Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File:                     jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier:          kwZrYNFoww5CSUjhuGS9ZX3Luhf2sivhuReIz+io5zA=
Subject key identifier:   BD:51:B6:EE:C1:4F:2C:E4:C2:5B:58:1A:3C:2E:39:13:AD:8A:D3:55
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer:       /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial:       01936A470BBA31B7EBAA75EBBDC4D34F689E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number:          0FC4
Signing time:             Tue 26 Nov 2024 21:01:01 +0000
Manifest this update:     Tue 26 Nov 2024 21:01:01 +0000
Manifest next update:     Wed 27 Nov 2024 21:01:01 +0000
Files and hashes:         1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: LkYCVWaSCzzkPDepFop8EniMJcM4pSdjJvUoV/I90Ng=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:47:0b:ba:31:b7:eb:aa:75:eb:bd:c4:d3:4f:68:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
        Validity
            Not Before: Nov 26 21:01:01 2024 GMT
            Not After : Nov 27 21:01:01 2024 GMT
        Subject: CN=bd51b6eec14f2ce4c25b581a3c2e3913ad8ad355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:a9:87:6f:04:1b:9a:5d:ca:58:b1:9b:1b:
                    b4:c4:c3:25:bb:f9:db:51:9a:af:e6:98:f4:f1:de:
                    a0:2a:40:b5:4e:3c:3d:d6:96:1d:54:fb:66:ad:82:
                    96:40:a3:d5:15:16:08:fd:21:ba:f9:0c:54:19:51:
                    39:8e:fa:8a:5f:ca:b8:0c:32:e6:0e:0d:fc:64:a8:
                    3f:27:c7:87:69:8b:e9:1b:74:08:be:89:e2:1e:c5:
                    b4:8b:64:16:29:4d:85:fc:93:3b:d6:54:48:4d:ff:
                    2d:16:a9:d2:64:0f:eb:a7:16:44:3e:5f:f4:14:e5:
                    da:3a:dd:8d:3c:b8:dc:12:02:f0:45:81:73:0e:19:
                    d7:8e:5a:23:63:f6:f7:b2:52:ec:6d:86:ff:bb:ad:
                    5c:10:05:4e:e8:62:a7:82:4f:f3:f7:ac:ca:02:10:
                    5e:be:e2:5d:9f:41:3d:45:49:47:55:35:c8:e8:0d:
                    ba:1b:4e:2a:a1:b1:5d:ce:a5:a4:f1:c6:6b:b4:b3:
                    de:dd:41:a0:dc:8d:37:40:ec:bd:63:73:54:33:af:
                    d7:fa:0a:ca:3a:e9:15:f4:7d:78:f6:77:8e:36:3d:
                    f6:c0:a6:26:03:59:8a:a4:b0:f2:eb:38:07:be:e4:
                    b9:37:75:87:c3:cd:c6:ce:ad:2c:20:85:70:76:d7:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:51:B6:EE:C1:4F:2C:E4:C2:5B:58:1A:3C:2E:39:13:AD:8A:D3:55
            X509v3 Authority Key Identifier:
                keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:34:1d:48:cc:c3:c1:a8:98:f0:b5:c9:3e:41:2f:70:f5:d3:
         08:ef:9b:a2:9f:cd:3d:10:b4:c9:39:60:9b:8f:e0:09:1f:db:
         0f:bc:da:eb:d3:b5:3b:48:71:fa:1d:4d:dd:58:54:17:85:44:
         8e:ae:b8:d6:cc:17:d9:4d:55:24:af:d9:ec:31:13:a5:fe:d1:
         eb:d6:c5:72:54:ac:fe:5d:b6:eb:2b:18:3f:9f:1b:15:9f:e1:
         c9:39:6c:2e:97:48:92:ee:f8:d4:24:ca:aa:56:06:6b:69:e6:
         47:17:6d:55:a0:cd:e8:11:b2:3c:8d:a7:9d:02:21:c5:d6:9b:
         62:b0:aa:a9:11:d3:40:dd:55:ae:40:d8:0c:6a:a0:4f:ac:a5:
         c7:d5:60:9e:c7:79:d1:8e:de:e2:b7:e6:a2:18:67:64:69:e1:
         c2:89:5a:5d:a2:85:10:2a:04:08:67:59:f5:d1:4f:88:0a:2e:
         0f:7b:03:c3:86:2a:c5:fa:1b:e3:21:f1:e7:ee:b7:0b:f4:fc:
         4d:ee:54:89:52:d1:fb:3a:f9:ca:38:d8:ff:7e:53:6e:9c:fc:
         6c:50:93:1f:5a:c5:51:5b:73:9f:f1:88:2a:8d:b6:08:0c:0e:
         dc:a7:cc:dc:30:6b:61:6c:2c:62:53:59:b5:a4:7f:2b:20:b7:
         a1:16:4a:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRwu6MbfrqnXrvcTTT2ieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzBhOWE1ZTY5YzU0ODI2MDk4YmIyMGQzNDFmMDczOGZm
NjdlNjUwHhcNMjQxMTI2MjEwMTAxWhcNMjQxMTI3MjEwMTAxWjAzMTEwLwYDVQQD
EyhiZDUxYjZlZWMxNGYyY2U0YzI1YjU4MWEzYzJlMzkxM2FkOGFkMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNSph28EG5pdylixmxu0xMMlu/nb
UZqv5pj08d6gKkC1Tjw91pYdVPtmrYKWQKPVFRYI/SG6+QxUGVE5jvqKX8q4DDLm
Dg38ZKg/J8eHaYvpG3QIvoniHsW0i2QWKU2F/JM71lRITf8tFqnSZA/rpxZEPl/0
FOXaOt2NPLjcEgLwRYFzDhnXjlojY/b3slLsbYb/u61cEAVO6GKngk/z96zKAhBe
vuJdn0E9RUlHVTXI6A26G04qobFdzqWk8cZrtLPe3UGg3I03QOy9Y3NUM6/X+grK
OukV9H149neONj32wKYmA1mKpLDy6zgHvuS5N3WHw83Gzq0sIIVwdtcWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1Rtu7BTyzkwltYGjwuOROtitNVMB8GA1UdIwQY
MBaAFI3AqaXmnFSCYJi7INNB8HOP9n5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84Njk0NzMtODk5Ni00YjI3LTk0NjUt
NmM1MjkyZDM0ZTU0LzEvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84Njk0NzMtODk5Ni00YjI3LTk0NjUtNmM1MjkyZDM0ZTU0
LzEvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTQdSMzD
waiY8LXJPkEvcPXTCO+bop/NPRC0yTlgm4/gCR/bD7za69O1O0hx+h1N3VhUF4VE
jq641swX2U1VJK/Z7DETpf7R69bFclSs/l226ysYP58bFZ/hyTlsLpdIku741CTK
qlYGa2nmRxdtVaDN6BGyPI2nnQIhxdabYrCqqRHTQN1VrkDYDGqgT6ylx9Vgnsd5
0Y7e4rfmohhnZGnhwolaXaKFECoECGdZ9dFPiAouD3sDw4Yqxfob4yHx5+63C/T8
Te5UiVLR+zr5yjjY/35Tbpz8bFCTH1rFUVtzn/GIKo22CAwO3KfM3DBrYWwsYlNZ
taR/KyC3oRZK0g==
-----END CERTIFICATE-----