Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File:                     4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier:          T82zdhSgcBdCqV7IrfQGKlNlb3ZeCHXxP0swfSccl5Q=
Subject key identifier:   70:DF:96:CE:31:C8:12:C5:44:A5:BC:1A:99:D4:56:9C:0D:5C:25:90
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer:       /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial:       01938B890339741D20F37958EC74AD25C20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number:          131B
Signing time:             Tue 03 Dec 2024 08:00:32 +0000
Manifest this update:     Tue 03 Dec 2024 08:00:32 +0000
Manifest next update:     Wed 04 Dec 2024 08:00:32 +0000
Files and hashes:         1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: /UXQpgAhvJ6nz2fAjzhU2/CRuGa8zDd/ZBwrn8dFI3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:89:03:39:74:1d:20:f3:79:58:ec:74:ad:25:c2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
        Validity
            Not Before: Dec  3 08:00:32 2024 GMT
            Not After : Dec  4 08:00:32 2024 GMT
        Subject: CN=70df96ce31c812c544a5bc1a99d4569c0d5c2590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:26:20:95:86:ac:53:50:be:12:cc:36:5e:
                    55:db:30:fe:95:9b:8d:3a:25:e4:44:10:87:39:20:
                    7f:e0:33:48:fa:9c:18:07:82:c4:1e:63:0b:c2:ab:
                    00:73:03:aa:7f:68:8c:5e:b1:a6:2c:80:57:61:51:
                    30:ad:a5:48:34:6f:cf:79:72:fb:a5:c5:cc:e8:16:
                    be:c6:59:91:05:02:c9:e9:49:fe:10:18:77:e5:03:
                    74:08:21:f9:32:a3:a2:a3:eb:44:5b:f7:14:d8:a2:
                    c1:1c:dd:af:ef:2d:d3:34:f2:f2:dd:6c:3d:d5:3d:
                    60:a7:a2:fa:de:1a:5b:da:6e:d7:ee:26:b3:64:9b:
                    89:07:f6:0b:95:56:35:d7:f9:8b:db:4c:67:04:25:
                    03:d3:c2:b9:7e:c5:3d:a0:a0:e3:d2:ae:e5:e2:10:
                    ce:48:a0:e1:68:70:d0:8f:a9:53:9b:9b:c2:a3:19:
                    7c:93:c6:85:75:ea:a6:11:f2:cc:53:59:34:a0:be:
                    9f:4b:4c:07:d3:a3:2e:36:94:63:51:07:2d:b0:28:
                    f9:a0:9b:5a:0a:1d:47:43:86:87:d0:a2:ca:cf:1a:
                    8d:41:15:90:4e:5e:ba:b9:8a:64:a8:6d:6b:60:34:
                    30:a6:95:6e:f5:ee:f5:64:33:7b:74:2f:51:58:b1:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DF:96:CE:31:C8:12:C5:44:A5:BC:1A:99:D4:56:9C:0D:5C:25:90
            X509v3 Authority Key Identifier:
                keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:29:05:3f:13:68:2b:80:8f:dc:f0:99:6e:46:37:a1:f7:
         64:fd:90:40:dd:ba:8f:8b:df:dc:ba:8e:d3:5d:90:42:59:00:
         31:95:ff:55:9b:9a:11:19:7d:27:de:a9:ec:46:6a:0e:01:67:
         fd:c0:87:c5:c3:77:38:db:9b:ed:da:a8:f0:b7:41:b7:fe:8e:
         1b:fd:f5:ac:7c:57:78:71:6a:a9:3d:1e:bf:15:e2:b3:65:19:
         35:e1:15:08:af:4f:29:d6:3c:b7:0c:e9:0d:4f:0e:86:f5:e9:
         8b:f3:63:81:96:11:11:19:6f:ed:8b:5e:ea:d8:a3:fd:c2:2f:
         49:4c:d9:70:71:bb:35:a1:17:14:08:31:22:b6:dc:17:fe:02:
         44:ea:a1:62:5d:c8:4d:e6:da:9d:94:ba:85:ec:8d:67:e1:44:
         a5:1b:69:3a:52:d0:52:d5:4b:29:a5:4c:bc:f7:6a:ee:25:cc:
         eb:5d:9d:5e:83:dd:17:76:ae:6d:28:b9:8d:dc:35:ee:a0:70:
         61:57:72:e1:18:ce:03:b9:27:f8:2d:aa:00:f9:ee:22:48:2a:
         09:da:52:b6:0b:bc:7c:44:43:5a:b5:21:fd:5e:aa:a6:33:b7:
         84:e5:e0:f3:fe:ad:b0:2e:6a:c3:d7:e7:fe:a5:41:e4:5c:85:
         69:96:e4:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOLiQM5dB0g83lY7HStJcIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk
NmUxMmYwHhcNMjQxMjAzMDgwMDMyWhcNMjQxMjA0MDgwMDMyWjAzMTEwLwYDVQQD
Eyg3MGRmOTZjZTMxYzgxMmM1NDRhNWJjMWE5OWQ0NTY5YzBkNWMyNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14kmIJWGrFNQvhLMNl5V2zD+lZuN
OiXkRBCHOSB/4DNI+pwYB4LEHmMLwqsAcwOqf2iMXrGmLIBXYVEwraVING/PeXL7
pcXM6Ba+xlmRBQLJ6Un+EBh35QN0CCH5MqOio+tEW/cU2KLBHN2v7y3TNPLy3Ww9
1T1gp6L63hpb2m7X7iazZJuJB/YLlVY11/mL20xnBCUD08K5fsU9oKDj0q7l4hDO
SKDhaHDQj6lTm5vCoxl8k8aFdeqmEfLMU1k0oL6fS0wH06MuNpRjUQctsCj5oJta
Ch1HQ4aH0KLKzxqNQRWQTl66uYpkqG1rYDQwppVu9e71ZDN7dC9RWLGz5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDfls4xyBLFRKW8GpnUVpwNXCWQMB8GA1UdIwQY
MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt
NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx
LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUO8pBT8T
aCuAj9zwmW5GN6H3ZP2QQN26j4vf3LqO012QQlkAMZX/VZuaERl9J96p7EZqDgFn
/cCHxcN3ONub7dqo8LdBt/6OG/31rHxXeHFqqT0evxXis2UZNeEVCK9PKdY8twzp
DU8OhvXpi/NjgZYRERlv7Yte6tij/cIvSUzZcHG7NaEXFAgxIrbcF/4CROqhYl3I
TebanZS6heyNZ+FEpRtpOlLQUtVLKaVMvPdq7iXM612dXoPdF3aubSi5jdw17qBw
YVdy4RjOA7kn+C2qAPnuIkgqCdpStgu8fERDWrUh/V6qpjO3hOXg8/6tsC5qw9fn
/qVB5FyFaZbkqA==
-----END CERTIFICATE-----
Generated at Tue Dec 3 18:09:34 2024 by rpki-client on console-fra.rpki-client.org