Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File:                     LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier:          YC8PCkU93t9Ld4IGtf6UPH4X3YlH4TunOSvCp2Xgwj0=
Subject key identifier:   41:30:66:B4:B8:D9:1C:5F:49:7A:6F:D7:4D:AD:A9:3D:BB:58:80:C8
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer:       /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial:       01936AB443023AE91EA962AABBA774C59F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number:          0289
Signing time:             Tue 26 Nov 2024 23:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:18 +0000
Files and hashes:         1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: s5MCuP4xEqoHn9BEaBgLHXw8d87Qj6dOI68r6Y34KnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:43:02:3a:e9:1e:a9:62:aa:bb:a7:74:c5:9f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
        Validity
            Not Before: Nov 26 23:00:18 2024 GMT
            Not After : Nov 27 23:00:18 2024 GMT
        Subject: CN=413066b4b8d91c5f497a6fd74dada93dbb5880c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:91:c4:88:0b:72:9a:f8:e4:89:8a:73:21:
                    ef:7f:39:07:b4:1c:b1:3a:a1:b9:8e:cf:fd:6c:5f:
                    3c:c7:f3:dd:c8:5c:44:5f:ca:aa:f6:06:78:10:f8:
                    34:ff:7f:de:cb:13:cd:d1:1f:e8:99:3c:27:41:83:
                    ad:58:ac:53:ee:e1:b1:2b:41:13:2c:20:d5:4c:e5:
                    3c:67:23:71:7a:d4:50:06:5e:7f:aa:02:10:fb:d7:
                    36:4b:37:9f:a7:b1:61:8e:13:e2:1d:3a:ca:0b:5a:
                    7a:00:8e:bc:22:90:5c:02:3e:64:9f:de:53:34:04:
                    b3:e2:06:d2:8d:5a:79:47:72:d2:98:38:d0:37:c6:
                    7a:00:1b:70:b3:16:8b:c5:44:3d:8f:a1:6e:30:5e:
                    72:86:c5:75:47:e8:f1:b4:99:89:e0:17:9b:7d:22:
                    ae:1e:94:9f:2f:d1:e9:6a:1c:19:22:aa:c2:36:c4:
                    2f:19:15:66:f4:7e:cf:19:7e:54:7c:e9:ea:40:9e:
                    6d:60:c6:43:2d:2b:01:bd:ae:01:57:d4:b1:40:4b:
                    60:b3:ce:c2:22:4b:f4:bb:61:e4:77:66:51:16:59:
                    4d:28:bf:22:7e:1b:c0:e9:b0:41:3e:30:c4:bc:b0:
                    73:8a:db:d3:62:55:69:36:91:c0:46:5b:3e:30:61:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:30:66:B4:B8:D9:1C:5F:49:7A:6F:D7:4D:AD:A9:3D:BB:58:80:C8
            X509v3 Authority Key Identifier:
                keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0c:43:5a:36:fd:7c:44:29:71:04:61:25:99:e7:0c:a7:cc:
         4e:c6:6b:9e:07:9a:20:7e:4e:23:85:d5:d9:a1:1b:7b:48:fa:
         0b:c4:c6:24:24:3a:d8:50:d2:ad:61:8f:cc:22:cf:f7:b9:c8:
         3d:0e:b1:2e:8b:c2:a9:da:b4:eb:23:f3:82:f4:f9:2b:25:1c:
         d1:1c:99:65:51:8e:d5:42:9b:ae:bb:82:44:8d:b7:5a:05:52:
         5c:14:22:cc:49:c0:c0:b2:65:c2:78:c6:b2:af:44:84:9b:99:
         18:26:cb:e5:85:65:67:9c:3f:c1:d5:67:78:b4:cf:78:42:12:
         e6:38:7c:73:ec:9a:49:d8:46:c8:1a:eb:e6:84:92:2c:4a:cf:
         0b:16:c9:86:0e:fc:77:90:72:d6:8d:c7:48:63:9d:c0:c1:b0:
         19:43:77:10:72:51:e1:af:27:95:48:47:d3:de:b7:ed:64:d5:
         3e:ee:0f:d4:d0:4d:4f:8d:9a:6c:11:c1:d7:6d:f2:4b:e0:0a:
         76:01:30:a8:3f:a7:81:6e:e7:1d:b7:8a:3a:71:04:66:3d:88:
         a5:a2:38:13:ed:3d:ed:b0:0a:30:f8:d7:86:95:19:cf:72:5c:
         9a:a2:8e:e9:22:4a:c0:65:41:21:47:6c:5f:62:0f:61:b9:e7:
         7e:b8:51:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtEMCOukeqWKqu6d0xZ8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWMwOGJmMjFjN2Y1OTg4NWJiNWE2ZDQ4MWZmYzMwNjc5
NjlhMTkwHhcNMjQxMTI2MjMwMDE4WhcNMjQxMTI3MjMwMDE4WjAzMTEwLwYDVQQD
Eyg0MTMwNjZiNGI4ZDkxYzVmNDk3YTZmZDc0ZGFkYTkzZGJiNTg4MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz6RxIgLcpr45ImKcyHvfzkHtByx
OqG5js/9bF88x/PdyFxEX8qq9gZ4EPg0/3/eyxPN0R/omTwnQYOtWKxT7uGxK0ET
LCDVTOU8ZyNxetRQBl5/qgIQ+9c2Szefp7FhjhPiHTrKC1p6AI68IpBcAj5kn95T
NASz4gbSjVp5R3LSmDjQN8Z6ABtwsxaLxUQ9j6FuMF5yhsV1R+jxtJmJ4BebfSKu
HpSfL9HpahwZIqrCNsQvGRVm9H7PGX5UfOnqQJ5tYMZDLSsBva4BV9SxQEtgs87C
Ikv0u2Hkd2ZRFllNKL8ifhvA6bBBPjDEvLBzitvTYlVpNpHARls+MGESHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEwZrS42RxfSXpv102tqT27WIDIMB8GA1UdIwQY
MBaAFCycCL8hx/WYhbtabUgf/DBnlpoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjIt
MTJlYTEwNzE0YTU2LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMDk1NTgtNDMxOS00NmMwLTlhYjItMTJlYTEwNzE0YTU2
LzEvTEp3SXZ5SEg5WmlGdTFwdFNCXzhNR2VXbWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAxDWjb9
fEQpcQRhJZnnDKfMTsZrngeaIH5OI4XV2aEbe0j6C8TGJCQ62FDSrWGPzCLP97nI
PQ6xLovCqdq06yPzgvT5KyUc0RyZZVGO1UKbrruCRI23WgVSXBQizEnAwLJlwnjG
sq9EhJuZGCbL5YVlZ5w/wdVneLTPeEIS5jh8c+yaSdhGyBrr5oSSLErPCxbJhg78
d5By1o3HSGOdwMGwGUN3EHJR4a8nlUhH09637WTVPu4P1NBNT42abBHB123yS+AK
dgEwqD+ngW7nHbeKOnEEZj2IpaI4E+097bAKMPjXhpUZz3JcmqKO6SJKwGVBIUds
X2IPYbnnfrhRUw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:35 2024 by rpki-client on console-ams.rpki-client.org