Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File:                     1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier:          hDdGmjccEMHzySt9Kp30VspMrQIWDd48/JhUA/6KiLU=
Subject key identifier:   70:DC:55:31:CB:78:87:90:F3:7C:40:16:0A:A7:78:CD:03:EB:D7:D1
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer:       /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial:       01935877580B193647BF95A66C46F66E7BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number:          087E
Signing time:             Sat 23 Nov 2024 10:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:36 +0000
Files and hashes:         1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: Mh6SJS8Oljh2hB5eLlsth0aFWxJdhmNNgoB8i1Go8CU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:58:0b:19:36:47:bf:95:a6:6c:46:f6:6e:7b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
        Validity
            Not Before: Nov 23 10:00:36 2024 GMT
            Not After : Nov 24 10:00:36 2024 GMT
        Subject: CN=70dc5531cb788790f37c40160aa778cd03ebd7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:4a:ff:a1:b3:82:84:e7:52:04:a5:5a:f5:
                    7f:2b:70:57:1b:a7:0b:d4:83:7d:b4:27:4b:5c:8f:
                    31:bd:f5:6f:bf:8a:94:0e:a5:2f:1b:0e:49:5d:1b:
                    6e:32:18:e2:c3:8b:da:8d:e3:88:bb:99:48:83:83:
                    4f:3f:21:94:89:74:8b:20:5d:ac:02:ce:97:a0:06:
                    3b:cf:6f:76:05:d7:9a:72:e2:89:c8:0a:0e:7f:4f:
                    c6:54:6a:c4:12:7d:32:a3:cf:fe:47:f9:3b:b4:12:
                    47:e6:7d:11:f0:f5:8e:38:4c:1e:3a:f7:69:63:c5:
                    5a:eb:a7:6b:21:95:a5:f3:d7:d8:e0:57:10:64:73:
                    cd:aa:bd:c9:a8:dd:d4:ed:47:65:38:3c:b5:ea:29:
                    cd:78:79:86:a3:9a:22:36:cc:d4:d0:50:de:9e:80:
                    74:0e:9f:ba:bc:35:26:ec:ce:a0:11:3b:88:04:32:
                    7d:55:2c:c3:fb:99:8a:96:0c:f8:76:42:ad:d3:af:
                    8c:97:ba:3b:eb:47:4b:6d:80:57:d4:1b:e5:d5:78:
                    c9:9e:d7:40:21:f6:db:82:20:2c:95:cc:ed:a9:90:
                    70:2f:8b:47:7b:48:be:89:8a:ae:43:ee:55:2d:b5:
                    eb:43:4d:77:8b:37:35:bd:8a:e6:b6:e0:a7:06:38:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DC:55:31:CB:78:87:90:F3:7C:40:16:0A:A7:78:CD:03:EB:D7:D1
            X509v3 Authority Key Identifier:
                keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:76:4f:36:17:9d:ed:ff:cd:f9:c1:6e:54:4e:61:de:dc:b0:
         a3:48:a3:db:f9:50:6d:0d:cc:9d:8b:f9:34:21:7e:cd:94:16:
         cc:65:00:c2:66:52:30:54:1d:1d:ee:04:39:28:e0:00:08:58:
         f2:07:2c:9b:fb:99:5c:43:75:e1:be:23:97:03:b8:3f:10:3d:
         51:85:9c:95:1c:8a:4e:81:3b:46:db:42:82:47:f3:58:eb:47:
         46:7f:0f:ff:06:fe:07:50:f4:8b:94:d1:c2:5d:f9:8e:0e:01:
         41:98:78:92:c6:2f:de:9a:83:9a:10:6e:ac:e6:66:65:25:81:
         0d:85:66:d2:e2:f4:06:e7:79:ed:31:2f:1e:83:c6:47:32:0f:
         5c:76:f1:c9:06:c3:4e:c9:41:96:45:d1:9a:ab:c1:c5:65:71:
         57:66:39:b7:e0:ae:95:9b:a0:fa:ad:1b:74:51:44:92:86:77:
         e2:24:1d:61:17:43:4e:1a:19:af:a0:fc:8e:2b:70:b4:ee:6b:
         60:fb:19:b8:cb:40:c8:0c:ab:71:9f:b4:72:b7:0f:c8:a4:e6:
         eb:f8:bb:6d:02:d7:ee:b4:7a:75:54:8f:d6:43:16:d3:26:57:
         72:77:03:33:8d:95:56:9b:b8:8f:96:4a:a8:95:4d:95:37:05:
         e4:1c:91:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd1gLGTZHv5WmbEb2bnu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yzg4OGViOTYwYTAwMTkwMGMyNzk1ZThhYWZhMjY4ZjYw
MmQ4NDIwHhcNMjQxMTIzMTAwMDM2WhcNMjQxMTI0MTAwMDM2WjAzMTEwLwYDVQQD
Eyg3MGRjNTUzMWNiNzg4NzkwZjM3YzQwMTYwYWE3NzhjZDAzZWJkN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sxK/6GzgoTnUgSlWvV/K3BXG6cL
1IN9tCdLXI8xvfVvv4qUDqUvGw5JXRtuMhjiw4vajeOIu5lIg4NPPyGUiXSLIF2s
As6XoAY7z292BdeacuKJyAoOf0/GVGrEEn0yo8/+R/k7tBJH5n0R8PWOOEweOvdp
Y8Va66drIZWl89fY4FcQZHPNqr3JqN3U7UdlODy16inNeHmGo5oiNszU0FDenoB0
Dp+6vDUm7M6gETuIBDJ9VSzD+5mKlgz4dkKt06+Ml7o760dLbYBX1Bvl1XjJntdA
IfbbgiAslcztqZBwL4tHe0i+iYquQ+5VLbXrQ013izc1vYrmtuCnBjg/VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDcVTHLeIeQ83xAFgqneM0D69fRMB8GA1UdIwQY
MBaAFNTIiOuWCgAZAMJ5Xoqvomj2AthCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1pSTY1WUtBQmtBd25sZWlxLWlhUFlDMkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yZDczNGYtYWE4Yy00NzM1LWFjNzEt
MTVkNzY5MWY0YTJhLzEvMU1pSTY1WUtBQmtBd25sZWlxLWlhUFlDMkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yZDczNGYtYWE4Yy00NzM1LWFjNzEtMTVkNzY5MWY0YTJh
LzEvMU1pSTY1WUtBQmtBd25sZWlxLWlhUFlDMkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHZPNhed
7f/N+cFuVE5h3tywo0ij2/lQbQ3MnYv5NCF+zZQWzGUAwmZSMFQdHe4EOSjgAAhY
8gcsm/uZXEN14b4jlwO4PxA9UYWclRyKToE7RttCgkfzWOtHRn8P/wb+B1D0i5TR
wl35jg4BQZh4ksYv3pqDmhBurOZmZSWBDYVm0uL0Bud57TEvHoPGRzIPXHbxyQbD
TslBlkXRmqvBxWVxV2Y5t+CulZug+q0bdFFEkoZ34iQdYRdDThoZr6D8jitwtO5r
YPsZuMtAyAyrcZ+0crcPyKTm6/i7bQLX7rR6dVSP1kMW0yZXcncDM42VVpu4j5ZK
qJVNlTcF5ByRMQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:28 2024 by rpki-client on console-fra.rpki-client.org