Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
File:                     DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft (raw, json)
Hash identifier:          WcBd/7t62yYnAz6lZAk9f1d+K19xJj6+Bq1V4CgbfKY=
Subject key identifier:   BA:32:30:D4:77:C7:49:4E:60:74:F4:75:2E:B5:A2:51:65:11:1E:EC
Authority key identifier: 0C:47:35:08:6C:74:C1:4B:75:B0:F6:72:41:7E:30:75:CF:6F:41:2B
Certificate issuer:       /CN=0c4735086c74c14b75b0f672417e3075cf6f412b
Certificate serial:       019356899410F14FFD510D1FAEA08865986E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
Manifest number:          0957
Signing time:             Sat 23 Nov 2024 01:01:17 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:17 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:17 +0000
Files and hashes:         1: DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl (hash: JLZPbff3aZi+dyjDhoNV+3k2nrj8/ffi9QBa6LPox3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:94:10:f1:4f:fd:51:0d:1f:ae:a0:88:65:98:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4735086c74c14b75b0f672417e3075cf6f412b
        Validity
            Not Before: Nov 23 01:01:17 2024 GMT
            Not After : Nov 24 01:01:17 2024 GMT
        Subject: CN=ba3230d477c7494e6074f4752eb5a25165111eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:26:46:62:ca:4b:a6:de:e8:b4:95:56:4a:
                    6c:65:14:ef:00:8f:b6:fd:b0:e3:d1:a0:4d:70:ad:
                    18:7e:24:f3:40:e0:ed:1b:30:31:70:ab:0d:8e:d8:
                    57:85:67:76:be:b1:50:c9:42:bc:a8:85:66:53:23:
                    9c:c3:ac:b0:c1:63:b5:b1:24:3f:94:db:47:9a:c3:
                    6f:7a:26:89:e6:6f:d0:f3:70:b6:f3:85:23:0a:54:
                    e5:1e:39:20:be:a7:a4:94:7c:9b:40:3c:1e:a3:95:
                    4f:23:82:48:ee:12:5f:c9:5a:08:a5:bd:88:f1:58:
                    ef:3e:c6:78:ab:26:00:ef:7b:85:29:ea:06:b1:51:
                    4a:29:ca:43:b3:cf:cf:38:bb:44:32:dc:47:cc:6c:
                    69:04:76:dd:e9:f1:08:bc:46:be:5a:d4:92:eb:05:
                    46:f3:d9:8b:38:26:9e:26:d9:b6:eb:9a:55:73:23:
                    f4:96:a6:38:aa:3a:29:5b:69:d0:6e:db:d9:e0:32:
                    a2:6f:f4:4d:53:e1:5e:99:30:55:c0:2a:49:de:39:
                    66:ad:c8:71:06:4f:ca:83:f2:a5:7b:56:8e:58:e4:
                    5e:d0:ff:61:a7:1d:75:c3:90:74:54:4a:1b:55:cd:
                    a0:e8:c5:ce:a6:61:ee:7c:ee:aa:44:1f:03:e5:25:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:32:30:D4:77:C7:49:4E:60:74:F4:75:2E:B5:A2:51:65:11:1E:EC
            X509v3 Authority Key Identifier:
