Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File:                     t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier:          L7hVGkpsBmfbOj72KJ950C4lWDRYeq4p0/oCd6kd358=
Subject key identifier:   17:E4:F0:54:77:D1:1B:15:08:D6:B6:21:F7:D1:64:4A:A7:1A:2C:97
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer:       /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial:       019356BF857506C10EE529DCDBD011FBA4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number:          0273
Signing time:             Sat 23 Nov 2024 02:00:12 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:12 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:12 +0000
Files and hashes:         1: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: oO1OAAvIj1pdrdA+nuiFtpIirZwAHVG0Ff++RbXL4nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:85:75:06:c1:0e:e5:29:dc:db:d0:11:fb:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
        Validity
            Not Before: Nov 23 02:00:12 2024 GMT
            Not After : Nov 24 02:00:12 2024 GMT
        Subject: CN=17e4f05477d11b1508d6b621f7d1644aa71a2c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:35:0b:b8:01:a7:e7:47:39:35:cb:8a:13:
                    d1:22:27:d1:af:9c:5b:98:b9:92:df:9e:e3:60:64:
                    88:75:40:0b:ae:70:7e:b0:5c:f3:d2:28:5d:a0:17:
                    7f:f8:b1:82:3f:3b:5a:60:38:8e:0e:a1:73:96:ec:
                    51:27:7f:b6:d1:7a:e5:5e:18:47:64:8c:0c:f0:be:
                    93:9c:9c:7d:76:5e:64:0c:c3:a1:c4:a7:f0:83:cb:
                    06:2c:3c:d3:99:55:cb:7b:ba:bc:72:3a:0f:17:41:
                    00:55:ff:06:9e:e7:06:81:68:43:97:d7:43:38:00:
                    12:6f:17:5b:3b:df:2d:f1:73:0f:ea:ab:76:a6:02:
                    4f:c2:c1:1f:26:61:69:c7:e2:af:49:f7:a8:d0:ca:
                    6c:ef:5e:91:da:76:b7:96:a2:59:af:b9:29:4a:85:
                    98:39:51:77:02:1e:6a:27:e4:e4:be:b5:48:d6:39:
                    52:c4:4c:82:49:0c:5c:1a:79:79:c5:65:ee:fd:7e:
                    c3:c8:f5:64:fd:99:59:af:8b:ca:5c:c0:96:f0:32:
                    07:5c:7e:e0:3a:b8:4c:cd:93:da:f0:b0:31:04:06:
                    26:bd:5c:a0:1c:30:45:09:55:43:ee:a8:6d:39:ad:
                    c8:a4:55:c2:90:ba:95:e2:6e:52:83:8c:17:01:e7:
                    66:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E4:F0:54:77:D1:1B:15:08:D6:B6:21:F7:D1:64:4A:A7:1A:2C:97
            X509v3 Authority Key Identifier:
                keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:ce:f4:87:13:4e:2f:33:41:88:53:de:e0:4c:4a:fe:70:
         2b:4f:49:b0:eb:a1:21:79:86:98:b6:b4:a7:e7:51:98:1c:fc:
         e5:e7:c1:2d:f0:cc:ce:51:12:cf:ff:88:4a:e6:32:cf:ee:08:
         ce:07:43:20:7d:d7:9c:aa:14:b5:32:36:dc:e4:5b:8a:be:c7:
         b1:07:3b:ea:38:05:aa:44:d2:2a:1a:b9:23:54:04:05:df:92:
         96:29:f2:a1:de:48:64:44:38:98:5c:08:16:6a:17:fe:56:f4:
         28:c3:4b:14:bc:45:3d:d3:3b:6d:1d:0c:62:b0:93:2e:2b:08:
         48:e0:b2:fc:2a:8f:ac:1f:87:f2:cf:23:25:e9:19:85:17:ef:
         05:ad:cb:b7:bb:95:f4:78:34:99:32:f5:7b:57:49:e2:01:d4:
         56:dd:d3:98:9d:38:82:cd:55:39:d7:70:ba:06:e3:34:d9:c4:
         38:99:f4:ca:b4:9c:a2:a2:a5:97:42:f3:d2:92:a2:20:38:95:
         c1:ae:79:7b:2b:29:91:7f:6f:27:e3:69:33:5e:6e:c4:b3:6b:
         88:bd:e7:97:a1:fd:55:ae:bd:c5:9c:ce:50:32:f4:b7:01:fa:
         cd:1c:d5:b2:fc:bc:14:14:ce:8c:72:6a:f4:16:c8:ba:aa:1c:
         5c:d4:5f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv4V1BsEO5Snc29AR+6TEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMwYzgzMjIxMThjODFjYTg0YmFiMWI3ZTA4OTBhOWM4
NWU5ZjcwHhcNMjQxMTIzMDIwMDEyWhcNMjQxMTI0MDIwMDEyWjAzMTEwLwYDVQQD
EygxN2U0ZjA1NDc3ZDExYjE1MDhkNmI2MjFmN2QxNjQ0YWE3MWEyYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgQ1C7gBp+dHOTXLihPRIifRr5xb
mLmS357jYGSIdUALrnB+sFzz0ihdoBd/+LGCPztaYDiODqFzluxRJ3+20XrlXhhH
ZIwM8L6TnJx9dl5kDMOhxKfwg8sGLDzTmVXLe7q8cjoPF0EAVf8GnucGgWhDl9dD
OAASbxdbO98t8XMP6qt2pgJPwsEfJmFpx+KvSfeo0Mps716R2na3lqJZr7kpSoWY
OVF3Ah5qJ+TkvrVI1jlSxEyCSQxcGnl5xWXu/X7DyPVk/ZlZr4vKXMCW8DIHXH7g
OrhMzZPa8LAxBAYmvVygHDBFCVVD7qhtOa3IpFXCkLqV4m5Sg4wXAedmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfk8FR30RsVCNa2IffRZEqnGiyXMB8GA1UdIwQY
MBaAFLdzDIMiEYyByoS6sbfgiQqchen3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAt
MWMwZmQ4OWRiY2I0LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMzhmZDctOWU2OC00MjZiLWExMDAtMWMwZmQ4OWRiY2I0
LzEvdDNNTWd5SVJqSUhLaExxeHQtQ0pDcHlGNmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGvO9IcT
Ti8zQYhT3uBMSv5wK09JsOuhIXmGmLa0p+dRmBz85efBLfDMzlESz/+ISuYyz+4I
zgdDIH3XnKoUtTI23ORbir7HsQc76jgFqkTSKhq5I1QEBd+Slinyod5IZEQ4mFwI
FmoX/lb0KMNLFLxFPdM7bR0MYrCTLisISOCy/CqPrB+H8s8jJekZhRfvBa3Lt7uV
9Hg0mTL1e1dJ4gHUVt3TmJ04gs1VOddwugbjNNnEOJn0yrScoqKll0Lz0pKiIDiV
wa55eyspkX9vJ+NpM15uxLNriL3nl6H9Va69xZzOUDL0twH6zRzVsvy8FBTOjHJq
9BbIuqocXNRfMw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:49 2024 by rpki-client on console-ams.rpki-client.org