Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
File:                     mK47fDdSIET2g56i65KSvq3Up3M.mft (raw, json)
Hash identifier:          6ZFZEE01WUz5TFvg4VtQYtnS5mDlwAA4IqTw6kum910=
Subject key identifier:   71:46:12:53:66:D8:85:90:37:E2:1D:AC:17:DB:31:CA:3E:5D:3E:AF
Authority key identifier: 98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
Certificate issuer:       /CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Certificate serial:       019367EAA6D846FD1403EDDBDED97076B0FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 10:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:51 +0000
Files and hashes:         1: mK47fDdSIET2g56i65KSvq3Up3M.crl (hash: UNO7mirjM5xdrjrKicpaoghKCmWT2GTpJfM/JTW3RA0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:a6:d8:46:fd:14:03:ed:db:de:d9:70:76:b0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
        Validity
            Not Before: Nov 26 10:00:51 2024 GMT
            Not After : Nov 27 10:00:51 2024 GMT
        Subject: CN=7146125366d8859037e21dac17db31ca3e5d3eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:a5:84:d8:28:9b:22:4f:f7:48:79:b1:13:
                    cc:df:70:92:d5:f8:52:e2:24:5b:e9:20:cb:9c:2e:
                    be:7a:42:a3:59:d4:e5:47:50:9d:46:35:47:d5:a0:
                    30:5c:99:c2:0e:b8:a8:00:bf:f5:3e:86:04:a8:73:
                    b6:bd:07:9b:82:c1:05:57:85:7e:6e:1a:d7:83:1e:
                    70:ac:38:2e:c1:25:84:ac:96:ec:0a:87:46:ad:fe:
                    82:ad:f5:7c:ba:39:71:26:10:20:13:ba:ee:7d:76:
                    f9:8d:70:47:ed:dd:46:55:92:78:36:1d:02:f0:19:
                    23:88:d9:03:0a:58:80:db:6a:d2:b6:be:58:63:f4:
                    5f:74:a5:1d:b9:cb:1e:56:e0:f6:12:80:dd:08:52:
                    6c:48:5b:7a:44:c9:21:e8:92:7a:af:f2:e3:0b:20:
                    4d:1b:da:bc:34:e4:b4:2e:67:57:43:5c:b8:95:70:
                    31:06:69:24:4a:01:93:00:1f:b6:d2:69:a1:7f:68:
                    8b:43:2f:cc:ff:b6:16:cf:7b:53:e8:26:58:33:55:
                    26:98:e9:59:42:99:ae:82:41:7b:ab:57:6e:7b:8c:
                    6d:eb:3a:6c:12:57:2b:d0:90:e5:fe:5f:f5:81:4a:
                    b0:46:bd:4c:40:27:94:a1:96:00:50:1f:49:69:e2:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:46:12:53:66:D8:85:90:37:E2:1D:AC:17:DB:31:CA:3E:5D:3E:AF
            X509v3 Authority Key Identifier:
                keyid:98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:f8:71:a6:4b:00:56:18:d7:8e:52:4c:a2:ae:fe:df:b1:
         59:52:fa:43:49:7c:b5:d3:72:d1:b1:21:5d:f9:e4:02:bf:6d:
         51:8e:bc:e4:e7:f1:1a:5a:06:5d:15:15:36:88:a4:f7:ca:19:
         6f:97:92:b0:dd:57:df:c4:78:42:27:d6:76:46:99:58:15:40:
         2e:96:59:ff:cf:6a:05:c9:0b:80:d8:ed:12:cb:f1:fa:7e:3f:
         64:35:59:cc:b7:51:85:49:8f:0a:31:dd:02:d6:76:d8:40:00:
         31:79:7b:f2:9b:98:01:da:68:a3:a3:3d:18:b2:47:0c:2c:03:
         bd:4d:ed:a1:6c:de:81:31:b7:d2:08:ff:85:a4:95:24:17:55:
         77:b6:e3:e3:47:6e:28:7b:00:5b:72:79:76:cd:1e:7b:29:47:
         37:34:4a:2e:3a:e0:67:56:dc:86:f4:60:ca:a5:2d:ab:ef:14:
         6d:38:e0:c4:91:cd:cc:46:62:a6:08:be:37:8c:f1:d6:a1:fc:
         c0:67:4d:e3:fa:6d:db:57:e0:e9:90:98:57:67:c1:b2:36:8d:
         30:b5:df:59:20:12:b9:af:9b:8b:95:2f:30:b5:b2:21:91:22:
         50:b5:a8:11:d1:b3:0e:75:26:36:9c:09:ba:6e:e9:ee:24:9c:
         cc:0b:0f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn6qbYRv0UA+3b3tlwdrD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWUzYjdjMzc1MjIwNDRmNjgzOWVhMmViOTI5MmJlYWRk
NGE3NzMwHhcNMjQxMTI2MTAwMDUxWhcNMjQxMTI3MTAwMDUxWjAzMTEwLwYDVQQD
Eyg3MTQ2MTI1MzY2ZDg4NTkwMzdlMjFkYWMxN2RiMzFjYTNlNWQzZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32lhNgomyJP90h5sRPM33CS1fhS
4iRb6SDLnC6+ekKjWdTlR1CdRjVH1aAwXJnCDrioAL/1PoYEqHO2vQebgsEFV4V+
bhrXgx5wrDguwSWErJbsCodGrf6CrfV8ujlxJhAgE7rufXb5jXBH7d1GVZJ4Nh0C
8BkjiNkDCliA22rStr5YY/RfdKUducseVuD2EoDdCFJsSFt6RMkh6JJ6r/LjCyBN
G9q8NOS0LmdXQ1y4lXAxBmkkSgGTAB+20mmhf2iLQy/M/7YWz3tT6CZYM1UmmOlZ
QpmugkF7q1due4xt6zpsElcr0JDl/l/1gUqwRr1MQCeUoZYAUB9JaeJ8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFGElNm2IWQN+IdrBfbMco+XT6vMB8GA1UdIwQY
MBaAFJiuO3w3UiBE9oOeouuSkr6t1KdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs0N2ZEZFNJRVQyZzU2aTY1S1N2cTNVcDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZTY4MzEtN2IyYy00MmJjLTkzNGUt
NzI4NTIyN2MxMTE4LzEvbUs0N2ZEZFNJRVQyZzU2aTY1S1N2cTNVcDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jZTY4MzEtN2IyYy00MmJjLTkzNGUtNzI4NTIyN2MxMTE4
LzEvbUs0N2ZEZFNJRVQyZzU2aTY1S1N2cTNVcDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+f4caZL
AFYY145STKKu/t+xWVL6Q0l8tdNy0bEhXfnkAr9tUY685OfxGloGXRUVNoik98oZ
b5eSsN1X38R4QifWdkaZWBVALpZZ/89qBckLgNjtEsvx+n4/ZDVZzLdRhUmPCjHd
AtZ22EAAMXl78puYAdpoo6M9GLJHDCwDvU3toWzegTG30gj/haSVJBdVd7bj40du
KHsAW3J5ds0eeylHNzRKLjrgZ1bchvRgyqUtq+8UbTjgxJHNzEZipgi+N4zx1qH8
wGdN4/pt21fg6ZCYV2fBsjaNMLXfWSASua+bi5UvMLWyIZEiULWoEdGzDnUmNpwJ
um7p7iSczAsPlg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 19:51:11 2024 by rpki-client on console-ams.rpki-client.org