Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
File:                     fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json)
Hash identifier:          6h0rdftcoEoHZKE9bAOvRru5PIB0kusB3aqi2bHCr+g=
Subject key identifier:   04:91:AE:02:1D:B4:7C:B6:0B:EC:4F:CC:C5:50:D6:9C:21:58:2C:A3
Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
Certificate issuer:       /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Certificate serial:       01936D108EF629B5293479CB46EBA7247F3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
Manifest number:          0719
Signing time:             Wed 27 Nov 2024 10:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 10:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 10:00:21 +0000
Files and hashes:         1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: 4fkh+8zdUvbjUGNGIAFd3v2RVxKeKgPczI0CIfsErDI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 08:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6d:10:8e:f6:29:b5:29:34:79:cb:46:eb:a7:24:7f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
        Validity
            Not Before: Nov 27 10:00:21 2024 GMT
            Not After : Nov 28 10:00:21 2024 GMT
        Subject: CN=0491ae021db47cb60bec4fccc550d69c21582ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:90:38:be:21:59:d6:8b:fd:7a:bb:0b:44:
                    79:2d:79:c3:93:9c:49:cb:5f:95:48:99:7e:71:47:
                    72:41:ec:12:21:88:0f:e4:3c:15:19:6d:80:36:79:
                    5f:49:1e:97:ad:d9:fa:3d:22:17:88:46:6c:e3:23:
                    24:05:13:d4:c4:69:46:73:f0:07:8a:19:67:a4:17:
                    95:05:59:ae:10:36:35:0b:89:e5:ff:f3:79:9d:4e:
                    1d:79:a3:f8:6e:8b:cb:44:84:9a:e6:b0:2a:30:60:
                    43:d7:96:24:62:96:3b:57:ea:a1:61:fd:da:4c:50:
                    a4:9e:a5:21:82:a7:c8:91:85:a3:86:65:eb:1e:32:
                    b7:f1:2b:34:5a:02:1a:bb:ce:57:e6:26:4a:ef:ba:
                    b2:ad:0b:27:7c:f4:f4:16:be:4d:2c:2d:07:e3:31:
                    9b:c5:02:ca:d0:1b:ed:c2:25:9f:a9:2e:e4:14:24:
                    c6:43:c1:87:34:45:17:30:fc:0f:8c:ca:05:9e:2b:
                    09:02:b0:11:f0:b3:ef:ad:55:a0:e7:e5:40:fa:42:
                    d3:25:54:da:4b:53:03:1e:a8:5f:a3:88:a9:de:3c:
                    88:0c:5a:89:4c:e9:b9:f1:26:3c:df:36:55:5b:a0:
                    fc:d8:3b:a0:33:45:1d:11:75:db:f8:fd:e7:59:c7:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:91:AE:02:1D:B4:7C:B6:0B:EC:4F:CC:C5:50:D6:9C:21:58:2C:A3
            X509v3 Authority Key Identifier:
                keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:f1:24:cc:70:8b:5e:5a:24:aa:03:8b:52:ab:0d:da:20:
         c0:db:74:0d:06:4b:96:b1:8a:bd:a7:c9:24:33:85:50:af:6c:
         bd:ce:0d:50:28:7f:69:79:48:6f:24:4c:77:ac:bd:94:dd:e9:
         da:c5:c0:84:1a:03:3a:76:94:ee:03:46:75:45:0b:54:a4:4a:
         e8:8a:b8:c1:5f:7b:af:f7:bd:24:67:d4:c5:b4:a6:d0:fd:85:
         d7:21:76:05:f3:be:74:19:a8:b2:eb:4e:f4:6e:3c:3d:f3:68:
         d8:dc:6a:f3:77:47:ab:2d:0e:23:da:e6:47:d6:2e:58:e6:61:
         d3:53:6c:f0:94:35:4c:1a:00:8d:68:f7:7b:2f:1e:77:97:3c:
         73:28:99:fc:ce:51:8a:01:ce:99:3c:f0:12:df:c9:1e:bb:2d:
         bd:fd:9e:61:39:70:05:71:c9:9d:41:9c:b0:0e:1c:99:bd:48:
         60:cf:3e:da:0f:23:7d:fd:c2:c0:3b:a0:f5:81:bd:ac:cd:a5:
         ce:30:60:6c:1c:dc:38:12:cf:37:f0:cd:a3:22:a2:e1:f3:cd:
         90:b5:09:c4:4b:80:7d:77:ca:7b:9a:7c:5b:6d:db:92:4c:a2:
         ba:82:fb:a1:9b:d7:d5:16:d2:f2:6b:8f:3b:44:27:a3:4f:0c:
         d2:5b:74:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNtEI72KbUpNHnLRuunJH88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZmM1OWNlMTM2ZTNlOTNhODZkZTU1ZjA1ZDQ5YTU5ZTE1
Y2JiYmYwHhcNMjQxMTI3MTAwMDIxWhcNMjQxMTI4MTAwMDIxWjAzMTEwLwYDVQQD
EygwNDkxYWUwMjFkYjQ3Y2I2MGJlYzRmY2NjNTUwZDY5YzIxNTgyY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZqQOL4hWdaL/Xq7C0R5LXnDk5xJ
y1+VSJl+cUdyQewSIYgP5DwVGW2ANnlfSR6Xrdn6PSIXiEZs4yMkBRPUxGlGc/AH
ihlnpBeVBVmuEDY1C4nl//N5nU4deaP4bovLRISa5rAqMGBD15YkYpY7V+qhYf3a
TFCknqUhgqfIkYWjhmXrHjK38Ss0WgIau85X5iZK77qyrQsnfPT0Fr5NLC0H4zGb
xQLK0BvtwiWfqS7kFCTGQ8GHNEUXMPwPjMoFnisJArAR8LPvrVWg5+VA+kLTJVTa
S1MDHqhfo4ip3jyIDFqJTOm58SY83zZVW6D82DugM0UdEXXb+P3nWcefAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASRrgIdtHy2C+xPzMVQ1pwhWCyjMB8GA1UdIwQY
MBaAFHz8Wc4Tbj6TqG3lXwXUmlnhXLu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2Mt
ODA4OTVmODhmNWQ1LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2MtODA4OTVmODhmNWQ1
LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMDxJMxw
i15aJKoDi1KrDdogwNt0DQZLlrGKvafJJDOFUK9svc4NUCh/aXlIbyRMd6y9lN3p
2sXAhBoDOnaU7gNGdUULVKRK6Iq4wV97r/e9JGfUxbSm0P2F1yF2BfO+dBmosutO
9G48PfNo2Nxq83dHqy0OI9rmR9YuWOZh01Ns8JQ1TBoAjWj3ey8ed5c8cyiZ/M5R
igHOmTzwEt/JHrstvf2eYTlwBXHJnUGcsA4cmb1IYM8+2g8jff3CwDug9YG9rM2l
zjBgbBzcOBLPN/DNoyKi4fPNkLUJxEuAfXfKe5p8W23bkkyiuoL7oZvX1RbS8muP
O0Qno08M0lt0qA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:32 2024 by rpki-client on console-fra.rpki-client.org