Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/cb53e4-4483-4a54-8e9e-2dce206bd7d7/1/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.mft
File:                     TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.mft (raw, json)
Hash identifier:          DqmwRX0aPEcHcYjXkPGhLLS2ZKl0SJhX2hxMHGxNYyI=
Subject key identifier:   ED:D1:10:72:9A:F2:BD:F2:71:18:53:D8:ED:3C:AA:40:C8:E8:BB:14
Authority key identifier: 4C:53:DF:47:B3:5C:BF:1F:5B:77:0B:F0:DA:D8:8B:0E:54:DE:51:E4
Certificate issuer:       /CN=4c53df47b35cbf1f5b770bf0dad88b0e54de51e4
Certificate serial:       019369DA1DC32F844F199F299736129BFC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/cb53e4-4483-4a54-8e9e-2dce206bd7d7/1/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:02:02 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:02 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:02 +0000
Files and hashes:         1: TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.crl (hash: /10iLJIWPaSbYpwnSveuDrtHPzRgx0M2u0ROypmI73A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/cb53e4-4483-4a54-8e9e-2dce206bd7d7/1/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/cb53e4-4483-4a54-8e9e-2dce206bd7d7/1/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:1d:c3:2f:84:4f:19:9f:29:97:36:12:9b:fc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c53df47b35cbf1f5b770bf0dad88b0e54de51e4
        Validity
            Not Before: Nov 26 19:02:02 2024 GMT
            Not After : Nov 27 19:02:02 2024 GMT
        Subject: CN=edd110729af2bdf2711853d8ed3caa40c8e8bb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:03:4d:fc:7f:87:74:26:48:c0:c9:c3:45:
                    85:5d:70:4a:d4:bd:b0:59:58:d7:b8:9e:aa:c3:8f:
                    b4:96:b5:0b:ff:ce:81:1c:35:f5:83:e4:7a:ae:78:
                    9c:f2:ce:58:ab:32:f0:9e:6c:34:93:d9:da:96:e5:
                    27:e2:5a:2e:24:46:cf:db:16:82:67:81:23:94:4f:
                    9e:ec:51:e6:36:3b:0e:0f:ae:c0:97:12:b1:dd:1d:
                    76:fd:68:bd:f1:18:af:fc:76:f9:88:98:67:69:65:
                    ef:ff:90:49:bd:be:98:22:c4:52:7b:3f:fb:dc:ca:
                    e6:b4:95:33:51:3c:c9:74:54:ac:33:ad:f2:a6:18:
                    78:6e:a1:3e:c9:c8:d2:1d:35:7b:65:32:eb:e6:4e:
                    4c:b9:6d:01:0e:24:57:ee:2b:e2:4c:42:ed:75:7f:
                    7f:11:9f:d0:b8:89:de:d0:c6:35:ae:7a:a9:b3:65:
                    1e:04:16:6c:d6:59:e7:64:50:ed:34:75:4e:89:d6:
                    4f:76:50:75:68:a4:41:97:a4:87:01:23:8f:ba:3b:
                    2a:9c:56:05:54:d7:56:ad:0c:02:38:9f:22:11:d7:
                    8b:8e:e6:36:c5:1b:da:6b:8f:e9:13:07:8e:39:42:
                    cf:8d:fb:67:b4:6c:c9:2b:54:cb:00:cc:b6:1d:32:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:10:72:9A:F2:BD:F2:71:18:53:D8:ED:3C:AA:40:C8:E8:BB:14
            X509v3 Authority Key Identifier:
