B4:A3:BC:10:64:F8:F2:DB:61:3B:B2:2E
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer:       /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial:       01935207509D53887CCF3E21880F395F215F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number:          01BC
Signing time:             Fri 22 Nov 2024 04:00:31 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:31 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:31 +0000
Files and hashes:         1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: v2j9QkhGIJtrjnhv5aAYrO5RpGF3+127ey8dUn6iTII=)
                          2: zpxvOPd2pkye3KZsVH66MF9-PCM.roa (hash: +HcghRhOjeAPozIDKbSBpE2TMo/gUohS21aLgMnIfHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:50:9d:53:88:7c:cf:3e:21:88:0f:39:5f:21:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
        Validity
            Not Before: Nov 22 04:00:31 2024 GMT
            Not After : Nov 23 04:00:31 2024 GMT
        Subject: CN=2e3e871a96359355b4a3bc1064f8f2db613bb22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:89:95:55:37:be:49:cc:68:25:99:1e:18:
                    ec:46:83:14:bc:ea:88:3c:50:ae:2d:f1:93:33:13:
                    e3:67:76:54:8d:22:59:0a:06:78:38:49:06:dd:2f:
                    f7:07:38:28:94:44:ae:dd:30:ad:27:0f:a4:1e:99:
                    3c:7a:28:6a:af:6a:68:34:88:4d:59:65:ee:4a:e1:
                    18:7a:56:45:31:c7:40:e3:cd:17:64:91:f9:3a:65:
                    22:10:5e:33:b8:1a:68:e8:35:70:8b:69:fc:18:9d:
                    03:d7:2c:96:1d:12:50:d2:43:84:75:b3:54:76:61:
                    29:9c:5b:0b:dd:57:8d:f9:64:03:86:92:93:6a:43:
                    0d:98:1e:42:45:9a:9a:d7:5f:43:97:fe:53:fd:55:
                    9f:09:87:ca:61:b4:1a:19:9f:91:6a:93:f9:32:8e:
                    b6:03:0b:1b:de:72:07:f4:50:69:3e:6c:ae:8f:14:
                    8f:0c:72:13:56:c0:9f:4d:24:f3:c4:ee:f7:2c:5b:
                    a1:e0:ca:a2:b1:3b:d4:22:0b:3e:b1:8f:cf:fb:de:
                    e7:d2:99:ff:ac:ef:73:70:27:b7:64:8e:05:4d:91:
                    93:a0:f3:12:cd:14:b5:7b:6c:84:5b:3c:8a:a8:55:
                    2b:9d:34:53:c9:fa:ca:9b:2a:25:05:4f:b2:03:64:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3E:87:1A:96:35:93:55:B4:A3:BC:10:64:F8:F2:DB:61:3B:B2:2E
            X509v3 Authority Key Identifier:
                keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:25:2e:e0:e6:d1:05:5d:5a:de:1e:af:48:82:89:83:98:
         d6:b5:9a:55:d0:b2:b8:72:2d:c8:86:d9:71:b7:ba:7c:09:db:
         1c:04:12:00:a1:a4:9d:cd:a5:ed:a8:91:8c:03:e4:70:fc:3d:
         b8:11:cf:7e:26:43:f4:57:35:bf:53:96:44:09:85:9f:d2:8d:
         90:db:2a:01:d6:44:51:c9:d9:46:a2:96:63:5d:78:79:fd:fd:
         63:f4:bc:15:5b:cf:af:ce:35:00:ff:5a:77:c3:3c:d1:ab:52:
         31:c4:55:5c:0c:0c:ed:62:33:d9:bc:5d:35:b7:03:55:27:cf:
         c7:13:4a:ea:7f:22:0f:51:71:b8:71:98:85:05:91:6f:39:72:
         12:9d:34:8a:d2:1b:56:bc:59:56:44:4e:aa:bb:1b:f1:8d:bb:
         bc:bb:0d:58:7b:38:d8:e1:e4:78:81:d4:52:55:ad:ce:ea:49:
         03:af:4b:38:bc:9d:8b:01:05:4b:59:95:58:62:57:98:8b:4b:
         45:83:cd:11:55:76:be:ff:46:ff:30:33:88:f1:38:58:db:b9:
         3e:3c:24:95:14:9c:3b:a6:bd:4b:30:bb:f3:c1:d1:10:26:ad:
         1b:a9:2a:08:c5:db:27:82:04:d6:62:cf:7e:7e:3b:77:65:3a:
         51:ed:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:31 2024 by rpki-client on console-fra.rpki-client.org