
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File:                     8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier:          eoMa6jLGe9IS/95WxpzRMcd5cNhNyEwvu6cgLVbZ14c=
Subject key identifier:   4B:74:D7:05:99:58:B6:3C:79:25:C6:39:D9:A7:DB:5E:19:5F:13:6B
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer:       /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial:       0194BA8422B6F5D9E7ACD3C792A73B75A0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number:          0A96
Signing time:             Fri 31 Jan 2025 04:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 04:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 04:00:09 +0000
Files and hashes:         1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: 1yoZiyunoOnKaQJrtX7M+twoFV/6bI/jgsvE9TOFkPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 04:00:09 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:84:22:b6:f5:d9:e7:ac:d3:c7:92:a7:3b:75:a0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
        Validity
            Not Before: Jan 31 04:00:09 2025 GMT
            Not After : Feb  1 04:00:09 2025 GMT
        Subject: CN=4b74d7059958b63c7925c639d9a7db5e195f136b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:a7:7d:db:a6:e0:9e:40:81:cb:32:35:b3:
                    26:eb:84:47:b1:c7:37:0e:65:50:d6:d9:ed:92:f7:
                    1c:21:43:24:00:40:ab:a1:88:fd:22:bd:46:59:77:
                    06:a4:5e:97:5d:d6:f8:d2:06:7c:90:ef:25:26:72:
                    23:f9:e8:bf:b0:a1:61:de:b0:7a:60:8f:c7:c7:66:
                    aa:b6:97:9c:05:35:49:12:3e:4d:95:98:80:67:b9:
                    56:2e:96:44:b4:ac:fe:d5:a6:30:ff:ef:5f:ae:fb:
                    17:f7:13:6a:57:40:37:34:bc:ff:a7:2a:8b:90:26:
                    05:c1:f9:e7:97:3a:7e:7e:b6:79:02:be:af:cc:a0:
                    30:2a:df:d6:94:3d:6b:2c:f1:4f:85:a1:9d:c8:f9:
                    ce:16:f8:8e:6a:07:54:03:c8:44:72:c1:15:67:53:
                    78:38:51:8c:66:6a:06:b9:ef:15:f3:db:c6:f3:c2:
                    a0:54:ca:cf:5c:ec:3d:be:42:ad:d5:1f:88:fe:61:
                    2f:1b:d6:14:60:cd:53:21:35:24:55:2a:7a:ba:70:
                    48:ef:90:53:fa:1b:e5:7d:58:cc:76:97:98:19:a4:
                    24:a5:81:67:1d:a8:b3:9e:4f:9e:53:58:dd:3f:88:
                    92:2f:ec:3f:27:0c:c3:c1:f2:7c:62:08:da:5d:8f:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:74:D7:05:99:58:B6:3C:79:25:C6:39:D9:A7:DB:5E:19:5F:13:6B
            X509v3 Authority Key Identifier:
                keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         cc:a7:2d:16:de:d6:4e:03:2a:1e:4a:be:6d:56:4f:61:ae:9b:
         2d:fd:dd:cb:d5:cd:23:98:ae:9c:c4:4d:dd:b1:33:0c:81:bc:
         24:31:ca:64:ab:f6:e0:ab:93:b7:00:b9:3b:e6:fa:71:44:21:
         2c:47:27:2d:51:9e:9d:11:3b:2d:19:b8:03:61:ea:ba:12:5e:
         fe:6b:f6:13:c1:a9:0a:f7:1d:7d:ac:44:51:7c:c5:22:e0:35:
         7f:ba:61:60:53:2d:51:56:67:bb:3c:f2:59:a2:84:fe:0f:7b:
         f7:50:17:ac:6e:3b:1e:7b:dc:d8:fd:d9:bf:9b:be:f2:fb:7a:
         64:b2:8d:66:c8:4f:0a:21:36:cb:e0:27:4a:45:4b:64:32:0a:
         44:5c:35:b5:d4:78:68:36:c7:22:59:69:cc:40:a8:d5:aa:6d:
         c1:42:5d:b7:c9:e5:a4:f7:ba:78:46:0b:dd:d2:dd:31:aa:5e:
         e2:78:88:db:26:06:89:2d:aa:26:54:9f:21:be:56:59:0d:2b:
         15:f4:6c:cd:2a:1a:33:29:f7:9a:86:30:d8:6f:01:d2:c0:40:
         48:58:74:61:9f:9f:c3:c2:10:cf:74:b2:f8:bb:bb:7d:76:91:
         81:8c:e9:b8:bb:90:71:56:45:39:d7:da:56:df:7c:c2:99:54:
         59:3d:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:03 2025 by rpki-client on console-fra.rpki-client.org