Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File:                     VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier:          d+Ua+o5lpnvk8Pc4HJQJTFdpsRCN1N8s4kV/Vk+KWkc=
Subject key identifier:   C6:7C:A0:96:13:6E:4E:71:AA:2F:73:75:13:03:12:76:17:6A:4D:A6
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer:       /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial:       01935689212A86BEF472536FDFCE5B6365C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number:          06A3
Signing time:             Sat 23 Nov 2024 01:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:47 +0000
Files and hashes:         1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: 2Hg75lLqxPtyyCnwlxK0gUjH3I2ELlK0Fk4kfQFHcSU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:21:2a:86:be:f4:72:53:6f:df:ce:5b:63:65:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
        Validity
            Not Before: Nov 23 01:00:47 2024 GMT
            Not After : Nov 24 01:00:47 2024 GMT
        Subject: CN=c67ca096136e4e71aa2f737513031276176a4da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:8f:d6:ac:74:25:b9:b0:93:27:d1:88:0b:
                    74:fd:ec:1f:07:1c:c8:de:23:f7:c2:c0:f9:cc:08:
                    e7:3e:6d:86:1d:38:d1:dc:9d:eb:20:84:c3:3b:ca:
                    c8:58:cd:2a:39:04:8a:53:f5:7a:b4:f0:e9:87:8b:
                    46:06:4d:38:f2:de:f3:7a:52:8e:0f:4b:4a:b0:14:
                    5f:8b:5b:6b:67:25:83:aa:d1:9d:31:4a:bc:4b:07:
                    9d:e8:49:26:c5:5b:1d:19:35:f4:ea:92:61:53:57:
                    fb:dd:14:53:c0:de:f7:ec:c3:02:6d:1f:68:d3:b7:
                    09:8d:c5:fa:29:f1:89:d3:3a:5a:0b:b8:ee:4f:c3:
                    5d:cc:44:c1:e5:0f:ae:f6:ed:2f:e3:8c:d4:91:9f:
                    33:03:7c:74:e8:8c:a6:6e:a4:1a:68:2b:56:0c:f4:
                    32:e1:87:07:03:b4:7f:8a:e4:bf:c5:62:2a:28:65:
                    a4:05:ca:15:a2:c9:2e:a2:aa:9e:95:f1:90:0b:9d:
                    35:a2:72:46:58:e2:b8:ca:fb:76:fb:3a:27:d3:ee:
                    2d:6c:b2:6d:7d:66:43:9b:62:16:0f:ba:03:d3:5e:
                    b5:15:41:9d:60:45:08:a5:0f:42:b6:07:1b:14:90:
                    d2:16:5a:c2:e5:ef:a9:2f:ea:c0:67:34:25:e7:f1:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:A0:96:13:6E:4E:71:AA:2F:73:75:13:03:12:76:17:6A:4D:A6
            X509v3 Authority Key Identifier:
                keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:a9:b8:8c:4c:4f:0a:01:4a:fb:da:2b:a2:7d:48:cd:90:
         15:60:ba:1f:a1:8e:45:c3:2a:8c:62:95:bc:d3:45:b7:88:52:
         b1:ad:56:b4:43:04:48:69:aa:eb:4f:b6:a4:ca:46:3b:24:31:
         22:0f:bd:ea:8c:47:19:4a:7d:4b:54:1c:ef:b3:1a:5a:81:88:
         23:2f:3c:98:c4:9a:cf:15:58:23:29:0b:16:4f:ba:7c:9d:97:
         fa:5c:b5:46:6e:21:4d:5f:c7:b4:14:a8:9e:e8:4d:6e:3e:de:
         26:f3:67:9b:fa:54:bf:f9:6a:89:ff:93:98:84:58:d1:92:8e:
         e1:e6:92:88:46:df:0a:fb:a9:b3:73:fe:4d:62:2d:b3:14:28:
         e9:f0:38:8c:c4:52:bd:2c:a1:38:3d:f6:d2:44:c1:40:a6:fe:
         f6:d0:57:c8:5f:9c:a5:44:6f:d0:c9:63:73:63:fb:8a:bb:86:
         55:4f:4c:55:8d:1a:eb:be:51:2d:98:f2:98:c0:0e:c4:f5:b3:
         ef:57:e1:a5:64:17:d5:97:f9:81:57:a9:82:4b:b5:9a:c4:f6:
         a7:c1:f5:60:b8:63:15:9f:4f:51:02:8b:d7:0b:91:b8:50:2a:
         bd:5a:a7:61:c6:aa:5d:83:fa:01:e6:df:78:95:70:5e:22:69:
         9f:04:53:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiSEqhr70clNv385bY2XJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODBhOTE2NTFlMzc4ZWViZDg3MWQwYWRkNjk1ZTY3N2Jm
NTBkMmUwHhcNMjQxMTIzMDEwMDQ3WhcNMjQxMTI0MDEwMDQ3WjAzMTEwLwYDVQQD
EyhjNjdjYTA5NjEzNmU0ZTcxYWEyZjczNzUxMzAzMTI3NjE3NmE0ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ESP1qx0JbmwkyfRiAt0/ewfBxzI
3iP3wsD5zAjnPm2GHTjR3J3rIITDO8rIWM0qOQSKU/V6tPDph4tGBk048t7zelKO
D0tKsBRfi1trZyWDqtGdMUq8Swed6EkmxVsdGTX06pJhU1f73RRTwN737MMCbR9o
07cJjcX6KfGJ0zpaC7juT8NdzETB5Q+u9u0v44zUkZ8zA3x06IymbqQaaCtWDPQy
4YcHA7R/iuS/xWIqKGWkBcoVoskuoqqelfGQC501onJGWOK4yvt2+zon0+4tbLJt
fWZDm2IWD7oD0161FUGdYEUIpQ9CtgcbFJDSFlrC5e+pL+rAZzQl5/FCpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ8oJYTbk5xqi9zdRMDEnYXak2mMB8GA1UdIwQY
MBaAFFSAqRZR43juvYcdCt1pXmd79Q0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQt
YzlhNWNkOWMxNDRkLzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQtYzlhNWNkOWMxNDRk
LzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMipuIxM
TwoBSvvaK6J9SM2QFWC6H6GORcMqjGKVvNNFt4hSsa1WtEMESGmq60+2pMpGOyQx
Ig+96oxHGUp9S1Qc77MaWoGIIy88mMSazxVYIykLFk+6fJ2X+ly1Rm4hTV/HtBSo
nuhNbj7eJvNnm/pUv/lqif+TmIRY0ZKO4eaSiEbfCvups3P+TWItsxQo6fA4jMRS
vSyhOD320kTBQKb+9tBXyF+cpURv0Mljc2P7iruGVU9MVY0a675RLZjymMAOxPWz
71fhpWQX1Zf5gVepgku1msT2p8H1YLhjFZ9PUQKL1wuRuFAqvVqnYcaqXYP6Aebf
eJVwXiJpnwRTvA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:17 2024 by rpki-client on console-fra.rpki-client.org