Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File:                     MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier:          K0CV2OHqfTgTQJeGb3Z/xEhZ+B/Ms87qNw9+CzWalrE=
Subject key identifier:   F8:DF:85:48:50:18:42:66:30:DF:FB:7D:C2:95:6F:90:C6:48:E7:66
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer:       /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial:       01935764A41864B7371CA7D6CC19155421F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number:          1042
Signing time:             Sat 23 Nov 2024 05:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:33 +0000
Files and hashes:         1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: ol6iRiaXIQRCjjtokTnhCz5NAonLiobRQliHHHuzheo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a4:18:64:b7:37:1c:a7:d6:cc:19:15:54:21:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
        Validity
            Not Before: Nov 23 05:00:33 2024 GMT
            Not After : Nov 24 05:00:33 2024 GMT
        Subject: CN=f8df85485018426630dffb7dc2956f90c648e766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:6e:27:12:c9:ea:4c:34:04:87:dd:02:db:
                    98:73:89:0d:81:04:7e:ee:20:ea:62:df:62:98:ec:
                    0e:85:fb:82:68:d4:a7:dc:ee:9c:f4:53:13:c6:9d:
                    57:89:6f:05:13:d4:22:44:94:c5:03:84:48:df:7d:
                    95:80:e7:5e:03:e4:14:05:06:c8:a9:2d:ef:64:07:
                    75:af:38:27:dd:87:01:30:98:22:a2:9b:af:b1:91:
                    09:01:3c:3e:26:9f:56:fc:72:cc:00:d1:ad:b3:4c:
                    1b:3a:8a:37:57:b5:df:c2:09:1c:a4:c2:75:ec:c7:
                    ad:c6:fd:1d:8e:a9:ec:43:11:e5:2b:b0:fb:8a:0d:
                    a8:60:8c:48:58:b4:fd:db:a6:08:54:d3:78:b8:73:
                    87:c4:8d:13:c4:75:d1:91:92:15:ef:6c:ff:fd:88:
                    c3:e4:65:fb:ec:8d:02:05:6e:5f:2c:59:16:2b:61:
                    ff:c5:59:b0:01:0f:ee:25:13:d5:65:5f:35:45:4a:
                    30:cc:e1:c9:54:0c:25:02:94:bd:b4:ee:eb:49:75:
                    d3:f0:7c:cc:81:c8:ac:3b:c0:5a:24:28:f7:d0:79:
                    f6:c9:f8:50:41:75:08:f6:84:80:e4:5b:76:17:f2:
                    9e:ad:35:73:2f:96:83:75:4d:0b:a3:2e:ae:76:04:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:85:48:50:18:42:66:30:DF:FB:7D:C2:95:6F:90:C6:48:E7:66
            X509v3 Authority Key Identifier:
                keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:cf:3d:94:4d:3a:88:f5:67:66:19:5f:cc:55:3c:ab:24:
         0b:c5:32:8a:2c:5e:bd:7d:56:c3:fd:f7:f3:a1:4d:40:9d:0c:
         18:91:35:f5:d9:8a:36:35:ad:b4:67:db:d1:34:77:45:cd:08:
         f8:dd:dd:16:0d:f8:94:2e:39:bc:9a:66:9c:06:b2:c1:37:cf:
         0e:7e:64:63:f2:96:1b:31:2e:6f:2c:a2:31:4d:4a:99:dd:01:
         e7:43:cb:b3:a0:df:ad:1e:a7:4f:52:69:fc:49:14:2e:0f:f9:
         9c:52:28:f8:ae:4a:97:91:9b:66:07:dc:06:b6:f1:b6:fa:6c:
         d6:89:5f:a4:f4:a8:d7:2c:6e:a8:29:74:91:c0:ae:41:de:60:
         1a:5e:2c:95:4c:a7:51:c4:bd:41:f9:49:70:0b:34:aa:0c:26:
         de:79:f0:23:2f:32:79:28:12:2e:a3:23:c1:4c:45:18:1d:0f:
         32:2e:a3:2d:80:07:d0:41:f2:48:c7:05:34:d9:db:55:e8:ff:
         a3:4a:fb:39:ef:f0:1d:b5:f2:57:c1:3e:d3:b9:d9:df:d9:06:
         72:4a:a5:ca:53:cf:80:d1:27:b2:96:36:fb:13:50:af:a6:22:
         95:3b:dd:fa:b8:73:58:cf:34:70:3d:0e:61:5d:9f:af:ea:59:
         dd:c9:3e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZKQYZLc3HKfWzBkVVCHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyODZmMWMyMDVlZTMxODdlMmFjMWE0YTViYzA0OWYzNDQ5
ZmY2NjcwHhcNMjQxMTIzMDUwMDMzWhcNMjQxMTI0MDUwMDMzWjAzMTEwLwYDVQQD
EyhmOGRmODU0ODUwMTg0MjY2MzBkZmZiN2RjMjk1NmY5MGM2NDhlNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur9uJxLJ6kw0BIfdAtuYc4kNgQR+
7iDqYt9imOwOhfuCaNSn3O6c9FMTxp1XiW8FE9QiRJTFA4RI332VgOdeA+QUBQbI
qS3vZAd1rzgn3YcBMJgiopuvsZEJATw+Jp9W/HLMANGts0wbOoo3V7XfwgkcpMJ1
7Metxv0djqnsQxHlK7D7ig2oYIxIWLT926YIVNN4uHOHxI0TxHXRkZIV72z//YjD
5GX77I0CBW5fLFkWK2H/xVmwAQ/uJRPVZV81RUowzOHJVAwlApS9tO7rSXXT8HzM
gcisO8BaJCj30Hn2yfhQQXUI9oSA5Ft2F/KerTVzL5aDdU0Loy6udgQ/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjfhUhQGEJmMN/7fcKVb5DGSOdmMB8GA1UdIwQY
MBaAFDKG8cIF7jGH4qwaSlvASfNEn/ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDIt
MzI0ZWYzNGViZWEyLzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yYmNmYzUtM2JjOS00NzdmLWJjNDItMzI0ZWYzNGViZWEy
LzEvTW9ieHdnWHVNWWZpckJwS1c4Qko4MFNmOW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuDPPZRN
Ooj1Z2YZX8xVPKskC8UyiixevX1Ww/3386FNQJ0MGJE19dmKNjWttGfb0TR3Rc0I
+N3dFg34lC45vJpmnAaywTfPDn5kY/KWGzEubyyiMU1Kmd0B50PLs6DfrR6nT1Jp
/EkULg/5nFIo+K5Kl5GbZgfcBrbxtvps1olfpPSo1yxuqCl0kcCuQd5gGl4slUyn
UcS9QflJcAs0qgwm3nnwIy8yeSgSLqMjwUxFGB0PMi6jLYAH0EHySMcFNNnbVej/
o0r7Oe/wHbXyV8E+07nZ39kGckqlylPPgNEnspY2+xNQr6YilTvd+rhzWM80cD0O
YV2fr+pZ3ck+oQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:47 2024 by rpki-client on console-fra.rpki-client.org