Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          3B+OC93dX6j+iuBO51rLMs8t230jzXV9KxjOHRR2Vqs=
Subject key identifier:   27:F4:42:94:69:05:1B:42:6B:A8:99:6B:B1:F2:E0:0B:F2:4F:30:5F
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       019355084727BD6A57BA7802CFF90188A2D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          11F1
Signing time:             Fri 22 Nov 2024 18:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:26 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: oskWwHTH2iq6v1HPrgCyYn8NroxAetubPTWPlG3RYBw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:47:27:bd:6a:57:ba:78:02:cf:f9:01:88:a2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: Nov 22 18:00:26 2024 GMT
            Not After : Nov 23 18:00:26 2024 GMT
        Subject: CN=27f4429469051b426ba8996bb1f2e00bf24f305f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:8b:ad:ab:cd:9a:0c:fc:7c:cc:8a:64:eb:
                    a6:eb:f9:32:47:53:da:72:8c:6c:11:33:be:d2:20:
                    e1:b2:12:02:63:b3:55:27:3b:6a:7f:5f:71:b8:1f:
                    ee:9e:23:6e:89:55:11:c5:61:34:2c:e7:27:48:b2:
                    00:03:ad:4d:68:59:45:d6:5e:52:7f:a0:cc:0b:74:
                    e4:13:65:4d:17:62:36:05:a6:1e:c3:54:9a:9a:58:
                    b3:99:23:c3:04:8f:03:96:99:3e:74:7c:eb:5c:18:
                    64:13:03:af:e3:1a:3e:7d:43:b1:5a:2f:d4:4c:cb:
                    7c:42:0e:f5:81:5d:17:aa:de:52:1d:13:cf:59:b5:
                    1c:8f:4d:04:c7:f0:28:5e:dd:14:bb:db:8b:42:60:
                    4b:a6:22:e3:77:d2:66:3f:32:2a:01:69:84:30:39:
                    01:6e:a8:62:af:22:52:94:61:32:5e:e3:6b:09:49:
                    32:ea:60:a4:a1:3b:f4:f8:72:89:22:b7:44:4b:1d:
                    38:c7:5d:47:ac:70:f3:38:5a:be:f1:91:28:37:7b:
                    ac:d9:36:d0:cc:fc:8a:83:c6:76:23:f4:c9:29:e6:
                    5a:38:51:56:b1:6d:6b:04:e7:b3:8c:2e:48:65:c5:
                    ea:ca:4b:4f:89:18:a6:78:bc:f3:ec:d7:49:e5:6c:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:42:94:69:05:1B:42:6B:A8:99:6B:B1:F2:E0:0B:F2:4F:30:5F
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:e7:cf:42:56:4b:d1:2a:bf:2b:6f:bb:a3:06:93:a5:94:
         00:46:aa:79:55:e9:d9:4f:0a:21:9d:a6:77:ba:84:58:dd:6e:
         68:8a:47:54:07:fe:a0:3a:84:ac:6c:a4:43:a6:bd:f8:38:34:
         94:10:55:c4:f8:ca:f1:7c:a4:f3:e4:07:d2:ce:d0:4e:41:86:
         85:3d:66:e8:74:b9:5b:8e:32:37:e9:ac:1c:20:d6:5e:32:27:
         32:a9:d9:36:81:73:9e:30:2e:9c:06:63:44:ff:b4:55:34:41:
         c3:57:a8:38:00:7e:7e:e3:30:cf:c3:89:8a:ae:db:90:f9:27:
         1f:34:05:76:60:d8:fa:72:98:d0:34:e9:ab:bc:38:1f:02:59:
         dd:d9:00:54:85:59:58:98:fc:b3:ad:cf:e2:ef:8e:2e:bc:4b:
         62:8d:e7:aa:f2:dc:f8:20:8d:ce:6e:76:0f:3f:32:ef:be:9c:
         cf:69:e0:b2:b8:1a:e9:8b:78:74:fd:fa:86:79:5a:c2:d0:c8:
         c2:98:b7:56:af:ee:0d:e3:00:95:9a:3a:8f:4c:5d:f5:00:76:
         02:8c:04:41:cc:16:be:0d:03:11:7d:33:c3:6c:42:bd:d2:dc:
         e5:ce:93:45:51:22:98:17:5e:04:ed:b3:d8:76:c5:d6:1e:96:
         1c:ac:0d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCEcnvWpXungCz/kBiKLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTE2Zjk5YzRlMzVmM2FlZGQ4MWIzNzkzOWRlOGMzYzRl
OTFjMWMwHhcNMjQxMTIyMTgwMDI2WhcNMjQxMTIzMTgwMDI2WjAzMTEwLwYDVQQD
EygyN2Y0NDI5NDY5MDUxYjQyNmJhODk5NmJiMWYyZTAwYmYyNGYzMDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7SLravNmgz8fMyKZOum6/kyR1Pa
coxsETO+0iDhshICY7NVJztqf19xuB/uniNuiVURxWE0LOcnSLIAA61NaFlF1l5S
f6DMC3TkE2VNF2I2BaYew1SamlizmSPDBI8Dlpk+dHzrXBhkEwOv4xo+fUOxWi/U
TMt8Qg71gV0Xqt5SHRPPWbUcj00Ex/AoXt0Uu9uLQmBLpiLjd9JmPzIqAWmEMDkB
bqhiryJSlGEyXuNrCUky6mCkoTv0+HKJIrdESx04x11HrHDzOFq+8ZEoN3us2TbQ
zPyKg8Z2I/TJKeZaOFFWsW1rBOezjC5IZcXqyktPiRimeLzz7NdJ5WywfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf0QpRpBRtCa6iZa7Hy4AvyTzBfMB8GA1UdIwQY
MBaAFJvhb5nE41867dgbN5Od6MPE6RwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5Nzct
MWJhODMwYTdjYzVjLzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5NzctMWJhODMwYTdjYzVj
LzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARc7nz0JW
S9Eqvytvu6MGk6WUAEaqeVXp2U8KIZ2md7qEWN1uaIpHVAf+oDqErGykQ6a9+Dg0
lBBVxPjK8Xyk8+QH0s7QTkGGhT1m6HS5W44yN+msHCDWXjInMqnZNoFznjAunAZj
RP+0VTRBw1eoOAB+fuMwz8OJiq7bkPknHzQFdmDY+nKY0DTpq7w4HwJZ3dkAVIVZ
WJj8s63P4u+OLrxLYo3nqvLc+CCNzm52Dz8y776cz2ngsrga6Yt4dP36hnlawtDI
wpi3Vq/uDeMAlZo6j0xd9QB2AowEQcwWvg0DEX0zw2xCvdLc5c6TRVEimBdeBO2z
2HbF1h6WHKwNiA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:45 2024 by rpki-client on console-fra.rpki-client.org