Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File:                     CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier:          ipZHheZfDzwDBk96dmRqXQdePNo/8jJbNpUIZgcHiWE=
Subject key identifier:   2A:5A:F3:3E:A6:62:01:F3:72:30:A4:4E:94:33:52:5A:08:DF:91:96
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer:       /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial:       0193579BE9EA945494331F9F4C66291037E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number:          0110
Signing time:             Sat 23 Nov 2024 06:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:55 +0000
Files and hashes:         1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: ZqwbDuQeakC6fO29Hxq5Yyg7FqJ4473wMbR/v2ADmWg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:e9:ea:94:54:94:33:1f:9f:4c:66:29:10:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
        Validity
            Not Before: Nov 23 06:00:55 2024 GMT
            Not After : Nov 24 06:00:55 2024 GMT
        Subject: CN=2a5af33ea66201f37230a44e9433525a08df9196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:39:2c:5a:b5:81:b0:6e:da:1d:b0:8a:6d:
                    84:01:06:7a:88:08:2d:25:64:93:b7:30:75:fb:9d:
                    d1:1d:19:e7:80:45:cd:21:c8:97:e1:24:77:67:69:
                    dc:29:65:41:10:ab:f0:af:6d:14:cf:96:db:c5:9d:
                    30:24:10:aa:36:6f:c9:46:18:da:6b:b4:27:55:c9:
                    34:de:51:15:7d:d2:dd:dd:b2:22:dd:fb:8b:0c:82:
                    68:bb:c1:4f:ff:bd:80:dd:66:14:b4:fa:37:48:54:
                    f1:8f:0d:e5:90:fc:d4:bb:8e:b1:72:2f:b8:89:48:
                    51:19:13:4b:e6:a1:8a:74:0d:d4:59:83:74:24:38:
                    7b:d4:a3:e5:cd:d9:f3:96:ca:fe:f2:6e:d6:d7:10:
                    b1:c5:1b:81:6d:87:18:ce:01:28:4e:07:67:a1:60:
                    da:e9:e7:82:e1:33:00:ff:33:f4:fc:18:23:83:64:
                    2e:c8:cb:e6:1a:91:92:d3:b8:e9:cc:bf:cf:8a:5c:
                    5f:84:66:84:16:93:8b:78:bc:89:af:89:c3:73:68:
                    08:1d:dc:4f:6d:87:5e:77:36:e2:b6:ef:49:89:5d:
                    d8:d2:da:40:dc:f3:70:f5:8f:91:12:96:e0:e4:42:
                    a4:4a:ce:26:52:e3:2e:09:6e:c9:0c:77:ae:39:35:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5A:F3:3E:A6:62:01:F3:72:30:A4:4E:94:33:52:5A:08:DF:91:96
            X509v3 Authority Key Identifier:
                keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:53:61:2a:91:1a:3c:43:4d:ff:96:9a:d7:78:b3:ba:15:f6:
         18:2f:45:1a:f0:ed:0e:31:37:c1:92:4d:ab:7c:63:28:df:12:
         60:a3:73:f7:ac:a2:b2:93:14:0f:0c:51:8c:5b:a6:8e:64:22:
         e7:25:fa:06:50:bb:e4:c3:5c:c5:ba:e4:d6:51:20:dd:63:3d:
         bf:39:28:96:a7:2f:41:4d:02:e3:c4:54:31:81:12:3f:e6:9e:
         26:bd:15:d3:22:44:48:99:3c:d9:96:44:c6:93:59:64:c1:d9:
         6d:33:5c:90:36:5f:40:fe:f3:b4:6b:25:ed:cc:ef:db:4d:07:
         af:46:eb:35:d2:70:9a:da:cc:c7:16:55:6f:0b:ec:83:d6:71:
         28:9f:a1:78:79:d9:5a:b5:dc:21:0f:8c:59:00:7c:47:e3:8a:
         ca:47:ca:5e:b8:78:79:34:8c:0f:0e:f7:db:c3:67:40:7b:fc:
         b3:84:67:47:15:60:ce:b1:ad:da:62:3a:f2:f8:31:88:83:c1:
         15:70:cb:8d:37:ce:55:6a:d7:90:8d:0c:87:1c:07:bf:3b:16:
         67:df:d5:40:82:a1:fa:05:85:41:98:4e:9b:f4:34:10:ba:4b:
         38:0f:58:3e:e2:ef:64:17:8e:18:fa:66:59:3f:61:06:45:e8:
         ba:d4:b8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm+nqlFSUMx+fTGYpEDfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzYyYjViZDg3MTgyZTgwNzNjYjZjYzBkNzlmZWVlN2Jk
Yjk5MGQwHhcNMjQxMTIzMDYwMDU1WhcNMjQxMTI0MDYwMDU1WjAzMTEwLwYDVQQD
EygyYTVhZjMzZWE2NjIwMWYzNzIzMGE0NGU5NDMzNTI1YTA4ZGY5MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZw5LFq1gbBu2h2wim2EAQZ6iAgt
JWSTtzB1+53RHRnngEXNIciX4SR3Z2ncKWVBEKvwr20Uz5bbxZ0wJBCqNm/JRhja
a7QnVck03lEVfdLd3bIi3fuLDIJou8FP/72A3WYUtPo3SFTxjw3lkPzUu46xci+4
iUhRGRNL5qGKdA3UWYN0JDh71KPlzdnzlsr+8m7W1xCxxRuBbYcYzgEoTgdnoWDa
6eeC4TMA/zP0/Bgjg2QuyMvmGpGS07jpzL/PilxfhGaEFpOLeLyJr4nDc2gIHdxP
bYdedzbitu9JiV3Y0tpA3PNw9Y+REpbg5EKkSs4mUuMuCW7JDHeuOTVKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpa8z6mYgHzcjCkTpQzUloI35GWMB8GA1UdIwQY
MBaAFAnGK1vYcYLoBzy2zA15/u5725kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEt
YWRhZTU1MWU1YTNiLzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEtYWRhZTU1MWU1YTNi
LzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1NhKpEa
PENN/5aa13izuhX2GC9FGvDtDjE3wZJNq3xjKN8SYKNz96yispMUDwxRjFumjmQi
5yX6BlC75MNcxbrk1lEg3WM9vzkolqcvQU0C48RUMYESP+aeJr0V0yJESJk82ZZE
xpNZZMHZbTNckDZfQP7ztGsl7czv200Hr0brNdJwmtrMxxZVbwvsg9ZxKJ+heHnZ
WrXcIQ+MWQB8R+OKykfKXrh4eTSMDw7328NnQHv8s4RnRxVgzrGt2mI68vgxiIPB
FXDLjTfOVWrXkI0MhxwHvzsWZ9/VQIKh+gWFQZhOm/Q0ELpLOA9YPuLvZBeOGPpm
WT9hBkXoutS4Ng==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:43 2024 by rpki-client on console-fra.rpki-client.org