Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File:                     xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier:          /iFlV/Np0obEprdLXhOXID0CEOjljFDSQDRmMMexA84=
Subject key identifier:   E2:FA:BC:B1:88:DB:62:4A:E9:1D:8E:08:EA:C4:32:89:D3:2C:91:0D
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer:       /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial:       019357D29A9D1F1918EA9188DA6EE9D92CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 07:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:40 +0000
Files and hashes:         1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: 0r31dDyRp8KLsGC9U2zwd27XSRp8C8fS0MuH/4REplY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:9a:9d:1f:19:18:ea:91:88:da:6e:e9:d9:2c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
        Validity
            Not Before: Nov 23 07:00:40 2024 GMT
            Not After : Nov 24 07:00:40 2024 GMT
        Subject: CN=e2fabcb188db624ae91d8e08eac43289d32c910d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:7d:0a:30:19:1e:1c:7d:de:e2:ed:ac:94:
                    23:35:d1:7a:85:24:d6:2d:4d:7f:56:4b:e8:ff:79:
                    13:c5:df:2c:8b:d3:81:bf:f2:9f:ae:60:4d:67:18:
                    ea:8a:dc:ab:ab:97:9c:9b:a9:1b:cf:8f:3f:25:49:
                    bb:d0:d7:25:72:ed:d7:d0:5e:0c:b3:42:91:8f:dc:
                    f2:f4:5b:09:db:2e:8d:3e:3c:2c:13:09:9e:24:2f:
                    fa:ca:f3:fa:28:a9:1b:e2:95:ed:5f:0a:15:57:60:
                    31:33:15:57:16:b0:7a:7a:89:50:4f:93:36:7c:2a:
                    da:bd:fb:79:c9:a2:a5:fa:f1:ca:58:de:fb:b2:b8:
                    af:23:d3:2b:87:cd:97:61:ab:f5:65:07:93:eb:3b:
                    be:f4:6a:da:d9:af:e8:6d:18:7a:dd:c7:44:5a:65:
                    39:5c:5a:90:13:09:06:03:70:0f:45:0b:a8:5b:08:
                    1e:2b:f0:51:20:8d:fb:6e:9b:f9:3f:3d:1f:7d:cc:
                    47:0f:30:b7:21:28:88:8d:e4:00:55:60:14:78:30:
                    23:41:25:3a:bd:9b:20:8a:5a:87:8e:d5:91:3e:82:
                    bc:34:04:90:de:e1:47:f5:a1:e2:d5:37:3e:e8:57:
                    45:ce:45:c5:d9:b9:55:bc:ff:8b:b4:21:88:64:3d:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FA:BC:B1:88:DB:62:4A:E9:1D:8E:08:EA:C4:32:89:D3:2C:91:0D
            X509v3 Authority Key Identifier:
                keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a6:e8:f3:c6:e2:0e:2a:a2:60:86:d8:35:b7:4d:7f:cb:81:
         36:ac:48:3b:c1:d6:eb:53:70:28:21:90:fb:ed:6f:5d:c3:6b:
         f6:b6:b9:fd:3c:31:3c:c8:2f:ae:a7:64:27:06:f5:52:0a:b4:
         a9:9b:da:75:80:db:4f:46:ab:2a:2c:eb:3b:e2:03:1f:ee:58:
         78:b2:fa:d9:0d:40:5a:52:43:e2:ac:a4:d1:93:c8:65:bf:4e:
         f1:ef:7a:a6:7e:51:e9:c5:e7:91:e4:12:d1:ca:6f:96:9d:ca:
         a1:04:de:54:3e:b8:39:4a:6e:42:38:fa:88:68:53:35:14:fb:
         11:96:b8:36:db:6a:9e:c6:3d:5f:68:0d:d7:1e:7c:e2:8e:94:
         c1:74:a4:ec:8b:29:03:4d:9e:59:78:10:1b:e1:15:37:6f:0a:
         34:48:f9:29:fc:43:ba:5f:1a:2f:d9:9c:b4:63:11:26:0d:cb:
         0c:73:ab:c2:3e:fb:89:7d:1a:0e:92:41:ca:b1:56:e8:47:c2:
         8e:94:a1:bc:fa:36:bd:af:24:40:c1:a3:2e:b9:73:e4:57:c2:
         e5:5b:67:7e:bb:68:80:3e:7a:d9:27:78:ca:45:61:cb:46:60:
         42:7a:3e:5f:33:1f:94:ea:c1:63:81:1e:49:c6:e7:30:c1:ca:
         8d:7d:4c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0pqdHxkY6pGI2m7p2SzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ODEwNmY0NDk1N2QxOTQwMjAzMzViMGJmZDYwNzdjY2Jj
ZGM4NzgwHhcNMjQxMTIzMDcwMDQwWhcNMjQxMTI0MDcwMDQwWjAzMTEwLwYDVQQD
EyhlMmZhYmNiMTg4ZGI2MjRhZTkxZDhlMDhlYWM0MzI4OWQzMmM5MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V19CjAZHhx93uLtrJQjNdF6hSTW
LU1/Vkvo/3kTxd8si9OBv/KfrmBNZxjqityrq5ecm6kbz48/JUm70Nclcu3X0F4M
s0KRj9zy9FsJ2y6NPjwsEwmeJC/6yvP6KKkb4pXtXwoVV2AxMxVXFrB6eolQT5M2
fCravft5yaKl+vHKWN77srivI9Mrh82XYav1ZQeT6zu+9Gra2a/obRh63cdEWmU5
XFqQEwkGA3APRQuoWwgeK/BRII37bpv5Pz0ffcxHDzC3ISiIjeQAVWAUeDAjQSU6
vZsgilqHjtWRPoK8NASQ3uFH9aHi1Tc+6FdFzkXF2blVvP+LtCGIZD09hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL6vLGI22JK6R2OCOrEMonTLJENMB8GA1UdIwQY
MBaAFMaBBvRJV9GUAgM1sL/WB3zLzch4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYt
YTAyOWZiYjRiZTI5LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYtYTAyOWZiYjRiZTI5
LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqbo88bi
DiqiYIbYNbdNf8uBNqxIO8HW61NwKCGQ++1vXcNr9ra5/TwxPMgvrqdkJwb1Ugq0
qZvadYDbT0arKizrO+IDH+5YeLL62Q1AWlJD4qyk0ZPIZb9O8e96pn5R6cXnkeQS
0cpvlp3KoQTeVD64OUpuQjj6iGhTNRT7EZa4NttqnsY9X2gN1x584o6UwXSk7Isp
A02eWXgQG+EVN28KNEj5KfxDul8aL9mctGMRJg3LDHOrwj77iX0aDpJByrFW6EfC
jpShvPo2va8kQMGjLrlz5FfC5VtnfrtogD562Sd4ykVhy0ZgQno+XzMflOrBY4Ee
ScbnMMHKjX1MDg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:08 2024 by rpki-client on console-fra.rpki-client.org