Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File:                     jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier:          67kbagGJEsbmRoQHVEuB4DitKnTzKS5pmLny+kZmW7A=
Subject key identifier:   8A:4A:83:87:54:6F:67:F6:52:4F:44:2E:69:DE:63:C3:98:41:3B:B6
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer:       /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial:       019369DAFCCACBE056EF471FC2D42E351E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number:          0B4F
Signing time:             Tue 26 Nov 2024 19:02:59 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:59 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:59 +0000
Files and hashes:         1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: 7qSetMK1lDjve8SY7VgXxwx2khbdrkedH5bx8UBD2I4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:fc:ca:cb:e0:56:ef:47:1f:c2:d4:2e:35:1e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
        Validity
            Not Before: Nov 26 19:02:59 2024 GMT
            Not After : Nov 27 19:02:59 2024 GMT
        Subject: CN=8a4a8387546f67f6524f442e69de63c398413bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:01:d4:2a:54:8c:7e:40:98:b5:10:f7:8e:
                    55:4c:cc:55:c4:10:9f:c2:78:b1:13:1c:ab:5c:81:
                    90:58:d3:bf:eb:60:bc:f4:03:0a:22:5d:f7:f4:ad:
                    c0:a2:56:f1:94:eb:15:0a:52:c5:97:2b:37:c7:4a:
                    6b:a3:9c:5f:9c:a7:1b:78:fd:ea:39:a1:e7:d1:a7:
                    a5:2b:6c:76:17:da:ce:df:5f:3e:b9:01:15:57:cc:
                    36:dd:0e:08:96:47:41:d4:1c:21:9e:8c:cd:89:68:
                    67:a2:e3:fd:3b:3d:13:e5:7f:bb:62:c5:65:98:ea:
                    bd:db:9e:ee:1f:5b:46:a5:e8:50:1f:f7:d3:44:1b:
                    1b:fa:e8:8c:9e:b3:f4:c0:e6:bd:40:d9:36:8a:47:
                    90:29:66:a8:d0:b9:a3:8d:38:d5:07:95:98:7d:09:
                    59:f1:68:87:9a:7f:7a:f0:32:33:d7:c8:a6:9e:e6:
                    6d:19:b4:00:6b:0b:20:a9:fb:a8:86:87:b1:da:7f:
                    f0:79:e0:39:18:80:1d:c3:a8:77:c9:12:b2:6d:e2:
                    fb:9a:55:e1:81:09:65:9b:75:04:68:d5:f4:b6:ac:
                    d3:24:fc:30:78:7c:29:c4:51:6e:0a:01:13:16:d2:
                    59:37:db:7b:76:8f:3d:fc:17:55:a0:9c:fe:07:52:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4A:83:87:54:6F:67:F6:52:4F:44:2E:69:DE:63:C3:98:41:3B:B6
            X509v3 Authority Key Identifier:
                keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:35:89:37:f8:63:0b:24:1c:a6:5b:71:92:dd:ab:f5:f4:6c:
         b9:9f:42:10:aa:66:95:22:3f:2c:3e:63:3c:78:5d:d9:50:63:
         28:4d:75:84:b1:6b:5c:ea:93:74:99:4f:68:8a:a7:a3:5f:e5:
         18:ef:00:be:04:22:13:a5:00:30:2a:06:d9:cd:ee:d9:25:f4:
         a4:15:c3:a7:e2:da:fd:8d:11:99:27:fe:c1:83:e0:89:fd:9a:
         a7:5e:ea:90:76:11:83:1c:e7:8a:19:86:52:4d:ca:c7:62:3e:
         89:36:4a:87:ef:b1:66:f0:43:26:1f:78:dd:86:ba:98:03:60:
         a1:2f:af:cb:2e:c3:84:49:af:b7:0a:a2:60:84:03:36:93:28:
         b2:54:64:3f:eb:c8:d2:e5:47:1b:1c:17:bd:1c:10:1b:6b:b8:
         0b:03:b6:c1:5b:3a:5f:78:cb:0e:b9:80:33:07:9b:89:37:0e:
         81:7c:a1:f3:9c:3f:d7:53:a6:97:c8:4e:a7:f5:50:20:ca:7e:
         11:d7:07:22:99:58:c4:08:d9:c2:b7:17:f5:12:2e:3f:a7:46:
         cc:c8:45:ac:1c:c7:99:85:cc:81:34:05:2a:62:49:40:10:ad:
         26:76:64:6c:2c:f1:77:2e:f7:9b:2c:3d:95:86:76:d4:60:37:
         39:1d:29:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2vzKy+BW70cfwtQuNR5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNmJkNzk5OWI5MTU3YWE0ZmRjNDcxNzQxNDU4MGQ0ZmNl
MjQwMzkwHhcNMjQxMTI2MTkwMjU5WhcNMjQxMTI3MTkwMjU5WjAzMTEwLwYDVQQD
Eyg4YTRhODM4NzU0NmY2N2Y2NTI0ZjQ0MmU2OWRlNjNjMzk4NDEzYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e4B1CpUjH5AmLUQ945VTMxVxBCf
wnixExyrXIGQWNO/62C89AMKIl339K3AolbxlOsVClLFlys3x0pro5xfnKcbeP3q
OaHn0aelK2x2F9rO318+uQEVV8w23Q4IlkdB1BwhnozNiWhnouP9Oz0T5X+7YsVl
mOq9257uH1tGpehQH/fTRBsb+uiMnrP0wOa9QNk2ikeQKWao0LmjjTjVB5WYfQlZ
8WiHmn968DIz18imnuZtGbQAawsgqfuohoex2n/weeA5GIAdw6h3yRKybeL7mlXh
gQllm3UEaNX0tqzTJPwweHwpxFFuCgETFtJZN9t7do89/BdVoJz+B1KM0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpKg4dUb2f2Uk9ELmneY8OYQTu2MB8GA1UdIwQY
MBaAFI1r15mbkVeqT9xHF0FFgNT84kA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQt
NjlmYTRmYjAyMWFmLzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQtNjlmYTRmYjAyMWFm
LzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzWJN/hj
CyQcpltxkt2r9fRsuZ9CEKpmlSI/LD5jPHhd2VBjKE11hLFrXOqTdJlPaIqno1/l
GO8AvgQiE6UAMCoG2c3u2SX0pBXDp+La/Y0RmSf+wYPgif2ap17qkHYRgxznihmG
Uk3Kx2I+iTZKh++xZvBDJh943Ya6mANgoS+vyy7DhEmvtwqiYIQDNpMoslRkP+vI
0uVHGxwXvRwQG2u4CwO2wVs6X3jLDrmAMwebiTcOgXyh85w/11Oml8hOp/VQIMp+
EdcHIplYxAjZwrcX9RIuP6dGzMhFrBzHmYXMgTQFKmJJQBCtJnZkbCzxdy73myw9
lYZ21GA3OR0pOA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:42 2024 by rpki-client on console-fra.rpki-client.org