Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File:                     1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier:          X2Fq+8C38K9B201BJWcGhN2tvQvlIa3pfsJfiEkX8h8=
Subject key identifier:   28:83:24:A3:11:4D:95:CC:D6:52:0E:22:A3:77:07:A2:8E:3D:B7:49
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer:       /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial:       0191FA471A2C18E338DDAE5852C060FA5FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number:          12BA
Signing time:             Mon 16 Sep 2024 10:00:49 +0000
Manifest this update:     Mon 16 Sep 2024 10:00:49 +0000
Manifest next update:     Tue 17 Sep 2024 10:00:49 +0000
Files and hashes:         1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: 3rz3j3tKrck9+a5yucUr3xCnaJ9pilaQny9WtSLfO7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:1a:2c:18:e3:38:dd:ae:58:52:c0:60:fa:5f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
        Validity
            Not Before: Sep 16 10:00:49 2024 GMT
            Not After : Sep 17 10:00:49 2024 GMT
        Subject: CN=288324a3114d95ccd6520e22a37707a28e3db749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:c3:3c:f8:ab:63:70:04:e5:96:64:43:17:
                    79:19:a4:43:ba:de:93:d2:21:f4:ac:b7:7b:f0:88:
                    34:c0:63:f8:6e:ac:46:ad:8c:dc:bc:a1:6e:78:71:
                    04:5e:7b:7d:49:aa:9b:11:24:ce:96:8a:25:bd:d5:
                    de:91:04:59:4c:64:59:a3:5f:52:d7:40:c4:28:f3:
                    d9:75:09:39:fa:9b:4b:f8:96:27:cf:6c:f1:84:6f:
                    8a:71:b9:ef:ba:9f:f9:97:75:d8:20:bc:8b:4f:d1:
                    76:a5:78:9b:ce:3d:a0:44:93:47:31:3d:88:d3:77:
                    5f:29:c9:ed:2c:75:9a:20:18:33:2b:60:38:3c:10:
                    8b:f2:ae:0b:30:df:83:31:6e:7e:8f:84:0d:8b:e8:
                    f0:df:b9:85:5d:59:d3:da:1d:20:66:3e:3a:fe:38:
                    df:9a:3b:ec:c3:7b:12:21:43:bb:03:7e:d1:e5:24:
                    06:95:be:54:b4:fe:f7:19:17:dc:9f:69:f2:a3:b2:
                    a3:77:58:b1:b1:62:4e:5e:c1:6f:bc:ef:7c:d5:43:
                    1d:b9:45:e4:9e:36:c2:2b:3a:1e:22:6a:15:0d:9c:
                    14:f9:fa:9d:40:4b:a1:02:ce:73:63:e1:40:5e:f7:
                    bc:63:52:77:1d:76:a1:a4:96:d0:d2:8e:70:08:a5:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:83:24:A3:11:4D:95:CC:D6:52:0E:22:A3:77:07:A2:8E:3D:B7:49
            X509v3 Authority Key Identifier:
                keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6f:f7:5b:32:16:65:26:a4:16:18:b4:96:51:38:58:4f:e1:
         1c:72:77:0a:6b:46:a1:90:ea:4d:84:e4:21:68:40:f0:a9:6b:
         12:ae:b1:68:30:54:a2:cb:ab:3c:c1:36:cc:2b:05:ce:f0:80:
         a1:d7:1f:12:84:4a:1a:2b:83:19:6e:d2:8a:54:de:80:a6:09:
         f4:f4:01:4d:43:05:47:f9:22:71:1d:32:82:cd:41:c1:01:de:
         35:b6:27:8c:3b:9b:38:72:30:93:7a:f2:7f:c5:af:0a:23:a6:
         76:da:34:80:ec:66:8b:3c:18:16:7b:56:d8:32:06:9a:30:a1:
         20:35:5c:c0:35:2f:ed:b5:11:ee:48:b3:66:bf:c0:d0:fb:e1:
         e6:f1:e4:fb:d8:e0:d3:bc:23:76:ff:3d:cc:69:13:6f:c0:8b:
         7f:13:b7:35:6b:69:3d:f0:9b:ce:81:b7:b0:96:04:de:f3:5c:
         10:c5:28:6a:e5:37:3d:6e:63:cc:f3:94:da:89:0b:75:ba:2e:
         aa:1e:9a:fd:5b:4b:96:81:68:9b:88:34:4e:25:28:1f:30:6f:
         84:4b:bb:28:f0:ee:6e:5d:a5:dd:b6:bc:39:3d:44:6a:f5:94:
         5f:f2:47:f6:22:d3:71:28:dc:f4:80:a2:8e:53:d5:8a:af:b6:
         46:eb:8d:60
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZH6RxosGOM43a5YUsBg+l/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj
YTMxOWEwHhcNMjQwOTE2MTAwMDQ5WhcNMjQwOTE3MTAwMDQ5WjAzMTEwLwYDVQQD
EygyODgzMjRhMzExNGQ5NWNjZDY1MjBlMjJhMzc3MDdhMjhlM2RiNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD3DPPirY3AE5ZZkQxd5GaRDut6T
0iH0rLd78Ig0wGP4bqxGrYzcvKFueHEEXnt9SaqbESTOloolvdXekQRZTGRZo19S
10DEKPPZdQk5+ptL+JYnz2zxhG+Kcbnvup/5l3XYILyLT9F2pXibzj2gRJNHMT2I
03dfKcntLHWaIBgzK2A4PBCL8q4LMN+DMW5+j4QNi+jw37mFXVnT2h0gZj46/jjf
mjvsw3sSIUO7A37R5SQGlb5UtP73GRfcn2nyo7Kjd1ixsWJOXsFvvO981UMduUXk
njbCKzoeImoVDZwU+fqdQEuhAs5zY+FAXve8Y1J3HXahpJbQ0o5wCKWg9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCiDJKMRTZXM1lIOIqN3B6KOPbdJMB8GA1UdIwQY
MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2
LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz
ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXG/3
WzIWZSakFhi0llE4WE/hHHJ3CmtGoZDqTYTkIWhA8KlrEq6xaDBUosurPME2zCsF
zvCAodcfEoRKGiuDGW7SilTegKYJ9PQBTUMFR/kicR0ygs1BwQHeNbYnjDubOHIw
k3ryf8WvCiOmdto0gOxmizwYFntW2DIGmjChIDVcwDUv7bUR7kizZr/A0Pvh5vHk
+9jg07wjdv89zGkTb8CLfxO3NWtpPfCbzoG3sJYE3vNcEMUoauU3PW5jzPOU2okL
dbouqh6a/VtLloFom4g0TiUoHzBvhEu7KPDubl2l3ba8OT1EavWUX/JH9iLTcSjc
9ICijlPViq+2RuuNYA==
-----END CERTIFICATE-----