Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File:                     gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier:          M79HsIxMC+smpoAU/JUUTxdHpNHgIgxaBu9zHVWlw3g=
Subject key identifier:   DD:73:87:40:EB:E4:E4:F7:5E:66:6D:60:4A:85:9E:01:2C:2F:71:59
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer:       /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial:       0193568A1375F7D69E0B4B7722C02123A840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number:          0C36
Signing time:             Sat 23 Nov 2024 01:01:49 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:49 +0000
Files and hashes:         1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: v47IpxFUpYV+GZbwYMiSNJEWfgklcJ+8vsSPEWPROUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:13:75:f7:d6:9e:0b:4b:77:22:c0:21:23:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
        Validity
            Not Before: Nov 23 01:01:49 2024 GMT
            Not After : Nov 24 01:01:49 2024 GMT
        Subject: CN=dd738740ebe4e4f75e666d604a859e012c2f7159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:5a:89:dc:b5:25:eb:14:f9:7c:9e:e4:0c:
                    30:f1:c1:dc:3c:9c:b4:3e:99:fc:b3:7a:ee:89:4b:
                    fc:4d:af:e2:a6:a3:75:29:53:20:aa:9b:da:c3:b5:
                    e8:f0:5d:a8:a1:7f:8d:e8:9c:3d:85:f7:c5:f0:dc:
                    f2:a1:6a:29:90:ba:4c:58:42:b8:bd:32:cf:d2:bd:
                    a5:2c:be:5a:ce:c1:a2:e4:37:6f:0d:f9:68:1d:5d:
                    d8:7f:fb:01:5f:49:5a:1b:84:1a:9a:0f:85:fa:26:
                    8f:b1:41:c9:b7:16:99:0d:5c:b9:ae:ba:6e:b2:be:
                    7e:8e:00:e3:6a:47:ff:87:37:7b:3f:41:a4:3c:34:
                    4a:e8:39:3a:4f:c5:e0:cb:50:12:4b:ed:66:47:6d:
                    d4:04:5d:1e:22:c7:fe:7c:94:0f:cc:96:2d:ff:1d:
                    db:f6:85:52:7b:1c:f9:1e:04:7f:1a:3c:36:2e:af:
                    03:8d:2d:49:65:97:0c:7d:e6:0c:ed:a9:b6:c2:1d:
                    11:28:7a:3b:7a:57:16:82:42:a1:4d:8e:e9:db:6e:
                    e8:1e:dd:c8:cf:12:32:4c:1e:eb:da:f2:03:10:c3:
                    66:7d:2d:f8:93:cc:d6:a2:75:7a:06:f8:f5:90:f6:
                    ce:b5:5f:1b:41:eb:12:4d:e0:3c:29:de:5b:cc:56:
                    db:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:73:87:40:EB:E4:E4:F7:5E:66:6D:60:4A:85:9E:01:2C:2F:71:59
            X509v3 Authority Key Identifier:
                keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:65:d3:f3:3b:4b:3a:ba:ca:a0:0c:d9:3e:b3:ff:50:ac:
         87:3f:d9:b4:04:55:8d:a3:bf:79:ed:d3:30:eb:e3:7a:c6:6b:
         5a:c2:cc:9e:c4:8c:23:34:c4:2d:86:02:23:fc:06:47:16:79:
         39:ba:a7:8b:97:54:73:e8:2f:9c:06:9d:f4:01:2a:c0:ee:27:
         c8:ca:e1:28:e2:f3:cf:31:90:01:06:48:83:8e:db:e0:ba:7d:
         fd:f7:53:c1:da:08:3e:a5:7f:22:ea:af:70:49:0d:7a:4b:0a:
         8f:cf:a2:ee:3f:88:94:f2:12:73:0f:3a:c8:ff:96:b8:48:e7:
         de:d0:ba:33:36:36:2f:e5:be:59:ff:83:e0:66:1d:e7:4b:55:
         5d:55:8f:64:4d:10:03:e1:70:92:9b:0d:f4:b7:c0:5c:df:95:
         f1:29:26:87:72:e3:e4:26:1c:97:45:5c:a4:de:14:d6:ad:f4:
         e4:43:a9:d4:40:5e:1a:07:31:2e:f2:c7:4f:17:15:66:0a:b5:
         f8:b5:c2:fe:30:3b:09:03:67:5b:31:ea:33:a2:a5:4c:72:ee:
         d0:1a:1d:2a:02:53:be:0d:e4:65:dc:40:ae:cf:d2:59:92:bc:
         2a:b2:3b:4a:88:e6:15:17:85:12:e3:0d:b0:d6:f1:2a:b2:44:
         4a:c5:4a:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWihN199aeC0t3IsAhI6hAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzc5OWU3YzhkOTJhODVjZTk1MDhjMWJlMWEzZjM4MDk1
MDk1OTEwHhcNMjQxMTIzMDEwMTQ5WhcNMjQxMTI0MDEwMTQ5WjAzMTEwLwYDVQQD
EyhkZDczODc0MGViZTRlNGY3NWU2NjZkNjA0YTg1OWUwMTJjMmY3MTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Rpaidy1JesU+Xye5Aww8cHcPJy0
Ppn8s3ruiUv8Ta/ipqN1KVMgqpvaw7Xo8F2ooX+N6Jw9hffF8NzyoWopkLpMWEK4
vTLP0r2lLL5azsGi5DdvDfloHV3Yf/sBX0laG4Qamg+F+iaPsUHJtxaZDVy5rrpu
sr5+jgDjakf/hzd7P0GkPDRK6Dk6T8Xgy1ASS+1mR23UBF0eIsf+fJQPzJYt/x3b
9oVSexz5HgR/Gjw2Lq8DjS1JZZcMfeYM7am2wh0RKHo7elcWgkKhTY7p227oHt3I
zxIyTB7r2vIDEMNmfS34k8zWonV6Bvj1kPbOtV8bQesSTeA8Kd5bzFbbpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1zh0Dr5OT3XmZtYEqFngEsL3FZMB8GA1UdIwQY
MBaAFIM3mefI2SqFzpUIwb4aPzgJUJWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTIt
M2ZhNDY3NmEwZGNlLzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTItM2ZhNDY3NmEwZGNl
LzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHxl0/M7
Szq6yqAM2T6z/1Cshz/ZtARVjaO/ee3TMOvjesZrWsLMnsSMIzTELYYCI/wGRxZ5
Obqni5dUc+gvnAad9AEqwO4nyMrhKOLzzzGQAQZIg47b4Lp9/fdTwdoIPqV/Iuqv
cEkNeksKj8+i7j+IlPIScw86yP+WuEjn3tC6MzY2L+W+Wf+D4GYd50tVXVWPZE0Q
A+FwkpsN9LfAXN+V8Skmh3Lj5CYcl0VcpN4U1q305EOp1EBeGgcxLvLHTxcVZgq1
+LXC/jA7CQNnWzHqM6KlTHLu0BodKgJTvg3kZdxArs/SWZK8KrI7SojmFReFEuMN
sNbxKrJESsVKFw==
-----END CERTIFICATE-----