                keyid:4C:53:DF:47:B3:5C:BF:1F:5B:77:0B:F0:DA:D8:8B:0E:54:DE:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/cb53e4-4483-4a54-8e9e-2dce206bd7d7/1/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/cb53e4-4483-4a54-8e9e-2dce206bd7d7/1/TFPfR7Ncvx9bdwvw2tiLDlTeUeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:46:1a:94:b5:dc:18:b2:f6:55:97:29:2f:86:8f:cd:4c:
         6e:6a:5a:cb:8e:a0:15:f4:38:c0:4d:d0:9d:76:bf:1c:d5:b4:
         5e:d2:50:a5:e5:c1:30:d2:8b:a7:81:da:b0:69:f8:4d:8b:f4:
         e1:81:be:23:f3:0e:2c:15:54:5e:e5:42:61:1e:37:e7:10:df:
         05:7b:f8:91:10:f6:5f:8c:7a:79:7c:9d:6c:83:06:ca:9f:af:
         52:b6:62:24:25:b2:08:9d:8a:9a:29:db:1b:8a:a1:9f:c4:35:
         5d:da:1c:38:60:f2:9b:25:3e:96:7a:45:68:3a:9c:f2:92:56:
         6f:39:ef:bb:46:48:76:1e:a8:b4:02:29:54:16:4b:69:72:0e:
         78:eb:62:e9:95:a3:4b:e0:7c:0e:29:f5:a6:18:c8:4c:18:a6:
         9c:bd:5b:2b:6c:4b:05:0c:6c:f6:2a:c9:ab:94:d4:5e:13:f9:
         e2:0b:26:7d:d5:5b:eb:26:f2:93:3e:a7:23:df:e6:27:be:9c:
         13:f9:68:cc:fc:e7:d3:9a:3c:72:cc:17:11:11:05:4b:d8:ec:
         02:a1:ac:33:03:41:f7:7d:13:30:d7:62:14:bb:a9:4a:12:ee:
         31:ef:d5:58:6f:66:5d:72:92:3c:12:f0:f2:19:b0:29:8a:88:
         a6:12:43:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2h3DL4RPGZ8plzYSm/wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNTNkZjQ3YjM1Y2JmMWY1Yjc3MGJmMGRhZDg4YjBlNTRk
ZTUxZTQwHhcNMjQxMTI2MTkwMjAyWhcNMjQxMTI3MTkwMjAyWjAzMTEwLwYDVQQD
EyhlZGQxMTA3MjlhZjJiZGYyNzExODUzZDhlZDNjYWE0MGM4ZThiYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ8DTfx/h3QmSMDJw0WFXXBK1L2w
WVjXuJ6qw4+0lrUL/86BHDX1g+R6rnic8s5YqzLwnmw0k9naluUn4louJEbP2xaC
Z4EjlE+e7FHmNjsOD67AlxKx3R12/Wi98Riv/Hb5iJhnaWXv/5BJvb6YIsRSez/7
3MrmtJUzUTzJdFSsM63yphh4bqE+ycjSHTV7ZTLr5k5MuW0BDiRX7iviTELtdX9/
EZ/QuIne0MY1rnqps2UeBBZs1lnnZFDtNHVOidZPdlB1aKRBl6SHASOPujsqnFYF
VNdWrQwCOJ8iEdeLjuY2xRvaa4/pEweOOULPjftntGzJK1TLAMy2HTLLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3REHKa8r3ycRhT2O08qkDI6LsUMB8GA1UdIwQY
MBaAFExT30ezXL8fW3cL8NrYiw5U3lHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEZQZlI3TmN2eDliZHd2dzJ0aUxEbFRlVWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jYjUzZTQtNDQ4My00YTU0LThlOWUt
MmRjZTIwNmJkN2Q3LzEvVEZQZlI3TmN2eDliZHd2dzJ0aUxEbFRlVWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jYjUzZTQtNDQ4My00YTU0LThlOWUtMmRjZTIwNmJkN2Q3
LzEvVEZQZlI3TmN2eDliZHd2dzJ0aUxEbFRlVWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsJGGpS1
3Biy9lWXKS+Gj81Mbmpay46gFfQ4wE3QnXa/HNW0XtJQpeXBMNKLp4HasGn4TYv0
4YG+I/MOLBVUXuVCYR435xDfBXv4kRD2X4x6eXydbIMGyp+vUrZiJCWyCJ2Kminb
G4qhn8Q1XdocOGDymyU+lnpFaDqc8pJWbznvu0ZIdh6otAIpVBZLaXIOeOti6ZWj
S+B8Din1phjITBimnL1bK2xLBQxs9irJq5TUXhP54gsmfdVb6ybykz6nI9/mJ76c
E/lozPzn05o8cswXEREFS9jsAqGsMwNB930TMNdiFLupShLuMe/VWG9mXXKSPBLw
8hmwKYqIphJDCQ==
-----END CERTIFICATE-----