Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File:                     s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier:          aNES0+XpmbMWYx7u026xORqTpZlrUL+kGzqI9OL23YE=
Subject key identifier:   A0:45:11:20:3B:3F:09:1A:D9:82:2C:6A:D5:91:96:F3:38:7B:62:F4
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer:       /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial:       0193688EDF1BD75315D6CB89213B4B001AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number:          07C7
Signing time:             Tue 26 Nov 2024 13:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:13 +0000
Files and hashes:         1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: uHq2TXkY4EsV2UqavEMwLb02PfuweQ8qIWEjpMxGnXY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8e:df:1b:d7:53:15:d6:cb:89:21:3b:4b:00:1a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
        Validity
            Not Before: Nov 26 13:00:13 2024 GMT
            Not After : Nov 27 13:00:13 2024 GMT
        Subject: CN=a04511203b3f091ad9822c6ad59196f3387b62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:05:87:16:20:74:c2:b4:5e:6b:5c:33:0d:
                    22:be:cc:e5:a2:9b:6c:c7:de:6c:24:b2:b2:03:54:
                    3a:fb:c4:32:08:e3:f5:09:19:ea:b1:a0:ae:b3:f6:
                    e4:41:82:5f:57:1c:12:a7:e1:53:11:54:7d:ff:53:
                    67:7d:cf:06:be:e3:9f:0f:ae:09:95:45:9c:59:fd:
                    dc:f3:c9:0c:84:9a:90:c3:b2:1a:da:1d:ce:49:84:
                    4f:18:f4:16:61:33:95:da:69:b3:51:2a:e3:ec:fc:
                    4b:77:be:28:8a:4f:d2:9a:b8:f1:c7:8b:74:ac:6d:
                    26:d9:e7:87:be:90:0f:b7:32:32:6d:82:c0:c8:ec:
                    28:e0:ca:fe:4f:8c:32:41:bd:8a:e1:f9:70:8a:59:
                    dd:7f:a2:4a:36:da:eb:25:9b:85:e9:14:96:2e:9b:
                    3a:e9:b3:d7:68:41:7a:60:81:9b:86:28:12:de:df:
                    d6:f2:2b:28:06:43:00:5d:89:ff:29:b2:1b:e9:d8:
                    04:85:3a:7d:b9:dc:fd:87:ff:c3:53:e5:06:b8:0c:
                    ac:c7:02:1c:f9:6c:56:01:02:6d:e0:59:6f:e0:4d:
                    b0:95:ce:dc:0e:bf:57:9d:69:14:92:2e:57:be:6c:
                    60:74:81:8b:f3:c3:b7:bc:e5:32:c9:77:42:d3:8a:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:45:11:20:3B:3F:09:1A:D9:82:2C:6A:D5:91:96:F3:38:7B:62:F4
            X509v3 Authority Key Identifier:
                keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:79:79:4d:80:23:4b:57:d1:46:dd:14:b9:e0:cb:15:a1:8b:
         d7:35:a0:10:d5:cf:c4:2c:11:05:4f:04:94:6b:04:7c:33:3f:
         bf:d4:67:10:32:d5:8b:63:6e:66:ef:3f:6d:e1:68:b5:76:0d:
         80:c5:12:42:c9:a1:90:50:50:5f:8c:34:9a:7a:fc:51:95:7a:
         6e:05:28:fc:d3:a7:05:d4:f5:4a:d7:e0:60:f4:8e:5d:60:5c:
         97:00:a9:e4:1d:b9:6d:63:26:08:7c:92:4b:6f:1d:28:8f:5a:
         0a:6b:ed:c1:04:0f:44:c5:55:29:7f:77:69:16:48:97:a2:6d:
         cd:93:9f:79:2f:d8:fb:23:c7:95:f4:9e:23:ba:b5:c0:89:e8:
         26:47:64:ef:d5:d2:32:cd:bd:26:80:5f:33:57:72:40:ea:77:
         8a:ef:5f:df:0c:8e:be:01:cd:7b:67:65:1c:a1:f8:53:b6:c8:
         da:8b:99:84:21:9b:4c:46:7f:d0:6c:1e:89:57:5a:a3:b1:c6:
         95:dc:0e:3f:94:36:bb:01:e1:62:27:58:84:f3:eb:60:84:bb:
         bf:0b:99:fd:7c:6b:03:f9:98:36:81:68:73:be:07:40:2d:d8:
         c9:b1:87:f6:de:53:4c:52:00:37:b4:a2:32:c7:88:75:9e:ff:
         de:03:bb:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNojt8b11MV1suJITtLABrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGYzMzUwOGQ5MjUzMTM0OWRmM2QwYmU5YjU0NWZjOGUx
ZjVlNmIwHhcNMjQxMTI2MTMwMDEzWhcNMjQxMTI3MTMwMDEzWjAzMTEwLwYDVQQD
EyhhMDQ1MTEyMDNiM2YwOTFhZDk4MjJjNmFkNTkxOTZmMzM4N2I2MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtQFhxYgdMK0XmtcMw0ivszlopts
x95sJLKyA1Q6+8QyCOP1CRnqsaCus/bkQYJfVxwSp+FTEVR9/1Nnfc8GvuOfD64J
lUWcWf3c88kMhJqQw7Ia2h3OSYRPGPQWYTOV2mmzUSrj7PxLd74oik/Smrjxx4t0
rG0m2eeHvpAPtzIybYLAyOwo4Mr+T4wyQb2K4flwilndf6JKNtrrJZuF6RSWLps6
6bPXaEF6YIGbhigS3t/W8isoBkMAXYn/KbIb6dgEhTp9udz9h//DU+UGuAysxwIc
+WxWAQJt4Flv4E2wlc7cDr9XnWkUki5XvmxgdIGL88O3vOUyyXdC04rHgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBFESA7Pwka2YIsatWRlvM4e2L0MB8GA1UdIwQY
MBaAFLOPM1CNklMTSd89C+m1RfyOH15rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMjYyYjAtNDI2YS00MGQxLTlmYzYt
OWRkYmI5N2RlNjFiLzEvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMjYyYjAtNDI2YS00MGQxLTlmYzYtOWRkYmI5N2RlNjFi
LzEvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnl5TYAj
S1fRRt0UueDLFaGL1zWgENXPxCwRBU8ElGsEfDM/v9RnEDLVi2NuZu8/beFotXYN
gMUSQsmhkFBQX4w0mnr8UZV6bgUo/NOnBdT1StfgYPSOXWBclwCp5B25bWMmCHyS
S28dKI9aCmvtwQQPRMVVKX93aRZIl6JtzZOfeS/Y+yPHlfSeI7q1wInoJkdk79XS
Ms29JoBfM1dyQOp3iu9f3wyOvgHNe2dlHKH4U7bI2ouZhCGbTEZ/0GweiVdao7HG
ldwOP5Q2uwHhYidYhPPrYIS7vwuZ/XxrA/mYNoFoc74HQC3YybGH9t5TTFIAN7Si
MseIdZ7/3gO7Sg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 19:58:14 2024 by rpki-client on console-ams.rpki-client.org