Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File:                     KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier:          hwfkHq/EnBtW/SDTGH43/OsKwtAx8uJ3K/R9wpNfRss=
Subject key identifier:   D0:7C:C5:11:9D:B5:F3:E1:7F:2C:14:CB:DE:B3:30:A8:5B:B1:80:AA
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer:       /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial:       019356F6D9120457E49CB5CD6E6FBCA18F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 03:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:38 +0000
Files and hashes:         1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: PMTRfusNyktB9MA2+jN9rN26JZ+OCCQP9yqdZMqryXI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:d9:12:04:57:e4:9c:b5:cd:6e:6f:bc:a1:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
        Validity
            Not Before: Nov 23 03:00:38 2024 GMT
            Not After : Nov 24 03:00:38 2024 GMT
        Subject: CN=d07cc5119db5f3e17f2c14cbdeb330a85bb180aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:26:09:ef:b5:04:90:db:5b:24:36:01:3d:
                    8b:13:04:16:1a:d8:20:e8:85:1d:50:cb:da:02:d2:
                    15:95:e1:13:e5:ed:1e:b7:bd:7c:b8:d5:b7:81:97:
                    dd:6f:d2:75:da:f8:36:b1:58:cb:53:ce:aa:83:b2:
                    be:99:61:e5:f6:3f:92:aa:08:82:ab:22:be:24:dc:
                    6a:e1:11:ae:83:d4:20:80:c8:ea:fc:ee:39:b6:d5:
                    7a:12:07:d3:78:6c:2c:15:a5:be:a0:5e:9f:4e:38:
                    96:08:7e:df:2a:b4:b1:ab:5d:ff:12:37:53:3a:b7:
                    1f:f3:36:26:b4:67:f4:14:a9:03:91:af:11:8b:90:
                    c8:53:b7:b0:44:3e:cc:5e:88:c8:77:91:71:e2:d6:
                    82:63:05:18:1f:43:db:4b:3d:7d:8f:62:c2:a8:9f:
                    85:2b:58:c6:d7:69:2d:25:da:14:ac:44:2b:ed:08:
                    48:28:db:32:fa:cb:ba:1e:13:c1:0b:8d:bb:4c:ec:
                    fd:09:6b:45:8d:a3:cc:e1:27:4c:95:6c:c8:45:7a:
                    cb:b0:a4:5d:25:47:c3:69:1b:31:56:61:57:a7:a5:
                    04:fc:a3:dd:11:22:c7:51:84:0c:e2:98:43:d5:ce:
                    c4:f4:f5:ed:a5:c0:2a:1a:53:d7:87:ab:bc:01:c4:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7C:C5:11:9D:B5:F3:E1:7F:2C:14:CB:DE:B3:30:A8:5B:B1:80:AA
            X509v3 Authority Key Identifier:
                keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:39:5d:03:db:84:8a:51:d3:a7:3d:12:46:cb:22:ea:99:db:
         fb:ee:90:87:f1:7b:51:db:22:2a:c6:65:49:73:78:ec:09:5c:
         f3:d5:43:e9:dd:7e:77:85:12:9e:3a:64:f0:d4:ce:da:4d:f9:
         d4:b2:13:1c:83:fb:a5:25:e4:2c:b5:bc:76:8c:9c:60:43:19:
         a4:b9:77:00:41:f3:37:bd:3e:d1:62:4c:88:9a:1d:2a:8b:62:
         1c:72:aa:fc:4e:54:3e:5c:a0:bf:0a:7a:3a:d1:f0:b8:9d:f6:
         56:d5:a0:5c:56:7b:ac:80:97:a9:b3:4c:2a:84:91:5c:45:71:
         ec:b1:a0:d9:cb:51:8a:e2:94:1f:1f:d2:45:79:e5:8a:71:5b:
         7d:ea:38:c2:74:c9:9c:21:cd:bf:10:37:cb:33:9a:2a:f0:19:
         0b:5d:ff:ed:20:e4:bd:92:cb:08:ee:d7:a5:54:e4:80:da:51:
         12:ae:c8:6c:d9:9a:ed:17:af:16:57:c2:6c:34:01:ef:c8:d1:
         5a:fd:c8:88:0e:70:af:d8:c1:9f:b6:7f:09:f5:1e:0c:4c:c3:
         6f:35:80:43:63:05:44:c2:34:72:e8:4e:44:12:41:44:09:ff:
         9d:62:65:00:0b:3c:5f:f1:44:9a:6d:fe:ce:37:41:13:4d:69:
         9b:04:2c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9tkSBFfknLXNbm+8oY9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjQxMTIzMDMwMDM4WhcNMjQxMTI0MDMwMDM4WjAzMTEwLwYDVQQD
EyhkMDdjYzUxMTlkYjVmM2UxN2YyYzE0Y2JkZWIzMzBhODViYjE4MGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+8mCe+1BJDbWyQ2AT2LEwQWGtgg
6IUdUMvaAtIVleET5e0et718uNW3gZfdb9J12vg2sVjLU86qg7K+mWHl9j+SqgiC
qyK+JNxq4RGug9QggMjq/O45ttV6EgfTeGwsFaW+oF6fTjiWCH7fKrSxq13/EjdT
Orcf8zYmtGf0FKkDka8Ri5DIU7ewRD7MXojId5Fx4taCYwUYH0PbSz19j2LCqJ+F
K1jG12ktJdoUrEQr7QhIKNsy+su6HhPBC427TOz9CWtFjaPM4SdMlWzIRXrLsKRd
JUfDaRsxVmFXp6UE/KPdESLHUYQM4phD1c7E9PXtpcAqGlPXh6u8AcS5HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB8xRGdtfPhfywUy96zMKhbsYCqMB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjldA9uE
ilHTpz0SRssi6pnb++6Qh/F7UdsiKsZlSXN47Alc89VD6d1+d4USnjpk8NTO2k35
1LITHIP7pSXkLLW8doycYEMZpLl3AEHzN70+0WJMiJodKotiHHKq/E5UPlygvwp6
OtHwuJ32VtWgXFZ7rICXqbNMKoSRXEVx7LGg2ctRiuKUHx/SRXnlinFbfeo4wnTJ
nCHNvxA3yzOaKvAZC13/7SDkvZLLCO7XpVTkgNpREq7IbNma7RevFlfCbDQB78jR
Wv3IiA5wr9jBn7Z/CfUeDEzDbzWAQ2MFRMI0cuhORBJBRAn/nWJlAAs8X/FEmm3+
zjdBE01pmwQspw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:14 2024 by rpki-client on console-fra.rpki-client.org