Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          tAbBg9xj/QxJbBBPF/0RWxezDsXikeXwBglm40+zRxk=
Subject key identifier:   0F:28:38:E3:CF:DF:44:AF:62:B9:28:01:93:2C:4B:D7:37:D1:FB:E8
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       01936AEB844033D28AFC23B812C9AB160DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          02FD
Signing time:             Wed 27 Nov 2024 00:00:39 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:39 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:39 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: 3E2hqWFYVr0HHJH+VEav7nbxvjgu1dYwqlm0rJCUK7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:84:40:33:d2:8a:fc:23:b8:12:c9:ab:16:0d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Nov 27 00:00:39 2024 GMT
            Not After : Nov 28 00:00:39 2024 GMT
        Subject: CN=0f2838e3cfdf44af62b92801932c4bd737d1fbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:4f:19:ef:83:19:3a:ad:38:7d:3b:3a:8b:
                    d7:f9:7e:57:29:d7:c5:96:9f:8f:51:fc:97:7f:1f:
                    09:2a:be:c2:69:e4:c7:cd:b4:55:48:84:8a:9d:10:
                    91:c8:96:48:56:e7:52:88:64:c2:e7:98:e1:78:8b:
                    e6:39:a3:c1:0e:c1:99:53:b4:6c:b7:ca:25:cc:85:
                    3a:02:d8:92:90:5a:58:f6:f3:66:ef:58:6c:eb:65:
                    23:a7:da:ac:c9:db:ce:6c:99:3c:3d:d6:b4:7c:10:
                    32:c6:14:a9:82:eb:65:d0:25:14:76:4b:d5:20:5a:
                    6d:0a:28:c3:89:68:d1:f5:f4:d5:5d:d6:95:27:94:
                    ff:ba:c7:90:69:e5:3d:54:21:5c:37:c2:da:8c:2c:
                    82:be:ec:ad:97:9f:9c:58:49:8e:09:9b:43:49:cc:
                    67:af:23:45:00:34:3f:f6:0c:2f:2a:1d:6c:ef:d0:
                    e3:47:d0:c6:08:96:57:d5:d1:7f:8f:7d:df:39:35:
                    60:9e:04:c5:a1:f4:d4:cd:13:83:5c:52:07:62:3c:
                    21:f9:8f:bd:fe:68:5b:ee:a6:fa:1d:f2:ce:f1:0b:
                    1d:4e:7e:7c:65:99:0b:03:3e:be:fe:d4:3b:ad:5d:
                    79:d0:67:48:38:51:3e:c5:16:1f:be:28:1a:23:c3:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:28:38:E3:CF:DF:44:AF:62:B9:28:01:93:2C:4B:D7:37:D1:FB:E8
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:90:5f:0d:cb:cc:e4:22:7c:82:0f:8f:b2:9f:37:74:bd:4d:
         83:7f:6e:90:65:65:3a:6f:48:1b:0d:72:fe:6a:9e:5b:c6:1b:
         fb:c3:30:79:76:be:70:2b:74:2f:45:b5:58:f3:08:1f:fa:c1:
         59:db:16:1f:82:a4:d5:1e:9e:79:bb:ae:57:15:98:f1:cf:f3:
         bc:a6:0c:ed:9c:14:5b:83:e9:4c:1f:48:62:f1:fc:7f:2a:30:
         97:04:2c:3b:09:02:01:80:ca:2b:a0:6f:a9:74:4f:98:89:5e:
         3d:73:45:c2:53:04:e5:7f:5d:2e:79:f4:3e:8b:a2:45:8b:94:
         2c:e9:e7:d5:06:73:1c:5d:31:11:b0:39:2a:f5:72:9e:bb:85:
         3a:a6:93:e2:5b:ca:03:f0:6c:62:b8:e2:f2:a3:4b:f2:86:65:
         34:c7:09:b0:ee:3e:5e:18:66:6c:95:fc:fa:58:83:35:ee:8f:
         60:31:2d:ff:35:80:4a:47:35:16:49:df:ba:c8:bf:ed:9e:ac:
         ad:b5:45:32:b2:0d:56:c8:9f:4c:b9:25:40:70:1b:fb:4d:99:
         f2:18:10:96:95:c3:90:31:2b:9c:0d:8a:66:8f:ea:bf:bf:b4:
         7f:17:3e:dd:1f:50:61:82:bb:3d:d1:b7:c7:57:35:64:8f:51:
         93:6f:c6:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq64RAM9KK/CO4EsmrFg20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzQzZDMwN2E4YjcyYWM1MzJmNGNkODgzZjBjOTQyYmFk
MGY0YmUwHhcNMjQxMTI3MDAwMDM5WhcNMjQxMTI4MDAwMDM5WjAzMTEwLwYDVQQD
EygwZjI4MzhlM2NmZGY0NGFmNjJiOTI4MDE5MzJjNGJkNzM3ZDFmYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4INPGe+DGTqtOH07OovX+X5XKdfF
lp+PUfyXfx8JKr7CaeTHzbRVSISKnRCRyJZIVudSiGTC55jheIvmOaPBDsGZU7Rs
t8olzIU6AtiSkFpY9vNm71hs62Ujp9qsydvObJk8Pda0fBAyxhSpgutl0CUUdkvV
IFptCijDiWjR9fTVXdaVJ5T/useQaeU9VCFcN8LajCyCvuytl5+cWEmOCZtDScxn
ryNFADQ/9gwvKh1s79DjR9DGCJZX1dF/j33fOTVgngTFofTUzRODXFIHYjwh+Y+9
/mhb7qb6HfLO8QsdTn58ZZkLAz6+/tQ7rV150GdIOFE+xRYfvigaI8M7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8oOOPP30SvYrkoAZMsS9c30fvoMB8GA1UdIwQY
MBaAFBN0PTB6i3KsUy9M2IPwyUK60PS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQt
NDc3ZDFlOWE0MGI4LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQtNDc3ZDFlOWE0MGI4
LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5BfDcvM
5CJ8gg+Psp83dL1Ng39ukGVlOm9IGw1y/mqeW8Yb+8MweXa+cCt0L0W1WPMIH/rB
WdsWH4Kk1R6eebuuVxWY8c/zvKYM7ZwUW4PpTB9IYvH8fyowlwQsOwkCAYDKK6Bv
qXRPmIlePXNFwlME5X9dLnn0PouiRYuULOnn1QZzHF0xEbA5KvVynruFOqaT4lvK
A/BsYrji8qNL8oZlNMcJsO4+XhhmbJX8+liDNe6PYDEt/zWASkc1Fknfusi/7Z6s
rbVFMrINVsifTLklQHAb+02Z8hgQlpXDkDErnA2KZo/qv7+0fxc+3R9QYYK7PdG3
x1c1ZI9Rk2/GiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:04 2024 by rpki-client on console-fra.rpki-client.org