Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File:                     ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier:          kLLjwk2GJ1kVYvDyCyP/2M4lK3RHXZDASsrEqHbxSpA=
Subject key identifier:   71:84:9C:72:C4:BF:D9:F8:94:CF:DB:F2:60:AE:E9:18:29:BF:1C:8C
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer:       /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial:       019237DD0B93E8B98872301DAA3E310E4BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number:          032B
Signing time:             Sat 28 Sep 2024 09:01:26 +0000
Manifest this update:     Sat 28 Sep 2024 09:01:26 +0000
Manifest next update:     Sun 29 Sep 2024 09:01:26 +0000
Files and hashes:         1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: hNJ6nEeHnReYW4bpY7b9fFHAkPYU0TUwNyUOlEBfiTE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:dd:0b:93:e8:b9:88:72:30:1d:aa:3e:31:0e:4b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
        Validity
            Not Before: Sep 28 09:01:26 2024 GMT
            Not After : Sep 29 09:01:26 2024 GMT
        Subject: CN=71849c72c4bfd9f894cfdbf260aee91829bf1c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:27:e9:37:73:8e:cd:d0:4b:bd:70:14:f5:
                    e0:59:75:06:d2:17:53:4f:59:c6:32:96:44:09:37:
                    6b:9f:06:af:97:bf:7c:5e:f4:d9:b9:56:64:3b:80:
                    af:5b:e6:0b:3c:76:bf:a0:f9:93:27:b5:58:17:44:
                    67:79:03:33:67:b1:81:6e:af:24:b3:d9:69:1a:c6:
                    08:fb:51:f1:02:04:64:27:d8:f1:27:ea:3e:67:8e:
                    84:78:59:ea:f2:11:a6:3c:33:ef:e1:35:5c:9b:c6:
                    0c:7e:13:77:44:c2:1b:8c:9e:29:00:d4:dc:f1:d8:
                    4c:cc:f7:e7:fd:65:46:e2:34:fc:d3:ef:50:bd:b8:
                    45:3c:e4:d4:23:5c:a6:c4:2d:33:32:87:ac:0a:f5:
                    07:ca:82:af:b0:88:ab:36:f2:48:b7:e0:0d:0f:a4:
                    0b:25:29:dd:a6:e0:19:ad:42:09:d2:66:b4:4a:d6:
                    41:df:98:bb:f8:0d:28:1d:b2:2e:25:86:a9:52:14:
                    95:03:bd:c6:ae:35:cf:6f:5e:ac:2f:b7:27:d9:28:
                    b7:9c:9b:8c:3a:aa:a8:47:73:a8:de:e3:1e:9e:45:
                    2b:03:06:3b:cc:a3:db:ad:5c:13:ec:d9:92:dc:86:
                    48:e4:39:3d:7e:ec:c8:c3:c5:5f:12:cd:be:69:ca:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:84:9C:72:C4:BF:D9:F8:94:CF:DB:F2:60:AE:E9:18:29:BF:1C:8C
            X509v3 Authority Key Identifier:
                keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:78:6e:59:30:e6:59:93:5c:82:bf:c0:57:b4:b7:99:47:
         a5:32:fc:39:da:ce:aa:b6:2c:95:f9:2f:30:18:e2:2b:f5:8b:
         0e:f5:a1:d2:8c:13:73:c4:63:a6:5e:5a:00:fe:9d:3e:93:33:
         a1:20:54:2e:05:18:62:2c:c5:fe:06:00:b7:34:21:7f:33:00:
         c4:62:24:ce:78:98:e4:bf:c6:12:7e:0b:28:94:9b:72:d1:d5:
         9c:d7:99:8e:17:6f:72:38:9a:b4:9c:e1:1b:47:b3:eb:d7:f5:
         5d:10:cd:8f:dd:0a:33:3b:ca:1e:2d:b4:d9:a2:cd:0a:61:9c:
         7b:ee:94:e6:e4:cb:c3:f8:86:17:62:b9:6b:c4:88:b5:de:c8:
         1f:da:a0:58:53:34:2a:cb:4b:c6:f7:0b:94:aa:e7:8a:af:37:
         f7:48:77:8f:c7:c7:da:2f:cb:3f:5a:b1:14:5c:4c:01:ca:71:
         a1:90:1e:3a:49:48:a7:6f:02:f6:8f:94:dd:ab:7a:a9:50:92:
         4f:21:3b:ef:e1:f4:b5:65:e0:30:1e:e2:3d:92:42:d7:75:9d:
         fc:4f:69:c8:18:da:86:70:8f:a2:0b:95:74:42:20:c3:40:c1:
         e5:7c:4f:11:5f:0a:e4:65:11:fe:80:f7:cb:29:66:1d:e2:3d:
         7b:56:ff:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI33QuT6LmIcjAdqj4xDkvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNTBiM2I3Y2Q0Y2UzYjE0NWI3NTNiZjcxNzlhOTU1Y2Nk
MjkyNWQwHhcNMjQwOTI4MDkwMTI2WhcNMjQwOTI5MDkwMTI2WjAzMTEwLwYDVQQD
Eyg3MTg0OWM3MmM0YmZkOWY4OTRjZmRiZjI2MGFlZTkxODI5YmYxYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs0n6Tdzjs3QS71wFPXgWXUG0hdT
T1nGMpZECTdrnwavl798XvTZuVZkO4CvW+YLPHa/oPmTJ7VYF0RneQMzZ7GBbq8k
s9lpGsYI+1HxAgRkJ9jxJ+o+Z46EeFnq8hGmPDPv4TVcm8YMfhN3RMIbjJ4pANTc
8dhMzPfn/WVG4jT80+9QvbhFPOTUI1ymxC0zMoesCvUHyoKvsIirNvJIt+AND6QL
JSndpuAZrUIJ0ma0StZB35i7+A0oHbIuJYapUhSVA73GrjXPb16sL7cn2Si3nJuM
OqqoR3Oo3uMenkUrAwY7zKPbrVwT7NmS3IZI5Dk9fuzIw8VfEs2+acpvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGEnHLEv9n4lM/b8mCu6RgpvxyMMB8GA1UdIwQY
MBaAFApQs7fNTOOxRbdTv3F5qVXM0pJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2Mt
MTcwZWQyMzBkNWY4LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2MtMTcwZWQyMzBkNWY4
LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVa14blkw
5lmTXIK/wFe0t5lHpTL8OdrOqrYslfkvMBjiK/WLDvWh0owTc8Rjpl5aAP6dPpMz
oSBULgUYYizF/gYAtzQhfzMAxGIkzniY5L/GEn4LKJSbctHVnNeZjhdvcjiatJzh
G0ez69f1XRDNj90KMzvKHi202aLNCmGce+6U5uTLw/iGF2K5a8SItd7IH9qgWFM0
KstLxvcLlKrniq8390h3j8fH2i/LP1qxFFxMAcpxoZAeOklIp28C9o+U3at6qVCS
TyE77+H0tWXgMB7iPZJC13Wd/E9pyBjahnCPoguVdEIgw0DB5XxPEV8K5GUR/oD3
yylmHeI9e1b/FA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:56:26 2024 by rpki-client on console-fra.rpki-client.org