Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File:                     lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier:          8Cds393qx0pjEAcLKNYhgl/yJH1hr51G/VuggjE7dWs=
Subject key identifier:   4E:5E:E1:63:CE:9C:2C:06:EF:74:39:B1:89:A1:4A:AF:0E:26:BF:FA
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer:       /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial:       0191F9349FC18BEABAA288D883586DF5E5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number:          E9
Signing time:             Mon 16 Sep 2024 05:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 05:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 05:01:01 +0000
Files and hashes:         1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: /ynVpk52X3Al6DN98TGc5/3kZRvcN6gOxg/cAXpsrLg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:9f:c1:8b:ea:ba:a2:88:d8:83:58:6d:f5:e5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
        Validity
            Not Before: Sep 16 05:01:01 2024 GMT
            Not After : Sep 17 05:01:01 2024 GMT
        Subject: CN=4e5ee163ce9c2c06ef7439b189a14aaf0e26bffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:0d:a0:25:a9:e3:36:c2:75:de:cf:97:1a:
                    ba:1f:6f:f7:53:72:6f:98:22:c5:08:65:77:4b:09:
                    80:b6:97:0c:9c:dd:18:01:40:65:08:08:15:c9:11:
                    0d:ef:30:50:23:98:f9:45:7a:a5:67:15:7c:6d:c4:
                    d2:80:2b:b7:13:b6:89:02:5e:4f:ec:45:51:df:d2:
                    7d:4f:3d:86:c7:f0:5a:f4:68:49:73:ea:84:4b:5e:
                    00:24:72:04:7d:78:4c:fa:e9:1d:bc:7c:66:4d:98:
                    57:b5:e7:97:b7:2d:9b:8d:69:53:2b:03:dd:49:a0:
                    9b:46:4c:dd:2d:ec:f0:05:30:65:73:48:88:8c:7d:
                    01:a9:1c:76:82:01:cd:0f:ed:ca:82:09:60:87:f6:
                    2d:35:d0:28:26:a0:c5:fa:7f:c8:69:56:9b:2c:8a:
                    f9:48:e5:aa:9d:e3:d1:f8:5b:c9:99:1e:91:e6:f2:
                    97:1f:73:16:bd:b1:a8:34:29:2b:30:64:fb:c1:59:
                    8f:c8:dd:55:01:33:d4:4d:93:83:31:58:00:8b:bb:
                    89:8a:a3:1b:7d:f0:47:da:24:bd:81:70:26:31:ae:
                    b7:4b:46:1b:a4:5d:e4:ac:af:34:d1:c6:4f:7e:b8:
                    9f:78:3f:2e:0d:91:63:08:25:11:3f:44:36:d2:0f:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5E:E1:63:CE:9C:2C:06:EF:74:39:B1:89:A1:4A:AF:0E:26:BF:FA
            X509v3 Authority Key Identifier:
                keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:07:6c:fe:cb:84:0d:42:2c:7e:a1:32:1e:2e:72:88:b8:
         45:0c:f7:d4:3e:e3:8e:81:bd:d8:70:07:a4:77:fd:6a:d0:bb:
         9c:a3:f1:22:02:65:5d:81:5c:0d:ba:35:82:48:4f:75:16:30:
         3f:1b:0a:76:1b:74:97:4f:45:a4:11:ce:dd:fb:ae:a7:48:39:
         e2:a5:f3:cb:9d:80:c5:9f:79:99:1c:aa:49:1d:79:69:31:79:
         8c:54:0c:b4:8e:e4:e9:86:8e:73:49:13:f7:b6:3b:42:ef:73:
         3e:bb:78:89:bd:47:64:a9:a0:5d:1c:1a:f5:c9:11:38:1c:fc:
         68:36:4d:6f:06:12:1d:d9:da:b1:c8:d3:bf:ab:f8:cd:e5:04:
         5d:db:7b:1f:a0:db:20:a0:6b:f5:75:64:79:25:16:b4:d2:0a:
         49:76:5e:fa:a0:29:e8:45:2d:56:d9:cd:38:94:39:9c:5e:bb:
         f1:d5:de:37:98:b4:3e:ee:6d:62:53:b8:62:f1:59:d9:4f:3a:
         18:eb:97:e4:69:5f:27:eb:b5:be:a7:7c:d0:01:cb:14:6c:02:
         86:6a:9c:3b:04:59:53:d2:95:31:90:37:df:64:4c:5b:2b:63:
         13:1e:b0:63:c3:ff:58:07:d6:ee:3e:1a:aa:a5:2e:ba:49:3d:
         9f:00:99:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5NJ/Bi+q6oojYg1ht9eXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OWYwZDM0MDFkMDA4YWE5ZGFhODI4YTQyMzU5YTk1MWY5
NGJkMDgwHhcNMjQwOTE2MDUwMTAxWhcNMjQwOTE3MDUwMTAxWjAzMTEwLwYDVQQD
Eyg0ZTVlZTE2M2NlOWMyYzA2ZWY3NDM5YjE4OWExNGFhZjBlMjZiZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl4NoCWp4zbCdd7Plxq6H2/3U3Jv
mCLFCGV3SwmAtpcMnN0YAUBlCAgVyREN7zBQI5j5RXqlZxV8bcTSgCu3E7aJAl5P
7EVR39J9Tz2Gx/Ba9GhJc+qES14AJHIEfXhM+ukdvHxmTZhXteeXty2bjWlTKwPd
SaCbRkzdLezwBTBlc0iIjH0BqRx2ggHND+3Kgglgh/YtNdAoJqDF+n/IaVabLIr5
SOWqnePR+FvJmR6R5vKXH3MWvbGoNCkrMGT7wVmPyN1VATPUTZODMVgAi7uJiqMb
ffBH2iS9gXAmMa63S0YbpF3krK800cZPfrifeD8uDZFjCCURP0Q20g/5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5e4WPOnCwG73Q5sYmhSq8OJr/6MB8GA1UdIwQY
MBaAFJafDTQB0AiqnaqCikI1mpUflL0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHA4Tk5BSFFDS3FkcW9LS1FqV2FsUi1VdlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80YThkYTMtYTdhOS00MmIzLThmYjct
ODU4NDg3MzU1YmQzLzEvbHA4Tk5BSFFDS3FkcW9LS1FqV2FsUi1VdlFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80YThkYTMtYTdhOS00MmIzLThmYjctODU4NDg3MzU1YmQz
LzEvbHA4Tk5BSFFDS3FkcW9LS1FqV2FsUi1VdlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE84HbP7L
hA1CLH6hMh4ucoi4RQz31D7jjoG92HAHpHf9atC7nKPxIgJlXYFcDbo1gkhPdRYw
PxsKdht0l09FpBHO3fuup0g54qXzy52AxZ95mRyqSR15aTF5jFQMtI7k6YaOc0kT
97Y7Qu9zPrt4ib1HZKmgXRwa9ckROBz8aDZNbwYSHdnascjTv6v4zeUEXdt7H6Db
IKBr9XVkeSUWtNIKSXZe+qAp6EUtVtnNOJQ5nF678dXeN5i0Pu5tYlO4YvFZ2U86
GOuX5GlfJ+u1vqd80AHLFGwChmqcOwRZU9KVMZA332RMWytjEx6wY8P/WAfW7j4a
qqUuukk9nwCZ9w==
-----END CERTIFICATE-----