Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
File:                     6X9KenczHtX3zn7oBowu29LQ034.mft (raw, json)
Hash identifier:          2DSv7K/tsjKDU+o80cw13hafCMX1mws1He5f4I5mbW4=
Subject key identifier:   C9:54:D8:12:C3:AC:D3:A5:B3:00:62:AF:C9:51:F0:74:15:93:E0:48
Authority key identifier: E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E
Certificate issuer:       /CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
Certificate serial:       01935688E411C581A993047B29B7975EDCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:32 +0000
Files and hashes:         1: 6X9KenczHtX3zn7oBowu29LQ034.crl (hash: xciNVcBS+/VvK0EOP85NcaXAmgPK7aYk4nUwuta/jcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:e4:11:c5:81:a9:93:04:7b:29:b7:97:5e:dc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97f4a7a77331ed5f7ce7ee8068c2edbd2d0d37e
        Validity
            Not Before: Nov 23 01:00:32 2024 GMT
            Not After : Nov 24 01:00:32 2024 GMT
        Subject: CN=c954d812c3acd3a5b30062afc951f0741593e048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:09:d9:91:b5:7f:6e:d8:20:b1:a8:e9:c5:
                    12:31:54:03:39:ae:0e:bc:70:6f:50:ed:26:36:0a:
                    5b:7a:7d:22:c0:86:15:f8:85:fd:0a:14:b3:4b:19:
                    77:20:a0:4c:ae:c9:0e:5b:8e:08:84:cd:05:d4:53:
                    e6:67:60:2f:bf:9b:94:9e:d3:61:84:06:33:f3:d3:
                    6b:f5:c8:75:90:1a:6f:48:82:f9:50:3b:98:01:ba:
                    13:d8:ba:00:85:28:71:ff:de:48:5a:d3:76:01:84:
                    0f:e9:75:c3:e4:25:3c:1a:9b:5d:e8:ee:5a:77:01:
                    90:7f:84:52:a1:70:f4:e3:63:d0:8f:69:92:c5:a0:
                    1b:2d:e0:fc:2a:f2:9e:3a:51:73:ce:29:58:35:18:
                    39:30:da:34:1f:f0:ef:11:8e:42:03:25:1d:78:62:
                    d7:31:69:c7:7c:39:0e:ed:5f:ae:84:fe:87:97:c4:
                    16:f5:95:4b:5e:28:1a:49:0b:f0:f5:31:18:ae:8b:
                    76:c5:7a:19:4e:da:42:3c:1e:25:1a:dd:7b:ad:6f:
                    f2:fa:24:4e:f5:da:0c:96:97:fb:00:11:d2:fc:3d:
                    13:bd:81:bd:d8:ac:96:86:c2:7e:3b:d4:34:4f:89:
                    6e:d0:b7:7d:45:fa:18:cc:53:93:7b:a7:28:cc:00:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:D8:12:C3:AC:D3:A5:B3:00:62:AF:C9:51:F0:74:15:93:E0:48
            X509v3 Authority Key Identifier:
                keyid:E9:7F:4A:7A:77:33:1E:D5:F7:CE:7E:E8:06:8C:2E:DB:D2:D0:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6X9KenczHtX3zn7oBowu29LQ034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/442506-53f9-47db-b3b8-3ab21b523000/1/6X9KenczHtX3zn7oBowu29LQ034.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:62:92:22:20:11:db:b4:cb:18:f2:99:9b:6c:8a:64:78:1a:
