Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
File:                     n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json)
Hash identifier:          IkHk0lgEl+Pl96tstwEASwsp0G0CMHHl19T4RHNUwVo=
Subject key identifier:   CC:7A:51:62:6C:20:11:B9:D3:88:FF:2E:89:A5:70:19:97:2F:E1:A7
Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4
Certificate issuer:       /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
Certificate serial:       0194BB2958B07F97C55B62AAF283035AE4F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
Manifest number:          01C1
Signing time:             Fri 31 Jan 2025 07:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:36 +0000
Files and hashes:         1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: vsbzxn2I7omGpkzGRuZKmuzCQten59vXcqLldMWn+n0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:58:b0:7f:97:c5:5b:62:aa:f2:83:03:5a:e4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4
        Validity
            Not Before: Jan 31 07:00:36 2025 GMT
            Not After : Feb  1 07:00:36 2025 GMT
        Subject: CN=cc7a51626c2011b9d388ff2e89a57019972fe1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:93:a8:9a:96:87:cc:7f:8e:29:65:f5:b5:
                    48:bc:ac:22:5d:68:99:cc:c8:a2:9c:f4:54:a9:0a:
                    d0:09:72:42:95:3b:c1:5c:73:c3:0e:93:c1:d1:fc:
                    56:7e:42:c6:a9:a7:90:77:5c:cf:28:35:c6:2b:76:
                    ba:ea:a4:ef:64:c9:23:2b:21:d8:8b:47:15:07:77:
                    cc:0c:65:8e:53:02:0f:82:b1:7b:1e:75:02:dd:eb:
                    e5:2a:39:f2:a7:59:fb:bf:84:28:14:92:d6:74:73:
                    98:15:55:e2:26:71:30:2f:ed:ec:91:0a:eb:b4:fc:
                    ad:c8:51:cb:42:e9:99:4e:ed:78:35:43:83:e8:75:
                    bd:19:33:2f:52:da:e0:a1:6d:22:48:34:e9:75:8c:
                    15:ec:4c:0d:46:70:8f:62:6e:c1:82:59:6b:65:49:
                    e5:63:8c:4b:3f:69:13:82:fd:c1:91:d6:1d:76:c0:
                    b8:13:94:2c:93:98:02:1d:4c:e8:8f:4d:68:f4:b4:
                    47:45:01:b7:54:cb:96:15:1f:8c:dc:ce:a3:27:d6:
                    91:ea:3a:35:b5:00:8d:e0:71:de:e6:62:19:b3:c4:
                    71:3d:43:0f:75:3d:01:c3:2e:73:f8:31:d3:b1:52:
                    0e:dc:22:60:b1:2e:01:09:8b:26:d7:09:9a:14:73:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:51:62:6C:20:11:B9:D3:88:FF:2E:89:A5:70:19:97:2F:E1:A7
            X509v3 Authority Key Identifier:
                keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:54:4a:c8:6d:0e:f9:b5:fc:01:eb:ea:08:1b:a8:3f:d1:
         4b:a6:3a:0e:b1:41:62:74:a5:d9:09:23:3c:4b:7b:27:4b:0a:
         b9:ef:7d:cf:08:ea:52:b6:88:a9:a7:1d:3b:5b:7d:e6:53:4b:
         8d:d1:0a:97:14:fd:54:98:6a:1c:50:60:ec:9f:03:87:86:1a:
         02:d5:0b:f1:e7:5d:f8:a9:47:d5:3b:cc:9f:ab:e8:4d:b2:d2:
         a4:ea:1f:53:a5:1e:fe:63:ee:01:36:5c:95:c7:7c:b0:0d:67:
         ce:b6:c8:98:0a:08:0c:6b:23:96:dc:fd:d3:31:3e:1e:1a:ff:
         99:7f:65:f4:86:a6:b2:41:6c:3a:c3:64:9d:07:3f:9e:b2:d7:
         a1:59:a1:ff:f8:6c:42:8f:a7:a9:55:50:9b:9e:ec:c7:34:73:
         1d:14:70:f2:f3:5e:f5:82:bc:68:5e:b5:53:60:92:70:8e:c7:
         ec:48:d5:51:c1:b4:dc:97:62:4e:82:d0:38:9f:c5:9e:cf:0b:
         bc:a6:e9:a1:14:18:1f:b3:68:5a:0c:c6:f9:a2:90:11:32:11:
         b3:ad:ac:f3:a1:21:ca:71:54:6e:b9:e9:24:a2:c8:94:74:d1:
         74:fb:25:ee:bb:b6:81:4c:68:6e:8e:b3:dc:3a:9b:73:5f:9d:
         e4:c0:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:39 2025 by rpki-client on console-fra.rpki-client.org