Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File:                     Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier:          RcE0VFKr3sv6XLHNGXaXx6/edkFaLEDXeu0BSRBzBFc=
Subject key identifier:   3E:CF:6B:E1:A9:4D:4E:13:3D:23:69:F4:40:E4:51:84:C8:EF:A8:2D
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer:       /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial:       01935688EC27A6079C247D9EA2BCCB47F165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 01:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:34 +0000
Files and hashes:         1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: QANPXUFdUFAqclAeOMvJJIAc9krE3fF7vnn4M96RlWY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:ec:27:a6:07:9c:24:7d:9e:a2:bc:cb:47:f1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
        Validity
            Not Before: Nov 23 01:00:34 2024 GMT
            Not After : Nov 24 01:00:34 2024 GMT
        Subject: CN=3ecf6be1a94d4e133d2369f440e45184c8efa82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:e5:03:e6:e0:ea:00:4d:0b:ca:77:c3:c8:
                    e2:eb:21:81:fb:20:8e:3f:1c:b9:76:f7:31:b9:3d:
                    6f:32:bd:11:95:6a:dc:8e:0c:34:6a:67:14:08:3e:
                    2f:97:4c:e8:57:b6:40:4c:77:35:61:cb:22:eb:b5:
                    d2:37:87:de:fe:12:82:8d:97:f0:97:e4:7d:f4:5c:
                    1c:06:1d:e7:32:b0:83:db:c3:7b:e3:0e:43:f0:e2:
                    ac:3a:a8:88:97:60:f2:cd:96:40:8d:54:08:fb:3b:
                    a4:84:f2:d7:40:65:a5:4c:63:87:fb:1c:91:1a:12:
                    d8:f6:b2:db:ff:89:52:78:13:64:e7:70:b2:d4:3a:
                    2b:9f:23:7b:c1:48:7d:d8:8f:da:20:53:2d:a0:a2:
                    53:fc:b6:79:ee:d5:ed:e9:41:11:81:0c:fc:6a:13:
                    09:53:5c:e7:ad:54:7e:67:0b:e2:d5:1a:04:3e:36:
                    9a:2e:59:51:ef:68:8e:0a:12:f0:dc:65:e0:eb:ef:
                    51:44:51:7b:a8:9c:05:a5:7b:01:ca:78:62:e9:18:
                    2c:26:23:13:d2:b6:69:f0:0b:4c:04:08:fc:79:4d:
                    73:f9:b1:59:a8:ba:cb:65:3d:a9:ed:57:f0:a7:bf:
                    46:27:ca:e1:81:1d:bf:a8:f1:43:f2:2f:fa:ac:1c:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CF:6B:E1:A9:4D:4E:13:3D:23:69:F4:40:E4:51:84:C8:EF:A8:2D
            X509v3 Authority Key Identifier:
                keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:a3:66:fb:3c:4c:8f:3e:4c:a8:7d:2a:9b:0b:d2:46:77:
         1f:20:3d:9d:48:82:e7:43:9f:95:83:a5:5a:cf:1d:2a:e1:30:
         15:ca:0b:c4:cb:18:0d:c6:13:aa:19:90:21:2a:26:f4:2f:ae:
         00:60:c9:55:30:e7:bb:73:38:4e:b4:a1:8e:a0:5d:1f:80:f5:
         40:73:3b:b1:10:b0:12:63:fa:07:6a:3c:15:94:88:bf:93:f1:
         19:82:00:58:c0:97:30:ab:27:8f:d4:9e:f7:3e:a7:e5:73:d7:
         f8:00:46:81:90:fc:68:a5:28:a3:18:a7:b2:d6:af:8a:48:57:
         75:e9:bd:ef:40:29:06:e8:0f:10:b9:2c:ad:8a:a0:98:c5:f8:
         50:c0:79:c9:d2:b5:f4:36:05:45:47:44:30:d8:9c:ff:49:00:
         fc:9c:75:05:6f:f6:ca:5f:b3:98:95:f1:0f:1f:16:82:23:42:
         85:50:99:96:45:49:57:05:81:89:b0:4e:08:be:01:61:be:78:
         ff:9a:43:02:b4:60:ff:6e:91:6d:87:fc:1c:6d:f8:a0:1a:87:
         6d:a4:87:54:4e:6c:b8:60:7e:a3:41:5c:ba:5f:68:a8:e9:93:
         02:be:18:68:25:a3:50:a9:77:ee:54:54:f3:95:7d:a4:63:74:
         4e:44:7b:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOwnpgecJH2eorzLR/FlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzQxZTA3OWViOWRjZjVmYWQ5ZTVkNDhkZGNlMzk2OTc3
Yjc5NzcwHhcNMjQxMTIzMDEwMDM0WhcNMjQxMTI0MDEwMDM0WjAzMTEwLwYDVQQD
EygzZWNmNmJlMWE5NGQ0ZTEzM2QyMzY5ZjQ0MGU0NTE4NGM4ZWZhODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNjlA+bg6gBNC8p3w8ji6yGB+yCO
Pxy5dvcxuT1vMr0RlWrcjgw0amcUCD4vl0zoV7ZATHc1Ycsi67XSN4fe/hKCjZfw
l+R99FwcBh3nMrCD28N74w5D8OKsOqiIl2DyzZZAjVQI+zukhPLXQGWlTGOH+xyR
GhLY9rLb/4lSeBNk53Cy1DornyN7wUh92I/aIFMtoKJT/LZ57tXt6UERgQz8ahMJ
U1znrVR+Zwvi1RoEPjaaLllR72iOChLw3GXg6+9RRFF7qJwFpXsBynhi6RgsJiMT
0rZp8AtMBAj8eU1z+bFZqLrLZT2p7Vfwp79GJ8rhgR2/qPFD8i/6rBzqEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7Pa+GpTU4TPSNp9EDkUYTI76gtMB8GA1UdIwQY
MBaAFGfEHgeeudz1+tnl1I3c45aXe3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgt
ZDY0MzE0ZGEwYmI5LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgtZDY0MzE0ZGEwYmI5
LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkSjZvs8
TI8+TKh9KpsL0kZ3HyA9nUiC50OflYOlWs8dKuEwFcoLxMsYDcYTqhmQISom9C+u
AGDJVTDnu3M4TrShjqBdH4D1QHM7sRCwEmP6B2o8FZSIv5PxGYIAWMCXMKsnj9Se
9z6n5XPX+ABGgZD8aKUooxinstavikhXdem970ApBugPELksrYqgmMX4UMB5ydK1
9DYFRUdEMNic/0kA/Jx1BW/2yl+zmJXxDx8WgiNChVCZlkVJVwWBibBOCL4BYb54
/5pDArRg/26RbYf8HG34oBqHbaSHVE5suGB+o0Fcul9oqOmTAr4YaCWjUKl37lRU
85V9pGN0TkR7pw==
-----END CERTIFICATE-----