         48:c7:34:69:24:4b:bf:85:68:cc:c9:9b:a1:01:4c:0d:ba:2b:
         64:5a:45:cb:88:ca:da:e6:ca:52:2d:dc:6b:c3:71:84:c7:18:
         3e:b2:4a:bd:f7:51:bb:3a:43:6d:1d:1b:38:be:23:8a:7a:32:
         27:24:20:14:3a:f5:d5:e5:6b:23:0c:83:fd:05:69:2b:55:50:
         32:a6:76:54:07:58:8e:13:ac:9c:32:ac:ec:a9:1a:85:b5:8f:
         4d:61:24:ef:55:f1:54:e1:47:fd:1b:48:91:8d:ae:0f:96:e1:
         84:e3:d8:ef:4c:b3:ee:c3:26:06:9d:3d:5d:04:b2:35:6a:5c:
         49:ba:66:0b:84:2f:01:5f:f6:71:37:3c:e2:59:5a:5e:f0:46:
         a3:34:8a:06:e3:50:c7:9b:c0:f0:5c:f4:48:06:b8:ef:bd:33:
         61:8f:fc:95:67:2d:65:ef:f9:37:c2:6c:87:cf:cd:b1:a3:1e:
         73:4e:06:24:57:37:22:df:f0:d1:a0:66:7a:d3:64:e7:bf:ba:
         fc:10:95:60:7a:71:a6:0b:33:23:46:3d:19:8e:17:f1:a7:0b:
         52:27:52:d3:be:a3:43:43:05:e9:81:2a:eb:15:d6:43:7b:37:
         16:e2:50:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOQRxYGpkwR7KbeXXtymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5N2Y0YTdhNzczMzFlZDVmN2NlN2VlODA2OGMyZWRiZDJk
MGQzN2UwHhcNMjQxMTIzMDEwMDMyWhcNMjQxMTI0MDEwMDMyWjAzMTEwLwYDVQQD
EyhjOTU0ZDgxMmMzYWNkM2E1YjMwMDYyYWZjOTUxZjA3NDE1OTNlMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfgJ2ZG1f27YILGo6cUSMVQDOa4O
vHBvUO0mNgpben0iwIYV+IX9ChSzSxl3IKBMrskOW44IhM0F1FPmZ2Avv5uUntNh
hAYz89Nr9ch1kBpvSIL5UDuYAboT2LoAhShx/95IWtN2AYQP6XXD5CU8Gptd6O5a
dwGQf4RSoXD042PQj2mSxaAbLeD8KvKeOlFzzilYNRg5MNo0H/DvEY5CAyUdeGLX
MWnHfDkO7V+uhP6Hl8QW9ZVLXigaSQvw9TEYrot2xXoZTtpCPB4lGt17rW/y+iRO
9doMlpf7ABHS/D0TvYG92KyWhsJ+O9Q0T4lu0Ld9RfoYzFOTe6cozADkZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlU2BLDrNOlswBir8lR8HQVk+BIMB8GA1UdIwQY
MBaAFOl/Snp3Mx7V985+6AaMLtvS0NN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NDI1MDYtNTNmOS00N2RiLWIzYjgt
M2FiMjFiNTIzMDAwLzEvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy80NDI1MDYtNTNmOS00N2RiLWIzYjgtM2FiMjFiNTIzMDAw
LzEvNlg5S2VuY3pIdFgzem43b0Jvd3UyOUxRMDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2KSIiAR
27TLGPKZm2yKZHgaSMc0aSRLv4VozMmboQFMDborZFpFy4jK2ubKUi3ca8NxhMcY
PrJKvfdRuzpDbR0bOL4jinoyJyQgFDr11eVrIwyD/QVpK1VQMqZ2VAdYjhOsnDKs
7KkahbWPTWEk71XxVOFH/RtIkY2uD5bhhOPY70yz7sMmBp09XQSyNWpcSbpmC4Qv
AV/2cTc84llaXvBGozSKBuNQx5vA8Fz0SAa4770zYY/8lWctZe/5N8Jsh8/NsaMe
c04GJFc3It/w0aBmetNk57+6/BCVYHpxpgszI0Y9GY4X8acLUidS076jQ0MF6YEq
6xXWQ3s3FuJQzg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:49 2024 by rpki-client on console-ams.rpki-client.org