Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File:                     DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier:          bPRXSig5RPAIv1ef5Az7MsKqISAHzc2hMy1DAmkiDGU=
Subject key identifier:   2E:EA:FB:5B:46:4B:79:5C:6B:CE:76:A2:42:7A:E0:7B:8C:EF:61:6E
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer:       /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial:       0193568B03D8966FC12E187A27B71DC2377C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number:          10A9
Signing time:             Sat 23 Nov 2024 01:02:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:51 +0000
Files and hashes:         1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: zMGVXZJvzwQZXiMSDxn6Y5usy7cElrTL/h4X65Js2Kg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:03:d8:96:6f:c1:2e:18:7a:27:b7:1d:c2:37:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
        Validity
            Not Before: Nov 23 01:02:51 2024 GMT
            Not After : Nov 24 01:02:51 2024 GMT
        Subject: CN=2eeafb5b464b795c6bce76a2427ae07b8cef616e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:eb:94:b4:40:2b:1f:1a:6f:72:3d:23:34:
                    e8:0b:e1:62:d9:3b:da:1b:e6:93:6f:1f:e9:9a:d3:
                    38:10:e5:70:57:ad:3e:85:62:b6:cc:7a:a2:81:d2:
                    6f:76:50:58:77:c8:d9:6b:17:72:d3:7c:ed:2c:f1:
                    81:28:cd:6c:11:00:65:e4:e2:49:3c:36:f0:5d:78:
                    64:f3:8d:28:63:95:52:be:c9:01:c2:5f:c2:cc:a6:
                    1b:88:18:51:4d:c1:63:b3:ae:b7:72:32:41:1d:5b:
                    8c:a1:95:c8:de:57:0b:15:63:0f:b5:b9:93:05:3a:
                    3b:08:f4:50:e4:65:e3:a2:10:63:f7:a8:72:8b:4f:
                    68:14:ed:45:fd:3d:81:28:75:68:d4:1a:9c:7b:5a:
                    b1:e7:3f:81:c9:9f:20:86:86:5d:0f:9d:2b:c8:e9:
                    e0:d4:f7:72:4d:af:f7:08:28:71:08:be:c0:f5:af:
                    eb:a1:b1:8f:7a:62:ce:09:aa:18:81:76:12:ac:6e:
                    fe:4e:d4:85:86:9d:b9:40:63:ad:f6:ce:73:e2:8a:
                    0e:56:ae:d5:a9:59:28:ce:df:bb:9f:1a:bc:50:46:
                    89:f2:98:ee:8e:f8:7f:3f:aa:78:24:2c:92:ba:30:
                    4e:12:e7:99:f6:cc:9c:ae:c8:5f:05:dc:3d:0c:75:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EA:FB:5B:46:4B:79:5C:6B:CE:76:A2:42:7A:E0:7B:8C:EF:61:6E
            X509v3 Authority Key Identifier:
                keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:b0:c0:2a:72:57:dc:3a:59:b1:f3:ef:91:b1:46:f0:4a:
         2e:e6:40:12:53:aa:e5:42:29:6f:f5:56:06:45:ec:2c:64:3f:
         60:e3:cb:82:2b:4e:ef:b0:ab:f7:c0:d7:07:de:e9:6b:39:5b:
         b8:16:d7:62:a4:be:1c:a5:c9:45:96:ec:d6:b6:11:e0:7c:3e:
         17:a3:db:6c:4a:ae:2e:45:67:98:a4:f0:3e:20:a3:94:a9:2e:
         eb:82:71:27:fc:2c:92:a3:d4:45:86:61:f2:4f:bd:2b:30:a0:
         b5:54:43:6b:76:4b:f2:4b:18:64:ad:0d:8e:da:bb:83:6a:32:
         e0:ff:00:a7:42:4e:f6:69:14:0f:47:d2:b5:86:89:31:3e:50:
         8c:8f:bd:9a:60:14:eb:f7:06:57:03:1f:5c:0d:78:16:5c:79:
         34:6b:61:78:a3:08:48:78:fd:8a:ed:e9:66:db:da:69:bb:e1:
         ec:40:d3:b4:4b:86:ab:79:06:a5:d6:db:b9:74:57:37:a6:80:
         ce:f7:05:ae:2c:8b:3e:00:a3:1c:2f:7a:30:f8:bc:c3:41:61:
         3e:21:0e:0a:8f:c1:59:8c:3a:67:72:fd:54:6b:9c:dd:7d:24:
         77:ba:80:b8:0d:47:e7:68:ef:f7:5a:29:75:72:d7:c5:79:ce:
         2f:fd:09:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiwPYlm/BLhh6J7cdwjd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZGM1MDliNGRiMzUyMDNhYjYxNmY0NzgxZjg1ZGQ1ODYw
NDQzZDgwHhcNMjQxMTIzMDEwMjUxWhcNMjQxMTI0MDEwMjUxWjAzMTEwLwYDVQQD
EygyZWVhZmI1YjQ2NGI3OTVjNmJjZTc2YTI0MjdhZTA3YjhjZWY2MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY3rlLRAKx8ab3I9IzToC+Fi2Tva
G+aTbx/pmtM4EOVwV60+hWK2zHqigdJvdlBYd8jZaxdy03ztLPGBKM1sEQBl5OJJ
PDbwXXhk840oY5VSvskBwl/CzKYbiBhRTcFjs663cjJBHVuMoZXI3lcLFWMPtbmT
BTo7CPRQ5GXjohBj96hyi09oFO1F/T2BKHVo1Bqce1qx5z+ByZ8ghoZdD50ryOng
1PdyTa/3CChxCL7A9a/robGPemLOCaoYgXYSrG7+TtSFhp25QGOt9s5z4ooOVq7V
qVkozt+7nxq8UEaJ8pjujvh/P6p4JCySujBOEueZ9sycrshfBdw9DHXAhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7q+1tGS3lca852okJ64HuM72FuMB8GA1UdIwQY
MBaAFA3cUJtNs1IDq2FvR4H4XdWGBEPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xOTE0ODEtZGJiNy00MDMyLTljNGYt
ODdlNTc1N2I5N2UzLzEvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xOTE0ODEtZGJiNy00MDMyLTljNGYtODdlNTc1N2I5N2Uz
LzEvRGR4UW0wMnpVZ09yWVc5SGdmaGQxWVlFUTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/iwwCpy
V9w6WbHz75GxRvBKLuZAElOq5UIpb/VWBkXsLGQ/YOPLgitO77Cr98DXB97pazlb
uBbXYqS+HKXJRZbs1rYR4Hw+F6PbbEquLkVnmKTwPiCjlKku64JxJ/wskqPURYZh
8k+9KzCgtVRDa3ZL8ksYZK0Njtq7g2oy4P8Ap0JO9mkUD0fStYaJMT5QjI+9mmAU
6/cGVwMfXA14Flx5NGtheKMISHj9iu3pZtvaabvh7EDTtEuGq3kGpdbbuXRXN6aA
zvcFriyLPgCjHC96MPi8w0FhPiEOCo/BWYw6Z3L9VGuc3X0kd7qAuA1H52jv91op
dXLXxXnOL/0J1w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:33 2024 by rpki-client on console-ams.rpki-client.org