Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File:                     o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier:          agnv9qi9Wb0GeQQwSsT2D/ucEc68Ln9JbWOCF57W5yc=
Subject key identifier:   53:74:37:B4:26:C5:C7:BD:DC:2D:27:8E:B4:EB:80:3F:23:CC:CF:11
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer:       /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial:       0193587970C510ADD9837EA573B2D9BCD5A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:02:53 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:53 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:53 +0000
Files and hashes:         1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: urL7rewtlv1l0YvkzkmTuYEPjGw+fkXSyvrobqv8LME=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:70:c5:10:ad:d9:83:7e:a5:73:b2:d9:bc:d5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
        Validity
            Not Before: Nov 23 10:02:53 2024 GMT
            Not After : Nov 24 10:02:53 2024 GMT
        Subject: CN=537437b426c5c7bddc2d278eb4eb803f23cccf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:55:da:8b:03:23:30:15:fb:66:27:ed:e1:
                    43:73:e9:16:a2:32:06:c4:34:5d:1f:a4:05:6d:ff:
                    1c:3d:18:03:4e:ea:eb:19:0f:67:7b:6a:51:9a:0d:
                    d0:9b:0d:bf:3f:8e:b8:01:fb:01:a5:25:b7:c2:2b:
                    23:ea:7c:58:fb:d2:36:30:a5:37:50:1a:81:d8:da:
                    e9:1f:2b:c3:95:48:9c:98:2e:7d:dd:24:e3:5e:79:
                    3c:50:5a:b3:1f:6e:43:f6:1d:fd:8e:4c:39:0e:25:
                    0e:2c:d8:0c:06:68:18:c3:2b:f4:90:9d:6a:dc:05:
                    94:4f:e9:0a:30:e7:f1:e4:4b:cf:20:4d:ad:92:19:
                    fc:19:88:97:3f:9d:ce:45:72:a5:25:c7:06:05:e0:
                    c9:2f:73:42:e4:ae:66:1c:24:63:92:4c:68:f9:a3:
                    6b:43:bd:4d:c8:6a:8b:11:50:ca:9b:2b:49:6c:50:
                    af:76:03:1e:fe:36:f9:83:5a:80:93:3c:5d:a6:ae:
                    0c:e8:e3:ce:45:81:87:1c:ff:84:af:83:7e:2d:6d:
                    c3:8a:79:a4:22:37:26:59:9f:f2:f3:62:24:24:f9:
                    e7:36:52:02:97:48:81:3f:47:09:40:20:5d:04:18:
                    2b:51:12:cc:22:15:6d:a3:ec:51:f2:cd:7f:99:45:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:74:37:B4:26:C5:C7:BD:DC:2D:27:8E:B4:EB:80:3F:23:CC:CF:11
            X509v3 Authority Key Identifier:
                keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:68:1f:e0:ee:02:24:ba:82:33:a6:20:0d:7d:5e:e6:fe:79:
         1b:c0:03:d9:25:e7:d8:86:0c:db:aa:f0:ee:db:bb:c5:a2:6c:
         29:76:12:54:64:3d:34:00:35:ff:68:14:39:8c:b9:b7:e3:8d:
         ca:03:82:db:bc:70:f6:eb:ae:6a:76:5a:0c:04:0d:10:5f:dc:
         6f:d1:3f:0c:8d:29:29:60:be:86:c4:43:09:28:cb:f1:39:e4:
         3e:22:ac:76:84:21:b1:b6:2b:04:1b:4d:02:70:12:1c:69:16:
         90:da:4f:49:8f:3e:0a:73:46:3c:71:b3:fd:86:b0:7e:1f:e2:
         af:a1:30:fb:d3:09:d2:97:cf:11:10:b9:ed:aa:e8:5a:6d:6b:
         a4:ff:d7:46:4c:bd:0f:70:fd:01:05:8c:5e:a1:25:46:65:e1:
         c6:9e:6c:1a:a3:e1:2c:93:f4:48:b5:d6:ed:12:00:40:a8:96:
         db:ef:8a:0b:12:f1:51:08:66:c8:5a:f7:52:38:bc:c1:1f:0f:
         a2:19:51:60:d0:e7:00:ab:1c:d2:0c:01:22:b2:a1:3a:b5:ae:
         9c:38:b8:e4:52:c4:60:eb:5f:ba:d0:70:ee:74:78:a2:c4:60:
         99:ac:ed:a3:5c:99:8d:81:2e:4c:39:1c:f4:72:a4:52:1c:96:
         ff:ff:d8:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeXDFEK3Zg36lc7LZvNWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjQxMTIzMTAwMjUzWhcNMjQxMTI0MTAwMjUzWjAzMTEwLwYDVQQD
Eyg1Mzc0MzdiNDI2YzVjN2JkZGMyZDI3OGViNGViODAzZjIzY2NjZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshpV2osDIzAV+2Yn7eFDc+kWojIG
xDRdH6QFbf8cPRgDTurrGQ9ne2pRmg3Qmw2/P464AfsBpSW3wisj6nxY+9I2MKU3
UBqB2NrpHyvDlUicmC593STjXnk8UFqzH25D9h39jkw5DiUOLNgMBmgYwyv0kJ1q
3AWUT+kKMOfx5EvPIE2tkhn8GYiXP53ORXKlJccGBeDJL3NC5K5mHCRjkkxo+aNr
Q71NyGqLEVDKmytJbFCvdgMe/jb5g1qAkzxdpq4M6OPORYGHHP+Er4N+LW3Dinmk
IjcmWZ/y82IkJPnnNlICl0iBP0cJQCBdBBgrURLMIhVto+xR8s1/mUVizwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN0N7Qmxce93C0njrTrgD8jzM8RMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemgf4O4C
JLqCM6YgDX1e5v55G8AD2SXn2IYM26rw7tu7xaJsKXYSVGQ9NAA1/2gUOYy5t+ON
ygOC27xw9uuuanZaDAQNEF/cb9E/DI0pKWC+hsRDCSjL8TnkPiKsdoQhsbYrBBtN
AnASHGkWkNpPSY8+CnNGPHGz/Yawfh/ir6Ew+9MJ0pfPERC57aroWm1rpP/XRky9
D3D9AQWMXqElRmXhxp5sGqPhLJP0SLXW7RIAQKiW2++KCxLxUQhmyFr3Uji8wR8P
ohlRYNDnAKsc0gwBIrKhOrWunDi45FLEYOtfutBw7nR4osRgmazto1yZjYEuTDkc
9HKkUhyW///Y9A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:59 2024 by rpki-client on console-fra.rpki-client.org