Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
File:                     Iwz5e62CJ98tajnFT2OCEIFQ9og.mft (raw, json)
Hash identifier:          sa1KnvwuoV8PSnyiDn/6EZM7fJ56kgTaD4FB5lHlZo0=
Subject key identifier:   B1:2E:7B:17:BC:7F:48:53:E5:FF:39:1C:B5:13:33:2D:74:31:23:A1
Authority key identifier: 23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88
Certificate issuer:       /CN=230cf97bad8227df2d6a39c54f6382108150f688
Certificate serial:       0193568AD933ADC75E76CC0238C0E4867C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
Manifest number:          1290
Signing time:             Sat 23 Nov 2024 01:02:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:40 +0000
Files and hashes:         1: Iwz5e62CJ98tajnFT2OCEIFQ9og.crl (hash: 5NZiWzTf7wTVixExdTRxPoUmcmtDQvgb0SQVM3umpzQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:d9:33:ad:c7:5e:76:cc:02:38:c0:e4:86:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230cf97bad8227df2d6a39c54f6382108150f688
        Validity
            Not Before: Nov 23 01:02:40 2024 GMT
            Not After : Nov 24 01:02:40 2024 GMT
        Subject: CN=b12e7b17bc7f4853e5ff391cb513332d743123a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:da:cd:d1:4e:06:f2:ef:4d:81:73:45:77:
                    54:d9:d8:ce:eb:db:5d:c6:6c:05:02:0a:58:bc:ae:
                    39:96:67:03:db:89:b1:60:70:33:32:cd:04:31:21:
                    d5:f3:e5:ea:37:10:44:00:7c:f2:22:d2:ac:4b:12:
                    93:ab:f1:9a:22:23:39:cc:09:ea:6f:c8:14:3a:68:
                    ed:c4:03:34:3c:59:28:7f:26:f5:1e:b3:80:9f:68:
                    00:ac:20:39:ed:cb:8a:da:67:e5:fd:8e:15:c2:36:
                    03:28:df:cc:e2:ed:98:fa:fd:11:5d:27:48:1f:9b:
                    4e:99:a4:f8:86:ec:d3:d9:b3:a0:fd:df:65:e8:8d:
                    c4:03:d3:08:5c:94:82:a7:46:0f:be:92:f5:c7:a8:
                    07:6a:89:29:5b:03:af:9c:7a:7b:fb:19:31:bb:50:
                    ca:93:1d:9c:4a:91:7a:83:82:bc:a8:26:97:4f:75:
                    b2:70:92:8e:4b:25:9f:70:f1:1b:8f:43:59:ca:17:
                    a5:23:1f:27:c0:03:28:e8:d6:1e:59:7d:f4:40:3f:
                    50:49:43:99:34:48:ca:6c:f8:02:5e:ed:e5:00:3c:
                    dc:2e:25:b1:ee:ee:48:b0:01:68:9f:1e:cd:53:dd:
                    42:88:8b:2b:07:73:5c:4f:07:e4:34:2b:21:02:3e:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2E:7B:17:BC:7F:48:53:E5:FF:39:1C:B5:13:33:2D:74:31:23:A1
            X509v3 Authority Key Identifier:
