Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          yaXVb9UQVFh0hCJ/Qztwe25vbxWqRX377okDE3/CuY0=
Subject key identifier:   65:75:39:9B:97:92:5C:33:27:58:7A:B1:13:BF:DE:70:27:EE:70:ED
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       019356F713FFA089DCAE14EB353DFF392DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          0714
Signing time:             Sat 23 Nov 2024 03:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:53 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: 7xJwponMj1Ugz5+Wn/iD+bTKa9MB6Lx0syVT2mWW5xc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:13:ff:a0:89:dc:ae:14:eb:35:3d:ff:39:2d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Nov 23 03:00:53 2024 GMT
            Not After : Nov 24 03:00:53 2024 GMT
        Subject: CN=6575399b97925c3327587ab113bfde7027ee70ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:31:d1:fc:df:a5:d8:a0:69:88:4d:f7:35:
                    d7:3b:e8:af:43:b3:e1:39:49:a3:38:3d:51:04:2c:
                    ea:bb:49:d0:3f:20:8b:d8:80:a6:a7:e5:d5:dd:4c:
                    80:e4:da:4d:24:60:1a:02:7d:ee:4c:2e:d4:6b:d6:
                    4c:31:ce:f9:92:93:ae:d9:70:1b:f1:df:97:67:04:
                    83:ea:45:ff:20:ab:7f:7f:85:42:ba:ff:4e:1c:8d:
                    93:72:36:5c:d0:47:c7:94:7d:4f:c3:eb:02:7e:a3:
                    40:4a:46:64:9d:27:b6:30:ac:96:6a:8a:fe:65:5f:
                    d3:9b:46:e2:71:c6:06:ab:2e:5b:c7:55:ed:03:ce:
                    89:a7:53:d2:a4:08:ad:5f:1e:03:bd:9a:94:a7:cd:
                    30:d7:1e:7e:ad:48:74:00:8c:52:42:5f:64:b1:8d:
                    e0:21:08:18:e3:60:95:32:94:84:35:04:89:c2:0b:
                    59:5b:b1:ca:ec:6c:b6:d8:af:20:8a:8c:46:2a:40:
                    06:72:2d:72:70:b0:8f:88:36:a3:93:42:e1:70:93:
                    88:20:2d:b0:4f:c7:af:fc:b4:87:cf:5d:a8:80:32:
                    fb:eb:b8:93:c4:8d:3d:55:8d:ce:7d:37:a9:99:b4:
                    ff:ea:ad:40:e8:5f:6f:a1:f7:6d:1e:85:5d:1f:e1:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:75:39:9B:97:92:5C:33:27:58:7A:B1:13:BF:DE:70:27:EE:70:ED
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:28:76:af:6b:5c:cd:71:78:96:79:f7:a9:80:28:16:70:e1:
         f2:6b:00:44:09:99:ab:4d:88:b4:90:fe:47:fb:f9:71:55:94:
         95:28:83:83:7a:2e:ea:ff:cb:66:37:d5:05:79:d1:a4:e1:c3:
         54:5b:be:58:51:3b:93:aa:c2:ed:51:5b:20:37:3c:b7:c5:09:
         a5:23:c0:53:6c:3f:11:c9:9f:9c:6d:0a:08:aa:dd:b9:93:69:
         c4:bd:4f:ee:9d:c1:4d:5c:2a:38:27:0a:4b:a2:36:27:59:9d:
         a5:33:71:73:0f:6a:c5:d0:e6:68:d0:ab:8a:b1:46:1a:46:69:
         df:c4:8d:80:af:7e:5f:36:31:48:6f:b0:a7:ab:17:57:c3:dd:
         34:21:03:b6:75:ef:6b:60:37:bb:57:c8:f0:88:7a:0e:7e:39:
         33:e1:7a:62:71:f6:e0:f9:d9:b3:50:00:5c:56:03:7b:be:0c:
         0e:c1:50:e8:92:fb:5c:56:09:70:c9:d5:1b:b9:14:00:ec:13:
         0a:9d:6d:21:fa:1e:b4:dc:e4:47:bb:30:2b:b6:bc:5b:3f:6a:
         19:93:6e:97:50:c9:96:21:3f:84:d5:4d:6e:3d:fe:e4:a9:03:
         b9:c5:d5:b0:8a:d0:e9:2b:1c:05:a0:70:df:b2:cf:01:b8:00:
         88:dc:56:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9xP/oIncrhTrNT3/OS2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw
NGIwMWYwHhcNMjQxMTIzMDMwMDUzWhcNMjQxMTI0MDMwMDUzWjAzMTEwLwYDVQQD
Eyg2NTc1Mzk5Yjk3OTI1YzMzMjc1ODdhYjExM2JmZGU3MDI3ZWU3MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDMx0fzfpdigaYhN9zXXO+ivQ7Ph
OUmjOD1RBCzqu0nQPyCL2ICmp+XV3UyA5NpNJGAaAn3uTC7Ua9ZMMc75kpOu2XAb
8d+XZwSD6kX/IKt/f4VCuv9OHI2TcjZc0EfHlH1Pw+sCfqNASkZknSe2MKyWaor+
ZV/Tm0biccYGqy5bx1XtA86Jp1PSpAitXx4DvZqUp80w1x5+rUh0AIxSQl9ksY3g
IQgY42CVMpSENQSJwgtZW7HK7Gy22K8gioxGKkAGci1ycLCPiDajk0LhcJOIIC2w
T8ev/LSHz12ogDL767iTxI09VY3OfTepmbT/6q1A6F9vofdtHoVdH+Hb9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGV1OZuXklwzJ1h6sRO/3nAn7nDtMB8GA1UdIwQY
MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt
ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm
LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCh2r2tc
zXF4lnn3qYAoFnDh8msARAmZq02ItJD+R/v5cVWUlSiDg3ou6v/LZjfVBXnRpOHD
VFu+WFE7k6rC7VFbIDc8t8UJpSPAU2w/EcmfnG0KCKrduZNpxL1P7p3BTVwqOCcK
S6I2J1mdpTNxcw9qxdDmaNCrirFGGkZp38SNgK9+XzYxSG+wp6sXV8PdNCEDtnXv
a2A3u1fI8Ih6Dn45M+F6YnH24PnZs1AAXFYDe74MDsFQ6JL7XFYJcMnVG7kUAOwT
Cp1tIfoetNzkR7swK7a8Wz9qGZNul1DJliE/hNVNbj3+5KkDucXVsIrQ6SscBaBw
37LPAbgAiNxW0A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:44 2024 by rpki-client on console-fra.rpki-client.org