                keyid:0C:47:35:08:6C:74:C1:4B:75:B0:F6:72:41:7E:30:75:CF:6F:41:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEc1CGx0wUt1sPZyQX4wdc9vQSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1d496d-09ea-4ce8-bf47-79e48431d6d3/1/DEc1CGx0wUt1sPZyQX4wdc9vQSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5c:e1:d9:3a:65:41:9c:bf:43:5e:12:85:77:f9:10:c2:79:
         52:00:65:57:b3:80:4e:6a:51:08:b7:c7:83:24:0e:34:c8:eb:
         5c:4d:bb:ac:d1:6f:e9:45:e6:25:6b:76:a6:27:92:89:37:bd:
         8f:d3:5d:1a:7e:84:70:79:81:d4:2e:88:fb:84:e3:96:77:8d:
         88:67:2f:aa:c8:52:08:a5:cd:08:15:fd:9c:20:44:8f:21:7b:
         cc:29:35:07:36:74:72:5f:77:6f:7b:25:29:bc:97:38:78:fd:
         4a:03:85:5c:95:8c:7a:38:0a:d3:48:d8:8e:76:ba:15:67:0c:
         f2:15:d8:fb:51:e8:9d:45:de:f9:7b:53:fb:27:9d:ef:ec:50:
         d6:eb:60:0b:3b:ed:4c:60:95:66:13:b1:07:8f:13:45:6e:2e:
         24:a6:e1:ad:0a:fb:c5:db:69:ab:3f:b3:14:a9:33:b3:ec:05:
         8a:4a:ad:3a:eb:dc:d1:1a:c4:09:ec:e4:5a:82:05:6c:e7:c5:
         ad:06:e5:98:a0:da:d9:97:6c:4d:d5:45:06:9b:a9:ab:26:55:
         17:5a:49:05:67:1b:e5:7d:3e:51:e7:ab:ef:83:6c:03:44:63:
         d0:43:08:17:af:09:6e:73:20:f7:19:51:31:50:4a:a2:cd:06:
         3b:6a:c4:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiZQQ8U/9UQ0frqCIZZhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDczNTA4NmM3NGMxNGI3NWIwZjY3MjQxN2UzMDc1Y2Y2
ZjQxMmIwHhcNMjQxMTIzMDEwMTE3WhcNMjQxMTI0MDEwMTE3WjAzMTEwLwYDVQQD
EyhiYTMyMzBkNDc3Yzc0OTRlNjA3NGY0NzUyZWI1YTI1MTY1MTExZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnssmRmLKS6be6LSVVkpsZRTvAI+2
/bDj0aBNcK0YfiTzQODtGzAxcKsNjthXhWd2vrFQyUK8qIVmUyOcw6ywwWO1sSQ/
lNtHmsNveiaJ5m/Q83C284UjClTlHjkgvqeklHybQDweo5VPI4JI7hJfyVoIpb2I
8VjvPsZ4qyYA73uFKeoGsVFKKcpDs8/POLtEMtxHzGxpBHbd6fEIvEa+WtSS6wVG
89mLOCaeJtm265pVcyP0lqY4qjopW2nQbtvZ4DKib/RNU+FemTBVwCpJ3jlmrchx
Bk/Kg/Kle1aOWORe0P9hpx11w5B0VEobVc2g6MXOpmHufO6qRB8D5SX31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoyMNR3x0lOYHT0dS61olFlER7sMB8GA1UdIwQY
MBaAFAxHNQhsdMFLdbD2ckF+MHXPb0ErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVjMUNHeDB3VXQxc1BaeVFYNHdkYzl2UVNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xZDQ5NmQtMDllYS00Y2U4LWJmNDct
NzllNDg0MzFkNmQzLzEvREVjMUNHeDB3VXQxc1BaeVFYNHdkYzl2UVNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8xZDQ5NmQtMDllYS00Y2U4LWJmNDctNzllNDg0MzFkNmQz
LzEvREVjMUNHeDB3VXQxc1BaeVFYNHdkYzl2UVNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVzh2Tpl
QZy/Q14ShXf5EMJ5UgBlV7OATmpRCLfHgyQONMjrXE27rNFv6UXmJWt2pieSiTe9
j9NdGn6EcHmB1C6I+4TjlneNiGcvqshSCKXNCBX9nCBEjyF7zCk1BzZ0cl93b3sl
KbyXOHj9SgOFXJWMejgK00jYjna6FWcM8hXY+1HonUXe+XtT+yed7+xQ1utgCzvt
TGCVZhOxB48TRW4uJKbhrQr7xdtpqz+zFKkzs+wFikqtOuvc0RrECezkWoIFbOfF
rQblmKDa2ZdsTdVFBpupqyZVF1pJBWcb5X0+Ueer74NsA0Rj0EMIF68JbnMg9xlR
MVBKos0GO2rENQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:27 2024 by rpki-client on console-fra.rpki-client.org