                keyid:23:0C:F9:7B:AD:82:27:DF:2D:6A:39:C5:4F:63:82:10:81:50:F6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwz5e62CJ98tajnFT2OCEIFQ9og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/995960-67b4-4542-ae67-04ecd7a4457e/1/Iwz5e62CJ98tajnFT2OCEIFQ9og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:df:d2:85:72:3f:d5:62:85:41:25:b3:e7:c4:9c:d2:76:
         49:c8:0d:d9:d5:55:86:8a:32:1b:17:79:51:99:16:5a:29:60:
         a3:c5:b2:78:76:6b:aa:3b:c1:2f:9e:f2:16:3b:1f:a9:59:49:
         7f:35:f0:3b:a2:44:c7:52:2a:45:13:30:53:97:7c:a6:c2:28:
         1c:d9:9d:7b:19:82:3b:0f:4e:74:e1:7f:fc:e1:95:56:04:4e:
         2f:ef:c6:0a:cf:36:5e:4d:68:a4:54:0c:fc:64:8a:d6:19:6c:
         bc:d1:48:80:fe:18:77:92:8f:f1:53:fc:0a:97:b7:11:c1:43:
         bc:32:3e:8b:64:19:ff:48:44:05:c4:72:be:1b:6d:41:81:82:
         1e:9c:b9:b2:95:8e:12:9e:16:06:a3:38:76:cb:03:d3:1c:0f:
         c8:94:e7:69:4f:67:27:fc:e9:f8:9b:05:87:10:fc:b5:ef:f8:
         e2:a8:ea:53:fa:19:db:22:b0:35:7c:8f:7a:09:39:ef:2e:77:
         31:a5:b4:0c:34:b9:e9:50:59:ce:3e:90:33:5f:b0:dd:6d:1d:
         49:14:1c:e3:46:e2:b8:d7:3d:ee:3e:bd:0c:b5:f7:a6:f7:0c:
         06:39:a1:db:75:3c:32:d3:8e:1e:4f:e4:e2:0b:df:12:ed:f7:
         7b:6a:bd:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWitkzrcdedswCOMDkhnxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGNmOTdiYWQ4MjI3ZGYyZDZhMzljNTRmNjM4MjEwODE1
MGY2ODgwHhcNMjQxMTIzMDEwMjQwWhcNMjQxMTI0MDEwMjQwWjAzMTEwLwYDVQQD
EyhiMTJlN2IxN2JjN2Y0ODUzZTVmZjM5MWNiNTEzMzMyZDc0MzEyM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohHazdFOBvLvTYFzRXdU2djO69td
xmwFAgpYvK45lmcD24mxYHAzMs0EMSHV8+XqNxBEAHzyItKsSxKTq/GaIiM5zAnq
b8gUOmjtxAM0PFkofyb1HrOAn2gArCA57cuK2mfl/Y4VwjYDKN/M4u2Y+v0RXSdI
H5tOmaT4huzT2bOg/d9l6I3EA9MIXJSCp0YPvpL1x6gHaokpWwOvnHp7+xkxu1DK
kx2cSpF6g4K8qCaXT3WycJKOSyWfcPEbj0NZyhelIx8nwAMo6NYeWX30QD9QSUOZ
NEjKbPgCXu3lADzcLiWx7u5IsAFonx7NU91CiIsrB3NcTwfkNCshAj7VmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEuexe8f0hT5f85HLUTMy10MSOhMB8GA1UdIwQY
MBaAFCMM+XutgiffLWo5xU9jghCBUPaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni85OTU5NjAtNjdiNC00NTQyLWFlNjct
MDRlY2Q3YTQ0NTdlLzEvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni85OTU5NjAtNjdiNC00NTQyLWFlNjctMDRlY2Q3YTQ0NTdl
LzEvSXd6NWU2MkNKOTh0YWpuRlQyT0NFSUZROW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegnf0oVy
P9VihUEls+fEnNJ2ScgN2dVVhooyGxd5UZkWWilgo8WyeHZrqjvBL57yFjsfqVlJ
fzXwO6JEx1IqRRMwU5d8psIoHNmdexmCOw9OdOF//OGVVgROL+/GCs82Xk1opFQM
/GSK1hlsvNFIgP4Yd5KP8VP8Cpe3EcFDvDI+i2QZ/0hEBcRyvhttQYGCHpy5spWO
Ep4WBqM4dssD0xwPyJTnaU9nJ/zp+JsFhxD8te/44qjqU/oZ2yKwNXyPegk57y53
MaW0DDS56VBZzj6QM1+w3W0dSRQc40biuNc97j69DLX3pvcMBjmh23U8MtOOHk/k
4gvfEu33e2q98w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:57 2024 by rpki-client on console-fra.rpki-client.org