Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File:                     1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier:          gAH2LaCiOO3odLKvqPo1XLd/MM8neX+Neioq2CX/dE4=
Subject key identifier:   7B:75:2E:2E:B3:31:AE:5C:C0:AC:69:57:24:EC:56:5F:68:F3:B4:9B
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer:       /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial:       019369D9BB79D06BE67AE1EFD5F14F7C0CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number:          093E
Signing time:             Tue 26 Nov 2024 19:01:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:37 +0000
Files and hashes:         1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: 4Tq+AMTGMrcxCh+IwwwjJeKoSjMUoccZequPAyhWrsI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:bb:79:d0:6b:e6:7a:e1:ef:d5:f1:4f:7c:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
        Validity
            Not Before: Nov 26 19:01:37 2024 GMT
            Not After : Nov 27 19:01:37 2024 GMT
        Subject: CN=7b752e2eb331ae5cc0ac695724ec565f68f3b49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b6:38:2b:30:a8:c5:52:28:ac:f0:fc:cd:a5:
                    1c:40:ee:24:62:0e:fc:d9:2e:f7:53:65:fb:cb:54:
                    c2:9a:c2:ea:0b:d7:dc:a1:84:25:c2:b2:aa:88:a1:
                    8b:67:bb:fa:76:c3:35:24:ec:e1:17:69:a9:32:1d:
                    b0:50:41:1b:84:8a:84:83:82:6e:0d:25:b5:f8:83:
                    89:ab:75:75:f8:8d:2e:67:e1:13:cc:23:46:88:a7:
                    94:bf:94:cb:64:a2:26:d0:58:d2:8b:98:2b:98:09:
                    72:de:a2:98:56:21:4b:17:70:f4:e7:4a:fe:89:be:
                    79:3a:06:2a:da:86:3e:1c:71:5b:23:6d:43:ed:93:
                    f6:68:23:71:aa:3a:4e:52:b3:38:05:ea:f7:71:87:
                    89:b1:82:21:53:a7:3e:3e:a7:6d:e8:98:1d:79:e8:
                    52:57:1d:e7:76:4a:c7:fa:83:20:90:f3:d9:fd:08:
                    44:4d:92:f0:46:74:cc:e9:ee:f1:30:7c:36:63:f8:
                    42:f0:37:dd:a5:6d:7a:a0:6e:54:7e:e9:b2:e1:0b:
                    0d:c0:85:bb:9b:6a:82:f3:a5:be:e4:98:13:d6:dc:
                    9f:ff:83:e0:8c:84:69:61:6f:6f:80:75:72:8e:82:
                    0e:94:3b:35:40:6c:50:b3:2c:54:95:fd:bf:59:a1:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:75:2E:2E:B3:31:AE:5C:C0:AC:69:57:24:EC:56:5F:68:F3:B4:9B
            X509v3 Authority Key Identifier:
                keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:0c:c8:d6:8e:fc:8c:7a:ba:33:bd:05:2e:9c:92:1c:6c:
         1f:9d:8e:38:4d:75:6d:92:12:52:16:83:9c:ba:e5:4a:50:bc:
         56:c5:82:a8:24:7d:c0:d8:ef:14:bb:a1:20:ce:a2:90:f3:d6:
         35:e4:7f:7c:63:9b:a7:05:b4:b0:5a:a5:84:38:ac:dd:1c:f4:
         80:82:c6:b6:be:84:aa:78:07:6f:da:8c:6d:4f:71:ea:6c:2d:
         8d:6f:ee:6c:da:79:6e:65:2c:b4:1e:77:e6:6d:f8:6f:8e:e3:
         35:30:3d:4e:dd:7f:15:e0:d5:73:34:17:be:c7:19:32:3b:d3:
         66:92:77:6b:47:cb:0b:b7:f1:38:78:a5:ea:28:62:d0:32:26:
         a7:04:ad:f2:80:f0:1f:54:34:63:36:c1:12:6a:88:29:09:4e:
         69:9f:5a:e2:ca:6a:a1:83:c4:12:25:98:6e:42:6e:e6:3d:21:
         b9:12:68:13:fe:50:a0:28:19:e7:5c:6e:78:8f:4d:90:e0:5e:
         b0:ab:42:15:c6:34:4a:01:82:e0:db:b8:fd:b2:64:5e:ea:d1:
         de:18:91:95:b8:0c:34:7b:6e:be:ea:4c:b0:98:4e:d1:ec:dc:
         08:ea:1b:87:a6:95:8f:38:40:48:1d:68:2f:3b:fc:90:e6:32:
         e9:58:71:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNp2bt50GvmeuHv1fFPfAzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNjdjNGUxMzg3MzEzYzAzNDQ1MzhkZWZkMmNjZmEwMzRl
N2MzMGMwHhcNMjQxMTI2MTkwMTM3WhcNMjQxMTI3MTkwMTM3WjAzMTEwLwYDVQQD
Eyg3Yjc1MmUyZWIzMzFhZTVjYzBhYzY5NTcyNGVjNTY1ZjY4ZjNiNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rY4KzCoxVIorPD8zaUcQO4kYg78
2S73U2X7y1TCmsLqC9fcoYQlwrKqiKGLZ7v6dsM1JOzhF2mpMh2wUEEbhIqEg4Ju
DSW1+IOJq3V1+I0uZ+ETzCNGiKeUv5TLZKIm0FjSi5grmAly3qKYViFLF3D050r+
ib55OgYq2oY+HHFbI21D7ZP2aCNxqjpOUrM4Ber3cYeJsYIhU6c+Pqdt6JgdeehS
Vx3ndkrH+oMgkPPZ/QhETZLwRnTM6e7xMHw2Y/hC8DfdpW16oG5Ufumy4QsNwIW7
m2qC86W+5JgT1tyf/4PgjIRpYW9vgHVyjoIOlDs1QGxQsyxUlf2/WaHg5wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHt1Li6zMa5cwKxpVyTsVl9o87SbMB8GA1UdIwQY
MBaAFPtnxOE4cxPANEU43v0sz6A058MMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yZkU0VGh6RThBMFJUamVfU3pQb0RUbnd3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDNiMzYzLWQ2NGEtNDUwNy1hNmZk
LWU1MGNlNTM2N2U3Yi8xLzEtMmZFNFRoekU4QTBSVGplX1N6UG9EVG53d3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFjLzQzYjM2My1kNjRhLTQ1MDctYTZmZC1lNTBjZTUzNjdl
N2IvMS8xLTJmRTRUaHpFOEEwUlRqZV9TelBvRFRud3d3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwwM
yNaO/Ix6ujO9BS6ckhxsH52OOE11bZISUhaDnLrlSlC8VsWCqCR9wNjvFLuhIM6i
kPPWNeR/fGObpwW0sFqlhDis3Rz0gILGtr6EqngHb9qMbU9x6mwtjW/ubNp5bmUs
tB535m34b47jNTA9Tt1/FeDVczQXvscZMjvTZpJ3a0fLC7fxOHil6ihi0DImpwSt
8oDwH1Q0YzbBEmqIKQlOaZ9a4spqoYPEEiWYbkJu5j0huRJoE/5QoCgZ51xueI9N
kOBesKtCFcY0SgGC4Nu4/bJkXurR3hiRlbgMNHtuvupMsJhO0ezcCOobh6aVjzhA
SB1oLzv8kOYy6Vhx4A==
-----END CERTIFICATE-----