Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File:                     6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier:          SjRX+vT0pMXoHuSobg0oyHpAJdlGbMeVV/u8YqhVdDs=
Subject key identifier:   CD:4E:C1:D8:22:D8:90:D4:37:39:09:DC:F3:A5:F4:13:6E:D9:D0:A0
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer:       /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial:       01936669CE9939ADB18E02EFC13963CEF0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number:          1376
Signing time:             Tue 26 Nov 2024 03:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:30 +0000
Files and hashes:         1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: b3plxdbToelaJpOpdFvFYyOeuBF47qU9bhLEwYQAHro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:ce:99:39:ad:b1:8e:02:ef:c1:39:63:ce:f0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
        Validity
            Not Before: Nov 26 03:00:30 2024 GMT
            Not After : Nov 27 03:00:30 2024 GMT
        Subject: CN=cd4ec1d822d890d4373909dcf3a5f4136ed9d0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:38:c6:e5:73:63:f7:b6:88:77:6f:10:f5:
                    0e:5f:3e:b9:6e:66:c9:e6:73:93:6a:cb:eb:2a:0a:
                    29:84:9d:b7:a1:3f:2b:ae:63:11:66:e5:4f:14:b6:
                    c0:51:2b:67:5f:71:29:3a:4e:12:2e:fa:17:02:ca:
                    7b:18:89:c9:a8:48:27:fa:d0:cb:62:ba:39:fe:0a:
                    80:48:ca:c9:7a:ac:10:bb:14:f1:92:0b:f4:bf:58:
                    06:91:cb:fe:f7:94:90:63:07:8f:06:54:92:cc:54:
                    12:65:de:70:8c:67:7c:18:67:c5:1d:b8:93:c6:95:
                    e0:02:5d:0b:e7:3b:3e:80:76:61:4b:42:31:37:b6:
                    72:8a:58:a1:cb:19:7a:22:71:76:cd:d3:87:ff:32:
                    a2:6e:9e:ba:bb:ff:f4:c6:d3:7c:95:f3:30:da:47:
                    e6:8f:3d:73:29:f5:3e:0e:05:e7:0c:12:18:b2:45:
                    a5:3a:44:93:40:6c:b9:c2:04:dc:dd:e4:ce:0a:b7:
                    37:fc:80:f9:e0:39:b6:09:da:56:ae:f8:5a:63:9e:
                    77:5b:e3:70:f2:4b:32:42:30:c0:8a:08:56:f8:7d:
                    b3:c1:dc:9f:28:7d:da:17:de:69:78:55:05:95:39:
                    53:37:71:08:e3:06:c2:21:37:92:98:b5:8f:42:46:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:C1:D8:22:D8:90:D4:37:39:09:DC:F3:A5:F4:13:6E:D9:D0:A0
            X509v3 Authority Key Identifier:
                keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ff:13:d3:31:02:2e:31:60:06:73:b3:25:e3:96:e3:ac:2b:
         6e:28:b4:90:89:7e:7a:f1:e1:5d:48:af:f7:7f:10:29:85:cc:
         88:68:6f:7f:51:69:0d:ad:15:df:de:62:90:1e:44:72:95:fb:
         e6:27:10:93:3d:47:06:4c:6c:4f:2d:a9:45:19:31:9e:e8:83:
         f3:e5:a2:e3:4f:f9:13:90:e8:1b:c7:46:c4:62:b0:08:10:9d:
         63:dc:10:f6:a5:2a:6f:49:9e:15:f4:2f:0a:cb:57:57:eb:aa:
         c5:a7:f9:17:20:e4:47:e5:1c:3e:4c:af:a3:52:98:90:bd:34:
         ed:1f:ed:94:0e:8e:16:b7:14:69:f2:c7:40:c4:81:02:ec:ba:
         32:f2:47:a4:c4:70:53:bc:ad:59:72:f6:31:36:82:ed:81:df:
         66:15:d5:11:4a:5c:1e:e2:c5:fd:2b:71:1e:be:86:79:8e:d0:
         ab:a3:4f:8b:b4:7f:e7:0f:eb:8b:3b:a6:e8:43:10:fb:cb:ba:
         14:6a:ce:9a:b4:6f:04:3e:dd:41:68:28:04:f0:13:66:c1:6d:
         f9:20:ce:91:4b:94:81:29:4a:1c:ea:e9:10:b4:9e:b8:7e:1e:
         f0:9c:3b:6f:b9:91:6a:e7:0c:c2:f1:de:41:6a:cd:8b:63:b7:
         cf:7c:02:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNmac6ZOa2xjgLvwTljzvCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh
NTc3Y2MwHhcNMjQxMTI2MDMwMDMwWhcNMjQxMTI3MDMwMDMwWjAzMTEwLwYDVQQD
EyhjZDRlYzFkODIyZDg5MGQ0MzczOTA5ZGNmM2E1ZjQxMzZlZDlkMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXw4xuVzY/e2iHdvEPUOXz65bmbJ
5nOTasvrKgophJ23oT8rrmMRZuVPFLbAUStnX3EpOk4SLvoXAsp7GInJqEgn+tDL
Yro5/gqASMrJeqwQuxTxkgv0v1gGkcv+95SQYwePBlSSzFQSZd5wjGd8GGfFHbiT
xpXgAl0L5zs+gHZhS0IxN7Zyilihyxl6InF2zdOH/zKibp66u//0xtN8lfMw2kfm
jz1zKfU+DgXnDBIYskWlOkSTQGy5wgTc3eTOCrc3/ID54Dm2CdpWrvhaY553W+Nw
8ksyQjDAighW+H2zwdyfKH3aF95peFUFlTlTN3EI4wbCITeSmLWPQkb26QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1Owdgi2JDUNzkJ3POl9BNu2dCgMB8GA1UdIwQY
MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt
NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk
LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgP8T0zEC
LjFgBnOzJeOW46wrbii0kIl+evHhXUiv938QKYXMiGhvf1FpDa0V395ikB5EcpX7
5icQkz1HBkxsTy2pRRkxnuiD8+Wi40/5E5DoG8dGxGKwCBCdY9wQ9qUqb0meFfQv
CstXV+uqxaf5FyDkR+UcPkyvo1KYkL007R/tlA6OFrcUafLHQMSBAuy6MvJHpMRw
U7ytWXL2MTaC7YHfZhXVEUpcHuLF/StxHr6GeY7Qq6NPi7R/5w/rizum6EMQ+8u6
FGrOmrRvBD7dQWgoBPATZsFt+SDOkUuUgSlKHOrpELSeuH4e8Jw7b7mRaucMwvHe
QWrNi2O3z3wCBQ==
-----END CERTIFICATE-----