Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File:                     8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier:          9GlrIxK5THvqOhjYZGOln3pT9AohtJ7m9/b6Nu3pbus=
Subject key identifier:   57:DC:96:AE:46:83:C9:A8:0A:2D:1B:FD:E1:E4:A3:1D:60:C6:63:AC
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer:       /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial:       0193568A4B2A833C2383C21642C6B50FFD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number:          10AB
Signing time:             Sat 23 Nov 2024 01:02:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:03 +0000
Files and hashes:         1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: FUIN+FnJClhwyGXjnk679trwGBKVqbPE7xa25WRKIm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:4b:2a:83:3c:23:83:c2:16:42:c6:b5:0f:fd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
        Validity
            Not Before: Nov 23 01:02:03 2024 GMT
            Not After : Nov 24 01:02:03 2024 GMT
        Subject: CN=57dc96ae4683c9a80a2d1bfde1e4a31d60c663ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:0d:3c:61:cb:84:6e:1d:af:30:75:7a:44:
                    37:e6:de:bf:66:5e:74:fb:8e:72:c4:e4:5b:0c:e8:
                    83:c1:2f:e4:b5:e1:7e:dd:d8:29:d4:56:10:45:ff:
                    10:8f:af:a1:ba:65:3e:3d:cf:3f:3f:62:03:31:7a:
                    d3:a3:12:4c:a9:63:27:65:d4:e0:b7:f3:03:66:a0:
                    dd:24:3f:41:12:b2:0d:e3:e1:87:f4:c1:aa:5d:e9:
                    3f:44:3c:db:8c:01:21:4c:ff:7b:06:22:37:0c:f4:
                    7d:fb:a2:75:bd:84:7f:e0:4d:41:b3:cc:5f:f1:28:
                    6a:f2:bc:5d:8c:83:12:75:01:d8:33:4d:cd:7b:14:
                    14:74:58:b4:a0:c9:fd:f7:14:02:77:2b:d9:fa:d9:
                    6a:51:05:0b:40:37:54:a6:bf:03:1c:17:fe:f8:e0:
                    70:e2:a2:28:10:88:49:08:a3:5a:cb:58:65:fa:50:
                    0b:7c:b9:99:64:bf:0a:fc:5b:04:f3:c0:cb:ba:55:
                    0c:7f:00:95:56:c2:5a:db:11:41:f1:2c:67:98:3d:
                    ec:d9:ee:47:7e:87:fb:96:ee:81:7b:22:19:fe:c2:
                    cd:72:99:f0:7e:0e:f8:01:36:18:9b:e9:7e:41:34:
                    b4:95:50:22:30:03:37:ab:2c:cc:30:da:bd:8c:24:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:96:AE:46:83:C9:A8:0A:2D:1B:FD:E1:E4:A3:1D:60:C6:63:AC
            X509v3 Authority Key Identifier:
                keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:45:43:5a:af:67:e9:5c:8e:94:96:90:c5:c4:f9:23:1e:b0:
         35:24:59:a7:e0:40:10:c7:8e:04:5c:8b:88:2b:ab:03:83:43:
         04:29:f2:c5:a3:a3:aa:1f:f7:d2:8d:12:95:dc:ea:64:bf:d5:
         46:85:66:ae:3a:29:45:a6:22:63:07:5a:f4:0b:e3:6d:89:c4:
         51:4f:d3:b8:16:e1:cb:1b:62:94:14:a3:e5:a0:45:64:fc:94:
         c5:ec:c2:e3:99:51:98:ef:03:8a:9a:09:25:ea:90:1f:45:c8:
         97:01:eb:e2:14:74:ad:7f:cd:41:9b:4f:93:a6:b7:43:71:b5:
         00:ef:3a:cc:7c:f6:0b:ee:ec:70:85:25:32:55:d0:f5:a7:79:
         1c:ad:47:98:2d:a4:c7:0a:a1:86:86:fb:70:44:71:c4:68:3b:
         5c:c2:d5:19:fe:06:d0:4c:28:84:bd:bf:c7:20:ca:40:65:40:
         a2:de:02:2a:8f:06:10:b9:ca:7c:f8:8d:c4:d4:2e:ed:75:7c:
         b7:80:e3:96:33:07:11:00:23:a9:ff:68:cf:9a:39:e9:90:15:
         3d:1e:7c:f2:ae:e4:42:31:65:02:c3:15:83:63:8a:3c:b3:67:
         fa:02:6f:ee:65:2c:74:5b:84:ba:06:a6:08:f3:0e:39:d8:7c:
         2b:9f:c1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiksqgzwjg8IWQsa1D/06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTBjNjdmZjg1OWY1NTVhZjg5MjE5Mzg4ODdjNjA4NTI2
OWE0MDIwHhcNMjQxMTIzMDEwMjAzWhcNMjQxMTI0MDEwMjAzWjAzMTEwLwYDVQQD
Eyg1N2RjOTZhZTQ2ODNjOWE4MGEyZDFiZmRlMWU0YTMxZDYwYzY2M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnisNPGHLhG4drzB1ekQ35t6/Zl50
+45yxORbDOiDwS/kteF+3dgp1FYQRf8Qj6+humU+Pc8/P2IDMXrToxJMqWMnZdTg
t/MDZqDdJD9BErIN4+GH9MGqXek/RDzbjAEhTP97BiI3DPR9+6J1vYR/4E1Bs8xf
8Shq8rxdjIMSdQHYM03NexQUdFi0oMn99xQCdyvZ+tlqUQULQDdUpr8DHBf++OBw
4qIoEIhJCKNay1hl+lALfLmZZL8K/FsE88DLulUMfwCVVsJa2xFB8SxnmD3s2e5H
fof7lu6BeyIZ/sLNcpnwfg74ATYYm+l+QTS0lVAiMAM3qyzMMNq9jCQGbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfclq5Gg8moCi0b/eHkox1gxmOsMB8GA1UdIwQY
MBaAFPGgxn/4WfVVr4khk4iHxghSaaQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEt
YjQxOTk5ZTVjZjU0LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZGY4ZWQtMWE3My00ZWQyLTgxOGEtYjQxOTk5ZTVjZjU0
LzEvOGFER2ZfaFo5Vld2aVNHVGlJZkdDRkpwcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEVDWq9n
6VyOlJaQxcT5Ix6wNSRZp+BAEMeOBFyLiCurA4NDBCnyxaOjqh/30o0SldzqZL/V
RoVmrjopRaYiYwda9AvjbYnEUU/TuBbhyxtilBSj5aBFZPyUxezC45lRmO8DipoJ
JeqQH0XIlwHr4hR0rX/NQZtPk6a3Q3G1AO86zHz2C+7scIUlMlXQ9ad5HK1HmC2k
xwqhhob7cERxxGg7XMLVGf4G0EwohL2/xyDKQGVAot4CKo8GELnKfPiNxNQu7XV8
t4DjljMHEQAjqf9oz5o56ZAVPR588q7kQjFlAsMVg2OKPLNn+gJv7mUsdFuEugam
CPMOOdh8K5/BPw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:00 2024 by rpki-client on console-fra.rpki-client.org