Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File:                     LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier:          7/QWmnXjQb92aHFzYrcXzdj4LEEA+UW9sj+KAB4LBBU=
Subject key identifier:   D3:A8:89:B5:68:B0:0D:0C:D0:D8:D0:88:7A:07:02:1A:28:37:DA:68
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer:       /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial:       0193572D7630340A86E97451452CE476E8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number:          03E4
Signing time:             Sat 23 Nov 2024 04:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:17 +0000
Files and hashes:         1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: o03Xyjn5ev30+SWXTizv6AUOASnbL2cUCxPL/XlSWJw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:76:30:34:0a:86:e9:74:51:45:2c:e4:76:e8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
        Validity
            Not Before: Nov 23 04:00:17 2024 GMT
            Not After : Nov 24 04:00:17 2024 GMT
        Subject: CN=d3a889b568b00d0cd0d8d0887a07021a2837da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:54:6b:35:e3:c2:48:0a:47:89:24:de:8f:
                    45:63:88:8a:9f:06:d7:88:9c:dc:00:5d:99:99:36:
                    d3:1a:66:22:bb:f4:41:76:a1:c0:b2:d8:0f:ca:71:
                    6e:47:9f:25:f1:e2:fd:7f:61:f1:fc:23:86:3e:7e:
                    11:43:14:34:92:61:9d:a4:c1:b4:2b:65:5a:50:3c:
                    2f:79:7f:1e:15:55:19:06:fd:7c:ce:b0:6b:bf:71:
                    ae:93:6c:99:5b:10:e2:f8:23:4a:43:e0:08:2c:e9:
                    4a:91:b5:26:f2:94:bf:f6:e4:1f:07:be:53:5d:29:
                    78:de:c4:06:b2:40:e6:ad:3d:97:f1:f3:9a:2f:ca:
                    15:15:d9:aa:32:69:1f:53:32:13:48:a0:9b:31:68:
                    6f:76:dd:0b:7f:fb:38:dd:ad:a3:83:84:96:de:df:
                    8f:6a:dd:6c:40:35:7f:8c:93:43:60:da:e3:9f:b7:
                    48:f1:e0:15:eb:e1:21:9c:fd:46:3a:e3:8e:f6:8a:
                    84:59:ea:29:43:75:b7:ac:26:0b:53:45:01:58:98:
                    9f:c1:24:cd:61:d9:76:0c:45:09:1f:20:4d:f9:d2:
                    05:f1:ba:fb:67:16:7d:0a:b5:a3:56:c6:95:dc:80:
                    bf:52:89:fa:74:fc:7f:32:ac:d1:94:85:dd:43:4d:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:89:B5:68:B0:0D:0C:D0:D8:D0:88:7A:07:02:1A:28:37:DA:68
            X509v3 Authority Key Identifier:
                keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:43:28:d4:41:91:73:b7:53:9f:2c:a0:fb:69:93:63:ee:
         98:19:5f:3d:58:d8:65:1e:d2:5c:41:78:b2:08:9c:bc:33:42:
         94:1f:cb:0e:71:f8:f9:07:20:68:ed:d6:b1:eb:b8:fc:e9:41:
         60:72:7b:e0:f7:49:9d:95:f0:00:26:52:b3:9e:fa:08:24:11:
         e6:4d:64:ce:89:cb:17:61:f0:c9:b0:ba:82:3b:59:f3:84:27:
         7c:72:ac:06:37:13:f5:e3:40:43:d9:1c:fc:d7:e2:8b:66:47:
         a8:57:52:44:db:f4:36:36:3b:08:4a:40:16:b5:66:01:2d:01:
         7c:24:36:76:5d:9e:64:df:39:3d:e5:f2:99:6b:60:7e:8a:0e:
         9f:85:7f:ff:13:3f:5a:ab:23:fd:e8:9c:c0:de:97:20:d7:3a:
         63:1c:b2:4d:70:bf:2c:74:dc:e5:c2:c5:d1:fb:2d:68:b6:4b:
         6f:01:d2:ee:97:e7:82:1d:f6:c8:5f:b3:aa:40:36:7f:3a:8d:
         8d:b4:8f:49:9a:42:c4:fb:62:73:d1:4c:04:fe:50:b1:7a:b1:
         01:1b:ce:94:60:df:62:71:8f:3a:b6:cf:ca:71:22:4b:b6:63:
         d6:0e:ff:a3:ac:34:fd:63:ff:e6:47:14:1f:2d:8e:f4:98:6a:
         12:7f:4c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLXYwNAqG6XRRRSzkdui+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDUyNDY2Yzk1ODVmNmY1YTljYzFjMzBlOGQ3YjE2ZWQ0
NzRhNDgwHhcNMjQxMTIzMDQwMDE3WhcNMjQxMTI0MDQwMDE3WjAzMTEwLwYDVQQD
EyhkM2E4ODliNTY4YjAwZDBjZDBkOGQwODg3YTA3MDIxYTI4MzdkYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob1UazXjwkgKR4kk3o9FY4iKnwbX
iJzcAF2ZmTbTGmYiu/RBdqHAstgPynFuR58l8eL9f2Hx/COGPn4RQxQ0kmGdpMG0
K2VaUDwveX8eFVUZBv18zrBrv3Guk2yZWxDi+CNKQ+AILOlKkbUm8pS/9uQfB75T
XSl43sQGskDmrT2X8fOaL8oVFdmqMmkfUzITSKCbMWhvdt0Lf/s43a2jg4SW3t+P
at1sQDV/jJNDYNrjn7dI8eAV6+EhnP1GOuOO9oqEWeopQ3W3rCYLU0UBWJifwSTN
Ydl2DEUJHyBN+dIF8br7ZxZ9CrWjVsaV3IC/Uon6dPx/MqzRlIXdQ03BbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOoibVosA0M0NjQiHoHAhooN9poMB8GA1UdIwQY
MBaAFC1FJGbJWF9vWpzBww6NexbtR0pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUt
MjNlOWFhNWM4YWExLzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUtMjNlOWFhNWM4YWEx
LzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/lDKNRB
kXO3U58soPtpk2PumBlfPVjYZR7SXEF4sgicvDNClB/LDnH4+QcgaO3Wseu4/OlB
YHJ74PdJnZXwACZSs576CCQR5k1kzonLF2HwybC6gjtZ84QnfHKsBjcT9eNAQ9kc
/Nfii2ZHqFdSRNv0NjY7CEpAFrVmAS0BfCQ2dl2eZN85PeXymWtgfooOn4V//xM/
Wqsj/eicwN6XINc6YxyyTXC/LHTc5cLF0fstaLZLbwHS7pfngh32yF+zqkA2fzqN
jbSPSZpCxPtic9FMBP5QsXqxARvOlGDfYnGPOrbPynEiS7Zj1g7/o6w0/WP/5kcU
Hy2O9JhqEn9MDg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:54 2024 by rpki-client on console-ams.rpki-client.org