Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File:                     PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier:          qGMjvWOpyWrioyht24Ah0jb0+D13VgoCqCpqYdyUUmU=
Subject key identifier:   DB:BD:39:E8:C6:79:8F:9E:C2:0B:44:A7:C8:1E:30:21:CC:A1:2D:F3
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer:       /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial:       01935688E73E9DD58BC9511525FA50C37021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:32 +0000
Files and hashes:         1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: 83JX1DmWEdNgRgNA5aHnrdQbN8xYEQVcIpDhdk1Eyhw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:e7:3e:9d:d5:8b:c9:51:15:25:fa:50:c3:70:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
        Validity
            Not Before: Nov 23 01:00:32 2024 GMT
            Not After : Nov 24 01:00:32 2024 GMT
        Subject: CN=dbbd39e8c6798f9ec20b44a7c81e3021cca12df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:f4:a3:cd:2a:1d:e4:c1:c3:9e:99:24:ae:
                    25:a3:58:0f:0f:3a:63:bb:27:51:6f:3e:0e:3d:5a:
                    fe:9d:87:a8:32:53:bf:3b:8d:43:4a:67:7c:46:54:
                    f5:a4:bb:12:e6:8b:c4:a4:c9:ca:63:64:67:ef:e6:
                    c3:24:18:8a:63:66:66:dd:5b:cd:a4:f3:9e:b0:db:
                    82:ba:a7:5f:5a:ee:bf:00:d7:a7:e2:e3:55:73:7c:
                    98:19:8e:31:19:42:06:30:6f:2d:e8:06:ff:d3:03:
                    e3:21:6b:47:4e:02:a3:2c:d6:21:31:29:81:9e:2d:
                    08:42:68:c3:f2:a8:4e:f5:fd:9d:46:cb:90:f3:89:
                    60:f0:46:d7:f9:8c:87:34:d6:29:93:f1:13:92:46:
                    c5:21:3c:34:57:47:c7:ad:2c:0e:ae:5f:2c:5a:6e:
                    61:a2:08:f5:c0:c9:4e:d6:cb:64:6b:7d:20:96:7f:
                    c1:b7:6a:6d:20:60:f2:f5:b3:11:6f:4e:ea:be:ea:
                    7a:b7:d0:40:ac:7a:25:dd:35:2c:cf:de:6d:b0:d0:
                    83:8f:84:ba:18:d9:fc:b2:47:04:4e:d0:24:11:3b:
                    87:bc:91:b0:33:f6:a5:cf:05:aa:be:43:23:fd:64:
                    01:d3:42:82:c1:67:1e:28:81:4d:6b:da:da:a0:7b:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:39:E8:C6:79:8F:9E:C2:0B:44:A7:C8:1E:30:21:CC:A1:2D:F3
            X509v3 Authority Key Identifier:
                keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:ab:1d:d1:ff:0e:1f:e9:28:d9:a7:2a:ff:5a:05:fd:bd:
         15:97:7f:39:21:02:22:2d:66:cc:99:37:66:86:4e:79:5f:96:
         34:86:f7:67:4b:5a:30:fe:d3:29:17:91:c9:07:31:89:a0:0f:
         6e:d0:d4:d0:a6:87:39:78:18:dc:59:b1:43:f9:35:f9:ca:6b:
         67:ab:aa:c8:66:f7:ba:19:5a:c7:c2:c8:7e:0e:cb:01:4e:ac:
         1d:56:bb:3e:df:03:3e:c6:78:1c:c9:72:b0:1d:a7:2e:b7:49:
         ad:33:47:07:d2:d0:0e:cc:e7:fb:71:a1:e9:b0:df:df:5a:f0:
         b3:3d:40:39:ad:40:6d:14:88:56:f2:cb:88:3d:bf:98:33:27:
         94:be:b2:54:5e:e9:01:e8:bc:64:52:2a:8d:5e:1e:c7:9c:1d:
         bc:32:5f:4b:fd:6b:f1:20:10:14:5f:dc:5f:25:62:cc:6a:4e:
         09:8c:83:e6:33:36:52:bb:5f:3a:de:d8:97:06:57:ba:de:41:
         e8:b3:14:ed:a2:24:b4:cb:ba:c8:8a:e4:29:11:b7:38:05:c6:
         89:6f:9b:c8:20:33:e8:01:e8:f6:1e:06:e0:a1:91:66:9c:24:
         1f:e9:34:0e:58:f3:84:cd:79:75:2c:eb:e3:02:55:4c:c5:98:
         f9:35:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:46 2024 by rpki-client on console-ams.rpki-client.org