Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
File:                     yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json)
Hash identifier:          bTp8xHvKt0xLe8BBZfLxrXXcas9tpzxK3ow0BOMirqs=
Subject key identifier:   8C:E7:33:54:C3:E8:1D:CE:63:86:A3:5F:83:77:FA:32:8F:C1:B5:D9
Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Certificate issuer:       /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Certificate serial:       01935764B563B63E688C47F3CE525CC79B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
Manifest number:          1300
Signing time:             Sat 23 Nov 2024 05:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:38 +0000
Files and hashes:         1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: 4CwWOwiFinbXeaVbivfSZs9iy4vNBPu6NZml5zrTRnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:b5:63:b6:3e:68:8c:47:f3:ce:52:5c:c7:9b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
        Validity
            Not Before: Nov 23 05:00:38 2024 GMT
            Not After : Nov 24 05:00:38 2024 GMT
        Subject: CN=8ce73354c3e81dce6386a35f8377fa328fc1b5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:1e:5b:5d:f7:52:8e:ef:9e:b0:56:27:c6:
                    26:8f:20:b3:fd:04:8a:36:64:cf:90:12:8d:cd:e6:
                    5c:b7:fb:8b:10:e9:e8:d1:86:2e:ee:d1:f3:4a:f3:
                    93:aa:78:17:7d:b8:3c:ab:4d:36:3d:18:42:b1:eb:
                    38:47:46:2d:19:96:b0:86:68:08:4b:36:09:52:ec:
                    5e:7f:6a:d2:ce:ed:93:16:ae:50:17:79:19:97:4c:
                    f2:28:a3:1a:92:0f:f6:b4:44:b3:80:4b:05:10:cb:
                    f9:28:f7:cc:db:71:c3:07:64:d5:72:bd:fc:3f:59:
                    19:47:b2:4e:52:66:66:df:f8:52:79:2f:2e:e9:93:
                    71:67:35:56:80:91:b5:c5:25:63:6e:9a:cf:16:46:
                    dd:ab:b6:77:c8:22:9f:ee:c2:8c:2b:8f:d0:0a:66:
                    82:e1:c5:92:dd:5a:76:91:aa:28:90:61:ac:36:e5:
                    e8:e3:69:0f:4a:7b:f3:04:c8:e7:14:23:eb:b7:14:
                    48:36:98:25:9a:a4:b8:ce:85:58:5c:af:7f:82:09:
                    27:3d:8e:e0:3e:b8:f6:a0:40:03:4c:8d:38:27:c8:
                    99:5a:29:60:60:f7:f7:4f:67:c4:a7:32:d1:cc:ec:
                    ca:ab:18:8c:e0:22:c5:dc:9b:3d:8f:b2:13:ec:f6:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:33:54:C3:E8:1D:CE:63:86:A3:5F:83:77:FA:32:8F:C1:B5:D9
            X509v3 Authority Key Identifier:
                keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:5c:98:8d:8c:08:85:1c:10:cc:b8:32:37:41:50:c3:d8:
         5f:71:8c:50:76:af:09:99:30:0a:9a:55:bd:5e:2e:89:4f:ee:
         f1:87:25:75:d7:0f:fa:5e:1a:5a:d3:80:03:6b:38:42:fc:56:
         a4:da:4f:2a:05:c5:44:fe:4d:a2:a4:a9:d1:1d:f5:68:b0:00:
         8a:52:0d:5b:71:f9:dd:e2:43:3b:2a:92:dc:2a:a8:d0:1a:df:
         76:98:c5:91:75:48:1c:42:5d:d8:c5:58:ce:3c:7f:c8:0b:c4:
         89:4d:33:3d:08:40:8d:54:44:60:a5:72:6b:b0:a4:a9:9c:4e:
         be:0a:51:27:35:7e:1a:fb:b4:d4:f1:08:cd:be:c1:10:aa:7d:
         00:b4:22:17:78:e8:1d:d8:ed:f1:c0:6b:b4:e2:a8:6b:12:80:
         83:60:10:7a:2e:b5:cb:a2:54:a5:74:36:6a:30:70:8a:7d:e4:
         f7:fb:4c:d6:2d:12:0a:72:dd:2e:07:de:84:45:be:ee:e1:e7:
         e4:49:ee:39:e2:f1:2b:06:cd:9d:7f:8f:92:04:b0:0a:26:c6:
         36:c8:9d:83:bd:7a:c7:a5:f7:f3:36:7c:ba:31:08:f3:08:32:
         d6:db:d4:49:b8:75:90:4b:04:40:a5:8a:c0:25:a7:07:bd:10:
         8c:fc:62:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZLVjtj5ojEfzzlJcx5uKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMTgzYTY2OTEzMDlhNzlkNmU2NjA1YjBkNWMxMWUzZmY3
ZTkxOTQwHhcNMjQxMTIzMDUwMDM4WhcNMjQxMTI0MDUwMDM4WjAzMTEwLwYDVQQD
Eyg4Y2U3MzM1NGMzZTgxZGNlNjM4NmEzNWY4Mzc3ZmEzMjhmYzFiNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0eW133Uo7vnrBWJ8YmjyCz/QSK
NmTPkBKNzeZct/uLEOno0YYu7tHzSvOTqngXfbg8q002PRhCses4R0YtGZawhmgI
SzYJUuxef2rSzu2TFq5QF3kZl0zyKKMakg/2tESzgEsFEMv5KPfM23HDB2TVcr38
P1kZR7JOUmZm3/hSeS8u6ZNxZzVWgJG1xSVjbprPFkbdq7Z3yCKf7sKMK4/QCmaC
4cWS3Vp2kaookGGsNuXo42kPSnvzBMjnFCPrtxRINpglmqS4zoVYXK9/ggknPY7g
Prj2oEADTI04J8iZWilgYPf3T2fEpzLRzOzKqxiM4CLF3Js9j7IT7PblJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIznM1TD6B3OY4ajX4N3+jKPwbXZMB8GA1UdIwQY
MBaAFMoYOmaRMJp51uZgWw1cEeP/fpGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEt
MTllNzA4NDY5Y2VlLzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEtMTllNzA4NDY5Y2Vl
LzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4ZcmI2M
CIUcEMy4MjdBUMPYX3GMUHavCZkwCppVvV4uiU/u8YclddcP+l4aWtOAA2s4QvxW
pNpPKgXFRP5NoqSp0R31aLAAilINW3H53eJDOyqS3Cqo0BrfdpjFkXVIHEJd2MVY
zjx/yAvEiU0zPQhAjVREYKVya7CkqZxOvgpRJzV+Gvu01PEIzb7BEKp9ALQiF3jo
Hdjt8cBrtOKoaxKAg2AQei61y6JUpXQ2ajBwin3k9/tM1i0SCnLdLgfehEW+7uHn
5EnuOeLxKwbNnX+PkgSwCibGNsidg716x6X38zZ8ujEI8wgy1tvUSbh1kEsEQKWK
wCWnB70QjPxiCg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:58 2024 by rpki-client on console-fra.rpki-client.org