Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File:                     x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier:          2Jhr54R36NTD1O+O4PrCyRBMcAlHeBy59KeTjbjowX4=
Subject key identifier:   B9:35:81:7E:64:C8:7D:CA:54:F4:DF:2E:1B:A5:0E:4C:F9:7E:CA:AD
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer:       /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial:       019369D9DF6EAF73D32757B3CB2DD71BF4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number:          07CB
Signing time:             Tue 26 Nov 2024 19:01:46 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:46 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:46 +0000
Files and hashes:         1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: Ee8xm4BEAgtHjbGVUiUYw1qZg6eTZwOBi2xM+qgA1qE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:df:6e:af:73:d3:27:57:b3:cb:2d:d7:1b:f4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
        Validity
            Not Before: Nov 26 19:01:46 2024 GMT
            Not After : Nov 27 19:01:46 2024 GMT
        Subject: CN=b935817e64c87dca54f4df2e1ba50e4cf97ecaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:45:af:61:98:9b:0a:20:63:ac:8f:9c:54:
                    76:bc:fd:db:d3:f0:c2:67:e5:23:55:4e:cf:58:14:
                    4e:b3:de:09:cb:fd:28:9e:ff:3e:58:0c:ca:29:be:
                    75:be:95:ec:20:f0:8f:7b:31:32:42:2e:3a:20:e2:
                    a7:77:bd:fc:29:73:de:dc:6a:35:41:52:97:76:4d:
                    0d:f6:67:af:74:03:24:f9:2b:a3:25:cb:33:5f:50:
                    86:70:d7:01:35:b9:d9:a8:86:ea:c5:0c:97:b7:32:
                    b7:81:b2:ee:8b:53:a9:56:74:07:92:56:b4:32:d0:
                    3e:4d:05:12:00:ce:e0:ca:1f:1e:9f:ff:34:95:e3:
                    89:b3:6d:d9:e5:41:86:54:3d:36:c0:74:eb:c5:45:
                    ad:f5:07:63:43:99:3b:c4:ef:e8:ea:3a:89:9f:7b:
                    37:d7:5e:c1:d3:93:fb:6d:29:23:4b:ff:5f:3e:59:
                    6f:2e:b1:a5:38:90:fb:b0:95:fe:a9:71:d2:92:bc:
                    5c:78:94:c0:61:9f:5a:cb:b2:9c:d8:c2:af:2a:a2:
                    06:cf:1e:e1:a6:94:2e:45:4f:68:eb:31:d2:cc:91:
                    aa:51:83:31:9e:8d:0c:7a:08:e3:e1:e4:bf:45:36:
                    99:87:8a:e0:b5:dd:1b:36:24:d0:0c:24:86:73:00:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:81:7E:64:C8:7D:CA:54:F4:DF:2E:1B:A5:0E:4C:F9:7E:CA:AD
            X509v3 Authority Key Identifier:
                keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:bb:44:c7:22:35:49:dc:cf:16:be:3b:35:f8:0d:31:4c:
         4e:09:1c:4c:66:3d:c8:83:1b:54:01:34:2f:71:77:03:b1:57:
         e3:2e:6d:59:32:a6:7f:4b:bd:3f:6e:1a:92:9d:6d:a5:e6:86:
         85:f3:76:b5:02:aa:5f:30:e4:60:09:e9:67:01:28:b3:57:e5:
         f6:1d:b6:dc:a3:a9:de:66:34:f8:79:33:91:bc:98:1b:7f:0c:
         b2:01:b4:44:34:01:aa:81:5c:76:a0:61:bb:78:8f:54:a4:4d:
         1d:7a:74:43:d8:6d:45:12:54:44:92:97:1b:f3:1b:70:b8:35:
         3e:be:c6:b3:aa:38:56:68:cf:c4:0f:8d:a1:0b:87:ed:00:4a:
         54:e2:4c:46:ca:37:cf:0d:2a:e4:10:15:75:82:b9:0a:42:61:
         24:b8:58:0b:64:03:3b:31:7f:de:1e:a4:c9:ae:5b:6d:f5:ce:
         87:63:b7:4c:43:b2:35:c4:ef:6b:34:cf:48:bf:5a:2b:a1:34:
         91:d0:6f:a6:c6:51:16:ef:23:4a:2e:a2:39:a8:01:2d:72:57:
         16:55:08:7b:65:2b:69:dc:2d:ef:e4:51:5a:20:40:fb:ed:b3:
         0d:32:04:ee:1a:d3:c3:0e:47:d7:b6:08:f1:9b:c8:9c:27:ef:
         d2:bb:94:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2d9ur3PTJ1ezyy3XG/TxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NjMxOTVkNWNmYzdiOTUyNzM1MDY0MDZmYTkwOTFjMjJm
NmM0MjQwHhcNMjQxMTI2MTkwMTQ2WhcNMjQxMTI3MTkwMTQ2WjAzMTEwLwYDVQQD
EyhiOTM1ODE3ZTY0Yzg3ZGNhNTRmNGRmMmUxYmE1MGU0Y2Y5N2VjYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QhFr2GYmwogY6yPnFR2vP3b0/DC
Z+UjVU7PWBROs94Jy/0onv8+WAzKKb51vpXsIPCPezEyQi46IOKnd738KXPe3Go1
QVKXdk0N9mevdAMk+SujJcszX1CGcNcBNbnZqIbqxQyXtzK3gbLui1OpVnQHkla0
MtA+TQUSAM7gyh8en/80leOJs23Z5UGGVD02wHTrxUWt9QdjQ5k7xO/o6jqJn3s3
117B05P7bSkjS/9fPllvLrGlOJD7sJX+qXHSkrxceJTAYZ9ay7Kc2MKvKqIGzx7h
ppQuRU9o6zHSzJGqUYMxno0Megjj4eS/RTaZh4rgtd0bNiTQDCSGcwBKRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk1gX5kyH3KVPTfLhulDkz5fsqtMB8GA1UdIwQY
MBaAFMdjGV1c/HuVJzUGQG+pCRwi9sQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUt
MzQ5YmRjZmY0NDIwLzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUtMzQ5YmRjZmY0NDIw
LzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNG7RMci
NUnczxa+OzX4DTFMTgkcTGY9yIMbVAE0L3F3A7FX4y5tWTKmf0u9P24akp1tpeaG
hfN2tQKqXzDkYAnpZwEos1fl9h223KOp3mY0+HkzkbyYG38MsgG0RDQBqoFcdqBh
u3iPVKRNHXp0Q9htRRJURJKXG/MbcLg1Pr7Gs6o4VmjPxA+NoQuH7QBKVOJMRso3
zw0q5BAVdYK5CkJhJLhYC2QDOzF/3h6kya5bbfXOh2O3TEOyNcTvazTPSL9aK6E0
kdBvpsZRFu8jSi6iOagBLXJXFlUIe2Uradwt7+RRWiBA++2zDTIE7hrTww5H17YI
8ZvInCfv0ruUHw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:13 2024 by rpki-client on console-ams.rpki-client.org