Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          R7n7lF+k+2JCzGcba2Hp/m6RPl6jEwMJLrt8C24aNik=
Subject key identifier:   44:37:50:16:8A:F9:10:C9:EE:83:6F:DD:2E:AA:F6:88:BA:6A:AC:4E
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       019369DB1D3FB67AF72EC82094A94E6E285F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:03:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:07 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: Nbyi0q4ii0jsNEUoAIeu8D0nEmsrNlAwBOzQtUlMAu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:1d:3f:b6:7a:f7:2e:c8:20:94:a9:4e:6e:28:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: Nov 26 19:03:07 2024 GMT
            Not After : Nov 27 19:03:07 2024 GMT
        Subject: CN=443750168af910c9ee836fdd2eaaf688ba6aac4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:cd:52:fb:1d:b5:9d:3a:91:78:89:04:82:
                    f3:9a:8a:b7:39:74:e0:a6:19:5f:5b:4c:34:f1:dc:
                    cf:81:88:d9:80:2e:d8:69:38:00:4c:95:eb:e0:73:
                    27:be:ab:e3:7f:2d:81:fe:ba:38:64:8b:35:3a:13:
                    8f:03:12:66:bb:0d:dc:08:c9:4c:34:55:3f:3e:cc:
                    28:ed:3d:35:6f:0a:6b:fc:27:2a:c4:50:86:a8:62:
                    98:79:14:0d:b3:11:d0:3c:46:c9:24:8d:ae:89:eb:
                    98:43:ba:bc:9e:5d:53:b7:60:e6:5f:16:d8:d1:7a:
                    84:0d:47:b1:42:90:5d:3a:63:df:a8:cb:5c:db:27:
                    3e:82:88:d6:a5:4a:e9:b6:9e:e8:80:fa:49:df:6f:
                    6a:04:75:d1:67:08:4b:df:83:0e:24:8b:b7:69:c3:
                    a9:e3:06:1a:63:c8:7b:3d:3c:7e:d1:0a:ef:8c:67:
                    15:fa:a4:17:e4:fd:05:f8:58:47:73:99:0c:c9:55:
                    86:64:a3:48:03:13:d6:37:36:7b:87:9b:c5:27:41:
                    d7:4f:10:48:f7:2e:ca:78:9a:bc:b5:5f:a5:72:5c:
                    8a:0d:8f:a8:93:1e:4f:bb:b6:94:ef:a6:eb:ec:65:
                    8b:cb:26:1f:03:af:c4:54:54:5f:2f:70:be:39:72:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:50:16:8A:F9:10:C9:EE:83:6F:DD:2E:AA:F6:88:BA:6A:AC:4E
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:19:ae:94:7f:8e:b8:d8:5b:b7:bc:aa:8e:3c:91:8b:19:91:
         9c:cf:94:80:f1:bf:e0:b4:29:4d:ec:e0:4f:82:8a:5f:31:8b:
         0f:c8:95:bd:ce:e9:de:c4:99:b1:ec:8f:ea:1e:a7:dc:f2:5e:
         52:7b:e9:cd:73:ee:d7:41:5e:22:a6:ae:fe:3b:e1:1c:60:4b:
         c3:7d:12:15:dd:85:fe:ba:bb:e0:6e:2d:af:ba:5d:5d:a0:ed:
         9d:5b:31:34:94:33:c9:2a:e3:d4:94:6d:10:1f:02:2a:5e:0f:
         6e:5d:75:6f:ad:d5:db:08:37:12:48:99:21:8a:dd:1b:a4:60:
         d9:45:d1:d0:59:a9:39:7b:19:f9:13:e9:b6:1d:8f:1f:d6:88:
         00:c5:86:b7:e6:fd:df:98:9b:1d:5d:67:06:3b:d1:00:fb:b1:
         77:dd:94:de:f2:48:c7:7a:12:ff:87:10:e1:52:3b:f5:22:61:
         d7:22:45:4f:30:29:1c:bf:2e:d9:9a:d3:c7:e2:57:a2:0d:3e:
         4f:3a:65:19:40:06:45:6c:6d:b6:0d:d7:1e:77:da:11:2c:48:
         1f:33:b0:1a:ca:5c:84:7d:06:d2:00:d3:29:3e:51:ac:90:98:
         85:24:d4:12:4a:79:15:48:0a:2d:02:37:3a:23:7c:4c:12:83:
         50:18:ae:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2x0/tnr3LsgglKlObihfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZGQ3NDZlODE3NDc2ZDU1NzhmYmNiZWQ1NzRkN2MxYWQy
NjQxZjEwHhcNMjQxMTI2MTkwMzA3WhcNMjQxMTI3MTkwMzA3WjAzMTEwLwYDVQQD
Eyg0NDM3NTAxNjhhZjkxMGM5ZWU4MzZmZGQyZWFhZjY4OGJhNmFhYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+3NUvsdtZ06kXiJBILzmoq3OXTg
phlfW0w08dzPgYjZgC7YaTgATJXr4HMnvqvjfy2B/ro4ZIs1OhOPAxJmuw3cCMlM
NFU/Pswo7T01bwpr/CcqxFCGqGKYeRQNsxHQPEbJJI2uieuYQ7q8nl1Tt2DmXxbY
0XqEDUexQpBdOmPfqMtc2yc+gojWpUrptp7ogPpJ329qBHXRZwhL34MOJIu3acOp
4wYaY8h7PTx+0QrvjGcV+qQX5P0F+FhHc5kMyVWGZKNIAxPWNzZ7h5vFJ0HXTxBI
9y7KeJq8tV+lclyKDY+okx5Pu7aU76br7GWLyyYfA6/EVFRfL3C+OXKFhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ3UBaK+RDJ7oNv3S6q9oi6aqxOMB8GA1UdIwQY
MBaAFOzddG6BdHbVV4+8vtV018GtJkHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEt
MjM4MzNmZTAwOWFhLzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xYzdiZTgtNTczZC00NTE5LWEyMTEtMjM4MzNmZTAwOWFh
LzEvN04xMGJvRjBkdFZYajd5LTFYVFh3YTBtUWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBmulH+O
uNhbt7yqjjyRixmRnM+UgPG/4LQpTezgT4KKXzGLD8iVvc7p3sSZseyP6h6n3PJe
UnvpzXPu10FeIqau/jvhHGBLw30SFd2F/rq74G4tr7pdXaDtnVsxNJQzySrj1JRt
EB8CKl4Pbl11b63V2wg3EkiZIYrdG6Rg2UXR0FmpOXsZ+RPpth2PH9aIAMWGt+b9
35ibHV1nBjvRAPuxd92U3vJIx3oS/4cQ4VI79SJh1yJFTzApHL8u2ZrTx+JXog0+
TzplGUAGRWxttg3XHnfaESxIHzOwGspchH0G0gDTKT5RrJCYhSTUEkp5FUgKLQI3
OiN8TBKDUBiuSw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:53 2024 by rpki-client on console-ams.rpki-client.org