Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File:                     C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier:          1hzGl5HfiKlBxEN928hw0A7HqTYTCy1U1jy58kergMk=
Subject key identifier:   21:8A:31:0D:6D:BC:F9:9A:12:50:6E:B0:97:3F:DA:EE:63:A8:B8:4E
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer:       /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial:       01935878E29EEB13792546EDAB75AAEDC8F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number:          022C
Signing time:             Sat 23 Nov 2024 10:02:17 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:17 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:17 +0000
Files and hashes:         1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: zePA39b3O2kjyIl7MleuBOjvQpg0J5pffLTG9u+24RY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:e2:9e:eb:13:79:25:46:ed:ab:75:aa:ed:c8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
        Validity
            Not Before: Nov 23 10:02:17 2024 GMT
            Not After : Nov 24 10:02:17 2024 GMT
        Subject: CN=218a310d6dbcf99a12506eb0973fdaee63a8b84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:59:54:60:b4:9d:52:4a:7c:89:08:54:5f:
                    24:3a:73:3b:3f:8d:c6:c0:60:13:20:a8:fd:7b:0b:
                    ae:4f:aa:81:12:67:c9:a0:b7:0a:9e:fc:c0:e6:86:
                    2a:47:3c:6d:ab:a8:db:56:17:c9:70:92:13:7c:02:
                    57:fe:36:ab:b4:e2:ed:ce:3f:17:a6:ad:23:73:44:
                    8c:0b:e6:05:34:79:bc:e8:87:7c:dc:28:27:08:cf:
                    ab:d8:86:6b:71:37:cb:89:37:4e:42:22:95:d0:99:
                    73:98:fd:20:40:43:78:69:8a:c9:36:0f:6d:29:9c:
                    34:26:46:10:fb:10:e6:bc:59:fd:c7:73:e7:70:4b:
                    42:e0:8d:89:54:93:78:d4:d3:5c:ec:0e:d4:d6:b9:
                    06:ea:23:cd:d7:08:bb:bb:7a:b6:d7:a5:d8:27:2d:
                    4c:31:04:e1:4b:c4:e8:92:52:4e:a4:1f:64:fc:ff:
                    cd:4f:9e:17:03:ca:e9:05:f3:4f:58:42:06:6f:bb:
                    16:c1:82:67:f9:3a:95:df:ff:af:dc:56:92:83:d5:
                    a7:07:fc:b9:c5:90:95:82:05:c3:85:53:58:01:3e:
                    06:0b:54:53:c3:d2:bd:45:cd:68:27:d5:5b:a2:90:
                    9c:53:30:e6:ff:f4:4e:dd:94:b8:a1:1f:f0:d7:e5:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8A:31:0D:6D:BC:F9:9A:12:50:6E:B0:97:3F:DA:EE:63:A8:B8:4E
            X509v3 Authority Key Identifier:
                keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:fe:8c:09:4c:3a:55:0c:32:98:26:35:d2:2a:83:d4:2f:
         44:d0:2b:c6:36:95:17:26:b7:29:d4:52:00:f5:2a:6d:b1:a0:
         7c:58:81:e8:99:68:92:22:33:2b:c7:40:09:cd:60:4e:ff:8c:
         0f:41:09:f6:86:c0:b0:16:fe:d2:79:ab:0e:bb:23:2a:f5:34:
         62:39:bb:ba:d8:44:2f:1d:10:69:68:32:50:c2:97:4c:79:79:
         e6:ec:dd:20:c9:a7:01:72:40:cd:65:b5:cf:a8:99:80:5b:3a:
         20:f8:c9:ea:28:95:5b:66:72:d3:17:60:2e:4b:6f:f0:11:24:
         73:56:ce:db:7b:d1:a7:ad:0e:4e:69:4f:a4:dc:ee:89:a1:c8:
         07:ee:ee:62:4e:b5:cc:a1:d5:c7:97:ca:44:00:33:45:08:a4:
         33:0a:fe:19:5b:56:86:39:03:cc:7a:61:40:5e:c4:56:e5:98:
         79:8a:2c:1f:8c:c9:05:5f:9e:f8:fe:bb:43:27:c8:f8:cc:6d:
         0f:da:c1:2c:8c:a6:dc:0a:3f:e5:c0:75:12:85:16:e5:4d:74:
         74:73:54:bb:52:f0:7b:1f:67:a0:0f:cd:87:e3:4b:92:6b:e1:
         6f:7c:64:15:e9:53:30:0c:a1:7a:cc:61:df:ed:73:76:28:0f:
         7f:3e:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:06:02 2024 by rpki-client on console-fra.rpki-client.org