Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          lqAMeB4eRxXuPW62+QO3K9/P/FS4AfWT3NEnSxy6/Vc=
Subject key identifier:   5E:DA:10:7E:2C:93:5E:5C:6E:D4:30:92:40:41:B6:F1:AD:E4:9E:27
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       019356F66E8D3BC37EF79C3D7BF8283C60B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 03:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:10 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: Hft96kfO7qcRgWOHZXKGe25CwMfibP8yK/5G4artBGg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:6e:8d:3b:c3:7e:f7:9c:3d:7b:f8:28:3c:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Nov 23 03:00:10 2024 GMT
            Not After : Nov 24 03:00:10 2024 GMT
        Subject: CN=5eda107e2c935e5c6ed430924041b6f1ade49e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:94:26:cf:0a:d6:8e:8d:18:2d:63:28:ec:
                    be:11:f4:5b:35:f8:f3:80:0c:43:43:ff:90:8c:a2:
                    6b:e6:50:82:ff:af:e7:c5:89:ab:ba:7a:c1:41:03:
                    2a:04:5f:d9:82:ee:cc:9e:cb:0b:97:3e:a7:87:26:
                    5c:9e:f8:59:b9:f5:98:9d:f8:f4:42:c3:12:5b:23:
                    68:1e:0d:c9:e6:d8:78:96:74:ad:0d:b7:19:d2:78:
                    35:84:91:e6:11:9a:e8:d6:0a:e0:5c:78:1e:4b:e9:
                    29:a7:03:49:4c:04:09:84:c3:a9:22:25:37:14:13:
                    d9:78:5a:49:8b:b2:0f:74:72:72:bb:8d:62:70:5d:
                    fb:e1:cc:b6:f9:1a:2f:0e:b9:95:52:f7:43:85:e5:
                    d8:4b:53:f9:03:73:ea:0c:43:e7:9f:d3:01:a4:c7:
                    11:d7:1a:e4:81:d3:aa:90:58:d8:f8:f1:f4:d5:be:
                    62:fe:24:51:bc:7d:9a:ce:0f:9a:e0:fc:d8:b6:d8:
                    54:3c:16:d9:10:d6:6a:f1:81:78:96:5e:67:10:e6:
                    88:0e:9b:db:84:7f:d9:04:59:47:bd:f3:00:91:8d:
                    02:5a:b5:d5:65:22:a6:ab:84:4c:84:d4:97:2d:ec:
                    19:6b:eb:15:b4:ac:2f:e8:74:b1:3c:82:52:72:68:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:10:7E:2C:93:5E:5C:6E:D4:30:92:40:41:B6:F1:AD:E4:9E:27
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:a1:12:b6:1f:62:d7:1f:e5:bd:79:c6:be:5f:de:5d:18:
         d5:77:65:a0:8b:73:d2:d0:c9:78:aa:34:ce:31:6e:6b:11:a7:
         9f:a3:6d:f3:9f:af:6e:11:09:a5:0f:76:2e:01:0e:a1:44:c4:
         15:ae:d6:15:83:58:6e:cb:2e:25:71:6b:15:0c:30:c5:c4:73:
         9f:61:2e:bd:38:4a:04:98:54:6f:bf:d4:c8:37:52:d9:31:a7:
         15:2b:cd:16:5a:26:6e:92:59:3e:2d:c3:09:a9:3a:dc:9b:93:
         00:c3:2c:e1:93:53:2a:73:de:13:c8:6c:e9:0b:65:4f:53:aa:
         2d:53:59:01:89:cf:30:54:66:c7:e9:19:67:4e:d5:5c:50:34:
         4a:63:6f:c1:a5:d1:68:d2:f4:dc:45:3a:d8:8f:a6:53:4b:15:
         8d:a8:d7:a2:c3:11:34:b8:f3:01:c3:96:50:68:9f:bd:62:2a:
         3f:02:d4:d2:a0:bc:b8:e2:05:7f:74:ed:19:79:4b:7a:e1:0d:
         45:4a:9d:77:85:ef:d8:e2:23:6b:76:19:30:ed:cb:59:1f:9c:
         fa:e5:a9:47:4c:a6:7d:b7:23:7b:4e:1d:01:e6:e3:b5:ed:dd:
         52:7d:ee:f8:9a:f2:bf:93:c6:37:81:7f:6e:23:8c:b4:a9:8c:
         a1:5f:6d:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9m6NO8N+95w9e/goPGC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGI1YzFlZWNiYTg2MGNmZmYxNzQ3OTY2ZDc2M2M5YTgy
ZjZkOWEwHhcNMjQxMTIzMDMwMDEwWhcNMjQxMTI0MDMwMDEwWjAzMTEwLwYDVQQD
Eyg1ZWRhMTA3ZTJjOTM1ZTVjNmVkNDMwOTI0MDQxYjZmMWFkZTQ5ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwaUJs8K1o6NGC1jKOy+EfRbNfjz
gAxDQ/+QjKJr5lCC/6/nxYmrunrBQQMqBF/Zgu7MnssLlz6nhyZcnvhZufWYnfj0
QsMSWyNoHg3J5th4lnStDbcZ0ng1hJHmEZro1grgXHgeS+kppwNJTAQJhMOpIiU3
FBPZeFpJi7IPdHJyu41icF374cy2+RovDrmVUvdDheXYS1P5A3PqDEPnn9MBpMcR
1xrkgdOqkFjY+PH01b5i/iRRvH2azg+a4PzYtthUPBbZENZq8YF4ll5nEOaIDpvb
hH/ZBFlHvfMAkY0CWrXVZSKmq4RMhNSXLewZa+sVtKwv6HSxPIJScmg9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7aEH4sk15cbtQwkkBBtvGt5J4nMB8GA1UdIwQY
MBaAFNuLXB7suoYM//F0eWbXY8moL22aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84NjNiMGMtYjFhYy00ZDdjLWFiYzIt
ZmI2ZjAzN2EyODdlLzEvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84NjNiMGMtYjFhYy00ZDdjLWFiYzItZmI2ZjAzN2EyODdl
LzEvMjR0Y0h1eTZoZ3pfOFhSNVp0ZGp5YWd2YlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatihErYf
Ytcf5b15xr5f3l0Y1XdloItz0tDJeKo0zjFuaxGnn6Nt85+vbhEJpQ92LgEOoUTE
Fa7WFYNYbssuJXFrFQwwxcRzn2EuvThKBJhUb7/UyDdS2TGnFSvNFlombpJZPi3D
Cak63JuTAMMs4ZNTKnPeE8hs6QtlT1OqLVNZAYnPMFRmx+kZZ07VXFA0SmNvwaXR
aNL03EU62I+mU0sVjajXosMRNLjzAcOWUGifvWIqPwLU0qC8uOIFf3TtGXlLeuEN
RUqdd4Xv2OIja3YZMO3LWR+c+uWpR0ymfbcje04dAebjte3dUn3u+Jryv5PGN4F/
biOMtKmMoV9ttQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:05 2024 by rpki-client on console-fra.rpki-client.org