Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File:                     Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier:          uH2ulDnwos4J/DiEQ124FMk91PidfrXShAiMeD2jhzQ=
Subject key identifier:   1B:33:76:B5:30:18:0B:7F:8D:18:E5:5D:26:35:97:B3:BC:08:7B:0F
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer:       /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial:       01935878BCE57CB7AC99A4C83528744975FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number:          0815
Signing time:             Sat 23 Nov 2024 10:02:07 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:07 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:07 +0000
Files and hashes:         1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: tt40wsSFqEsmjs3Qsc28TctSDFWPsrMBXCqHUo21mdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:bc:e5:7c:b7:ac:99:a4:c8:35:28:74:49:75:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
        Validity
            Not Before: Nov 23 10:02:07 2024 GMT
            Not After : Nov 24 10:02:07 2024 GMT
        Subject: CN=1b3376b530180b7f8d18e55d263597b3bc087b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:30:67:ea:2e:5c:a7:fc:48:76:c6:9a:b1:
                    8a:30:69:ff:b2:8e:09:56:a8:f7:2a:1a:e6:f5:0e:
                    8c:9a:f3:f6:51:a5:f1:fa:2c:fb:90:f6:6c:16:5b:
                    ab:7e:fe:73:ff:01:36:0a:85:63:ae:4c:36:3d:7c:
                    d2:9c:8d:69:09:ac:75:0e:f6:84:46:75:68:a2:d6:
                    a2:9b:6d:c3:25:b9:64:37:dc:d5:90:87:59:a8:ab:
                    15:dc:32:0a:3e:70:fd:be:03:53:eb:83:01:bf:c0:
                    ee:90:0a:da:2c:7b:2a:b7:06:e1:23:9d:58:ce:56:
                    6b:1f:c9:f6:9f:00:00:2f:45:10:2a:b5:82:04:0c:
                    9e:3a:80:38:49:8e:b2:f7:8a:e6:ac:6e:b7:c6:01:
                    d1:44:39:81:69:1e:6b:9f:a4:07:2c:e2:d5:6b:37:
                    7f:ea:2f:2d:ce:63:72:ed:e0:94:48:0f:41:58:94:
                    b5:c9:f4:b4:bb:3a:8d:25:28:a3:57:51:64:30:d5:
                    b6:20:6e:bb:66:64:7a:39:2c:93:f7:91:8b:30:4a:
                    06:21:af:04:a3:ce:67:44:7c:ce:83:4e:cd:62:84:
                    e5:28:61:ed:e1:78:8e:74:87:28:6b:bb:4c:8b:d3:
                    c9:93:4e:57:1e:35:e5:b9:b6:15:03:4a:e0:f9:ad:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:33:76:B5:30:18:0B:7F:8D:18:E5:5D:26:35:97:B3:BC:08:7B:0F
            X509v3 Authority Key Identifier:
                keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b7:15:96:71:3f:9c:0a:5e:96:9b:e0:81:e3:f8:aa:b5:20:
         a3:7f:0b:c1:c2:48:9e:70:1a:4f:17:5b:8f:68:3b:10:13:e8:
         cd:73:17:a0:05:11:1a:e6:ea:30:4f:38:d8:3e:91:a4:9f:30:
         26:8d:35:b6:92:f1:2b:24:af:1d:75:fa:21:a1:83:fc:38:9d:
         62:03:15:25:83:25:9f:df:17:36:65:38:db:de:22:7b:a7:4c:
         36:a8:71:bb:0c:10:c3:fc:49:15:db:d7:54:db:a4:52:2b:c5:
         e6:54:f6:a1:d7:02:0d:6f:de:86:76:b2:a7:75:e2:84:83:23:
         c8:ce:51:0d:e3:0e:29:e8:d5:ed:c7:80:61:6b:e9:28:38:aa:
         c3:95:df:c8:47:15:03:5a:73:3e:9a:55:38:fd:92:24:e0:34:
         58:1c:4f:64:e1:47:f6:bc:92:ce:a5:1d:28:c5:b2:b3:c7:84:
         3d:83:7a:b9:26:82:80:e5:be:80:9d:4f:f4:dd:d7:79:5c:53:
         87:4b:e0:b2:3a:97:ef:44:22:39:bc:e3:49:f8:a4:1a:82:8b:
         cc:43:28:22:8e:f1:36:b0:b1:08:1a:af:19:a6:b7:67:c3:9f:
         fc:b9:e0:77:e1:4a:f1:f1:00:3e:a7:7c:94:d5:35:e1:05:29:
         df:87:af:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeLzlfLesmaTINSh0SXX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTg5ZGFmNjRmYWRiZGQ1MzQ4ZjdkZDIyNmVjYzlmZWZj
MDQ1MTUwHhcNMjQxMTIzMTAwMjA3WhcNMjQxMTI0MTAwMjA3WjAzMTEwLwYDVQQD
EygxYjMzNzZiNTMwMTgwYjdmOGQxOGU1NWQyNjM1OTdiM2JjMDg3YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxswZ+ouXKf8SHbGmrGKMGn/so4J
Vqj3Khrm9Q6MmvP2UaXx+iz7kPZsFlurfv5z/wE2CoVjrkw2PXzSnI1pCax1DvaE
RnVootaim23DJblkN9zVkIdZqKsV3DIKPnD9vgNT64MBv8DukAraLHsqtwbhI51Y
zlZrH8n2nwAAL0UQKrWCBAyeOoA4SY6y94rmrG63xgHRRDmBaR5rn6QHLOLVazd/
6i8tzmNy7eCUSA9BWJS1yfS0uzqNJSijV1FkMNW2IG67ZmR6OSyT95GLMEoGIa8E
o85nRHzOg07NYoTlKGHt4XiOdIcoa7tMi9PJk05XHjXlubYVA0rg+a2OyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBszdrUwGAt/jRjlXSY1l7O8CHsPMB8GA1UdIwQY
MBaAFF6Yna9k+tvdU0j33SJuzJ/vwEUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEt
ODhiMjM4ZTViYjgwLzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEtODhiMjM4ZTViYjgw
LzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7cVlnE/
nApelpvggeP4qrUgo38LwcJInnAaTxdbj2g7EBPozXMXoAURGubqME842D6RpJ8w
Jo01tpLxKySvHXX6IaGD/DidYgMVJYMln98XNmU4294ie6dMNqhxuwwQw/xJFdvX
VNukUivF5lT2odcCDW/ehnayp3XihIMjyM5RDeMOKejV7ceAYWvpKDiqw5XfyEcV
A1pzPppVOP2SJOA0WBxPZOFH9rySzqUdKMWys8eEPYN6uSaCgOW+gJ1P9N3XeVxT
h0vgsjqX70QiObzjSfikGoKLzEMoIo7xNrCxCBqvGaa3Z8Of/Lngd+FK8fEAPqd8
lNU14QUp34evww==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:33 2024 by rpki-client on console-fra.rpki-client.org