Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File:                     c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier:          GlJlk+9D/topLfXFCGnbm6XfPC1A75yNN26DdEHsK2I=
Subject key identifier:   74:3A:D7:06:71:A6:F7:C1:AD:A8:C1:16:FB:23:B6:2A:04:1C:31:F1
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer:       /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial:       019356895736539F8B4EEDFF8D5637976F2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number:          0E77
Signing time:             Sat 23 Nov 2024 01:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:01 +0000
Files and hashes:         1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: rp4j8gprydALBP2oDg49tCby9LVfMm6X1nkeh7DE+rg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:57:36:53:9f:8b:4e:ed:ff:8d:56:37:97:6f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
        Validity
            Not Before: Nov 23 01:01:01 2024 GMT
            Not After : Nov 24 01:01:01 2024 GMT
        Subject: CN=743ad70671a6f7c1ada8c116fb23b62a041c31f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:00:c3:94:ad:77:c5:cf:4d:fa:34:07:62:3a:
                    39:e0:37:5e:e3:69:c5:f2:07:8d:f4:e3:cd:7a:a6:
                    73:48:cf:c2:1f:47:d5:a4:1e:20:91:a2:bb:b6:bc:
                    23:8c:76:bf:4a:e9:05:6e:96:89:7b:c1:30:b2:94:
                    88:9a:26:62:ae:21:d4:f9:04:ee:d7:36:83:66:11:
                    29:5f:d1:52:cd:47:25:6e:8d:35:bf:6d:25:01:76:
                    ca:25:a1:52:98:09:bf:b2:7e:1c:b2:8d:08:92:66:
                    d0:10:35:00:54:e1:51:46:52:fe:32:6b:42:04:8a:
                    1c:98:46:ad:02:93:46:38:15:68:fc:b1:b3:0d:fb:
                    83:53:e6:b0:df:b5:3d:34:a2:6d:06:d4:7e:b5:8b:
                    e0:b4:e2:0f:7a:d6:71:c6:11:27:a1:e0:3f:fc:29:
                    95:3d:f1:10:aa:47:17:3a:70:d3:9f:90:ec:62:2c:
                    e8:f5:0f:a1:69:9c:3e:57:99:e2:6c:da:21:a1:a2:
                    c0:3e:20:e5:30:85:f8:01:d1:96:a1:57:42:d9:26:
                    19:76:b6:15:50:2b:a4:c8:86:6d:1c:a7:fe:60:a3:
                    41:93:14:e3:d4:66:b9:5a:55:71:10:88:5b:8d:e9:
                    32:ae:f8:0b:a7:06:ef:29:2e:5e:20:d8:f6:33:c7:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:D7:06:71:A6:F7:C1:AD:A8:C1:16:FB:23:B6:2A:04:1C:31:F1
            X509v3 Authority Key Identifier:
                keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:d3:47:3c:83:bd:94:92:02:cd:c8:4d:b6:69:de:e1:4b:
         e8:08:c7:9e:fb:7b:b4:cf:6a:df:87:3e:4e:cf:11:e4:4c:e8:
         60:67:7b:f2:90:e0:ee:f3:f0:ef:45:67:a6:a3:40:b1:08:54:
         1f:b0:8f:71:9e:9a:ca:72:b0:2c:22:ac:e1:32:8d:c7:09:5f:
         c3:be:31:c9:59:d0:07:20:a1:58:69:a8:06:ec:ae:ec:cf:fc:
         14:4c:ae:84:3b:de:a3:fd:4a:24:51:58:96:72:8b:11:82:36:
         29:b5:d7:f5:66:9d:1d:73:32:4e:83:bb:d4:9d:db:a6:4e:73:
         9e:e9:d9:27:21:d6:14:50:f9:c6:97:5d:1f:91:53:cf:c4:ee:
         42:b7:2e:f9:2f:a7:ca:eb:33:70:d9:c9:78:98:d9:d8:a0:f2:
         26:f2:56:3d:55:d4:cc:1c:cb:31:e1:53:f9:53:43:6f:f1:95:
         07:6b:77:28:67:a7:90:d9:3b:7f:8c:d2:23:94:6c:57:12:42:
         dd:bc:a5:fc:43:da:69:c6:2b:15:5f:a7:71:a0:cd:0b:f4:99:
         3b:68:b6:54:34:b7:32:fe:ec:13:c7:09:9a:e0:e4:69:af:d3:
         39:c0:cf:e0:a5:06:09:69:f4:29:3b:5c:03:37:31:8e:53:20:
         59:02:7c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiVc2U5+LTu3/jVY3l28vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZWY1YmQzNzYyZWY2MGZhNzhlZDU1ZjU0NGZhM2EwNTEz
ZmQ4NDIwHhcNMjQxMTIzMDEwMTAxWhcNMjQxMTI0MDEwMTAxWjAzMTEwLwYDVQQD
Eyg3NDNhZDcwNjcxYTZmN2MxYWRhOGMxMTZmYjIzYjYyYTA0MWMzMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QDDlK13xc9N+jQHYjo54Dde42nF
8geN9OPNeqZzSM/CH0fVpB4gkaK7trwjjHa/SukFbpaJe8EwspSImiZiriHU+QTu
1zaDZhEpX9FSzUclbo01v20lAXbKJaFSmAm/sn4cso0IkmbQEDUAVOFRRlL+MmtC
BIocmEatApNGOBVo/LGzDfuDU+aw37U9NKJtBtR+tYvgtOIPetZxxhEnoeA//CmV
PfEQqkcXOnDTn5DsYizo9Q+haZw+V5nibNohoaLAPiDlMIX4AdGWoVdC2SYZdrYV
UCukyIZtHKf+YKNBkxTj1Ga5WlVxEIhbjekyrvgLpwbvKS5eINj2M8e91QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQ61wZxpvfBrajBFvsjtioEHDHxMB8GA1UdIwQY
MBaAFHPvW9N2LvYPp47VX1RPo6BRP9hCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQt
YjU0NmEyZDIwOGYyLzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQtYjU0NmEyZDIwOGYy
LzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKnTRzyD
vZSSAs3ITbZp3uFL6AjHnvt7tM9q34c+Ts8R5EzoYGd78pDg7vPw70VnpqNAsQhU
H7CPcZ6aynKwLCKs4TKNxwlfw74xyVnQByChWGmoBuyu7M/8FEyuhDveo/1KJFFY
lnKLEYI2KbXX9WadHXMyToO71J3bpk5znunZJyHWFFD5xpddH5FTz8TuQrcu+S+n
yuszcNnJeJjZ2KDyJvJWPVXUzBzLMeFT+VNDb/GVB2t3KGenkNk7f4zSI5RsVxJC
3byl/EPaacYrFV+ncaDNC/SZO2i2VDS3Mv7sE8cJmuDkaa/TOcDP4KUGCWn0KTtc
AzcxjlMgWQJ8wA==
-----END CERTIFICATE-----