Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File:                     fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier:          mwa9dD2lSTxiSotrBLjOX6kArNYIDx2rBdPDDq/bPp4=
Subject key identifier:   2A:C5:91:66:49:2D:32:0A:1D:F6:3C:BA:BF:77:02:A3:A2:73:63:59
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer:       /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial:       019357D232C1A19B6F04F806663AC5BC0E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number:          0567
Signing time:             Sat 23 Nov 2024 07:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:13 +0000
Files and hashes:         1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: PILod8CShKmuAx3xXLOw9qoDs2LdmAhk2ogE9/kKzJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:32:c1:a1:9b:6f:04:f8:06:66:3a:c5:bc:0e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
        Validity
            Not Before: Nov 23 07:00:13 2024 GMT
            Not After : Nov 24 07:00:13 2024 GMT
        Subject: CN=2ac59166492d320a1df63cbabf7702a3a2736359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:26:95:0b:c4:bf:09:b9:27:a2:8b:4a:84:
                    78:40:8a:06:e2:5f:ae:94:3b:b1:72:c3:5f:cd:0c:
                    c3:19:52:32:b7:c3:10:bc:d2:97:76:e5:32:65:92:
                    57:69:28:f8:dd:07:66:bb:80:c1:02:64:1d:91:68:
                    d1:24:80:46:c3:d0:e3:23:34:68:ae:98:04:88:73:
                    57:11:af:11:45:f6:4f:e3:85:2b:e2:56:88:bf:cb:
                    1e:bf:6f:dc:77:ba:67:81:e9:a6:5e:9f:69:71:99:
                    a1:d3:dd:36:a8:0f:c0:f1:6a:39:49:64:bb:0d:48:
                    a9:13:93:3c:2b:78:8c:e8:3e:eb:84:78:d0:c0:5d:
                    7e:e4:7a:ad:47:11:21:17:d8:70:12:f8:d2:24:b4:
                    e5:ec:1d:fa:fe:63:a4:5b:28:eb:5f:bc:09:37:06:
                    6d:1c:c7:8d:85:90:92:9f:e1:55:9f:24:fb:36:e4:
                    74:f4:27:24:1e:65:44:04:5d:1c:1c:ed:07:51:53:
                    92:95:8d:1b:39:07:6e:fa:5f:62:a4:4e:5f:23:32:
                    89:bd:6a:94:17:7c:b1:c3:31:c8:3b:a4:82:a9:de:
                    82:81:49:62:8d:b4:56:3f:8a:6c:e5:09:e7:64:7c:
                    87:68:67:34:f2:0c:33:87:88:32:87:43:72:eb:81:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C5:91:66:49:2D:32:0A:1D:F6:3C:BA:BF:77:02:A3:A2:73:63:59
            X509v3 Authority Key Identifier:
                keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:75:ed:fa:21:c3:99:09:5a:b6:46:a5:4a:18:b0:6c:9b:d5:
         13:eb:a3:04:3b:5c:c4:6d:fe:c6:17:e2:8d:7a:18:82:30:80:
         9c:e0:68:a6:e8:c2:59:b6:30:d5:1f:30:76:b4:14:12:0b:3a:
         03:57:ac:d8:86:dc:7f:53:47:63:38:a5:41:9c:d6:15:ed:26:
         fd:83:1f:3e:b9:88:05:24:40:d2:57:e6:ae:12:ee:d7:7d:46:
         19:c7:ed:cc:96:1c:2c:a8:8f:e6:b9:19:f6:09:25:c9:07:69:
         74:ef:e6:db:94:c6:1f:74:aa:45:de:3c:a9:89:46:f8:88:3c:
         6f:20:92:03:b8:00:50:8f:81:0d:1f:ca:0c:74:28:92:0e:11:
         4f:3e:48:f3:1b:c5:8e:ca:93:ea:95:b5:8a:35:20:8a:fe:53:
         6a:cd:33:a7:3a:5c:b1:0f:0f:4c:39:98:f7:0c:fe:b3:cc:c8:
         a9:4d:41:2b:a7:07:e2:d5:02:44:3e:ff:66:f8:6b:66:33:3b:
         99:46:56:90:a3:59:6e:ba:c0:37:ca:26:9c:11:3a:86:f9:67:
         3e:d0:e6:83:78:d7:e4:c7:a9:25:f5:25:28:68:df:34:b7:64:
         6d:14:94:0b:f0:52:3a:9a:12:df:21:0d:57:36:6d:bc:e5:73:
         1b:63:09:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0jLBoZtvBPgGZjrFvA4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDkzZjZjODkwNzhkY2VlZjY3YmM5YzA4MTZlOTQ3ZWMx
NWI3YWMwHhcNMjQxMTIzMDcwMDEzWhcNMjQxMTI0MDcwMDEzWjAzMTEwLwYDVQQD
EygyYWM1OTE2NjQ5MmQzMjBhMWRmNjNjYmFiZjc3MDJhM2EyNzM2MzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv88mlQvEvwm5J6KLSoR4QIoG4l+u
lDuxcsNfzQzDGVIyt8MQvNKXduUyZZJXaSj43Qdmu4DBAmQdkWjRJIBGw9DjIzRo
rpgEiHNXEa8RRfZP44Ur4laIv8sev2/cd7pngemmXp9pcZmh0902qA/A8Wo5SWS7
DUipE5M8K3iM6D7rhHjQwF1+5HqtRxEhF9hwEvjSJLTl7B36/mOkWyjrX7wJNwZt
HMeNhZCSn+FVnyT7NuR09CckHmVEBF0cHO0HUVOSlY0bOQdu+l9ipE5fIzKJvWqU
F3yxwzHIO6SCqd6CgUlijbRWP4ps5QnnZHyHaGc08gwzh4gyh0Ny64GFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrFkWZJLTIKHfY8ur93AqOic2NZMB8GA1UdIwQY
MBaAFH0JP2yJB43O72e8nAgW6UfsFbesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYWIzNzUtNDU5OC00OWExLWE0YTQt
YzFiNTYyYzU3NzAzLzEvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYWIzNzUtNDU5OC00OWExLWE0YTQtYzFiNTYyYzU3NzAz
LzEvZlFrX2JJa0hqYzd2Wjd5Y0NCYnBSLXdWdDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXXt+iHD
mQlatkalShiwbJvVE+ujBDtcxG3+xhfijXoYgjCAnOBopujCWbYw1R8wdrQUEgs6
A1es2Ibcf1NHYzilQZzWFe0m/YMfPrmIBSRA0lfmrhLu131GGcftzJYcLKiP5rkZ
9gklyQdpdO/m25TGH3SqRd48qYlG+Ig8byCSA7gAUI+BDR/KDHQokg4RTz5I8xvF
jsqT6pW1ijUgiv5Tas0zpzpcsQ8PTDmY9wz+s8zIqU1BK6cH4tUCRD7/ZvhrZjM7
mUZWkKNZbrrAN8omnBE6hvlnPtDmg3jX5MepJfUlKGjfNLdkbRSUC/BSOpoS3yEN
VzZtvOVzG2MJMw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:17 2024 by rpki-client on console-fra.rpki-client.org