Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File:                     u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier:          tbZWIMZQVz+t5LbYtLG6SSrBT/0V1BJaWxN+p/mnZFE=
Subject key identifier:   2A:82:56:2D:5A:9B:31:08:7E:0B:14:D1:EC:06:BB:CC:8F:1E:39:3E
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer:       /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial:       01936B2299B046A1FC32A28401682AB1A42F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number:          027C
Signing time:             Wed 27 Nov 2024 01:00:49 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:49 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:49 +0000
Files and hashes:         1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: L8nRL6FKNB7asVC+GgWD3ZNGyhI68xAzd5KTnpoK+lc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:99:b0:46:a1:fc:32:a2:84:01:68:2a:b1:a4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
        Validity
            Not Before: Nov 27 01:00:49 2024 GMT
            Not After : Nov 28 01:00:49 2024 GMT
        Subject: CN=2a82562d5a9b31087e0b14d1ec06bbcc8f1e393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:7f:8e:94:e5:cb:01:b9:5c:64:1f:52:71:
                    44:9a:96:86:99:f8:35:0b:bd:5a:e2:7e:91:8f:ca:
                    8b:6d:9e:76:7b:69:7f:99:b9:58:7f:3d:4b:e1:10:
                    10:db:af:14:0f:3c:0b:8c:f1:50:19:78:12:88:d0:
                    35:0f:88:e7:ca:8d:80:e0:49:cb:67:ff:ad:f6:8d:
                    35:ba:b3:17:07:9f:da:c9:e5:99:51:9b:a5:33:45:
                    48:ce:29:58:21:33:28:cb:25:cc:14:ea:6a:55:00:
                    d4:a6:51:cf:fd:75:51:86:01:2c:0f:05:d9:6a:98:
                    1c:b4:76:92:7e:5a:90:e1:28:e7:9f:d7:c2:5d:b4:
                    59:bc:c4:81:db:63:81:6c:cb:38:8d:57:54:be:9b:
                    7d:97:db:6f:ed:18:d3:66:8e:07:12:bd:1d:ca:38:
                    7c:d0:85:0b:9d:77:f2:a8:19:b5:3a:cf:f0:5e:f9:
                    01:bb:c0:8c:92:ef:d0:78:bc:ea:5e:ba:ec:28:65:
                    cc:05:76:66:06:8f:a8:b7:d2:57:8e:6d:aa:c0:e1:
                    e7:4d:34:a7:e0:c9:f8:1e:fd:4a:1e:9d:bb:94:05:
                    c9:b7:c2:fe:3d:97:47:91:d9:c3:92:01:f9:d1:ee:
                    5d:cd:13:89:0b:30:44:90:6e:3c:de:7a:49:48:66:
                    93:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:56:2D:5A:9B:31:08:7E:0B:14:D1:EC:06:BB:CC:8F:1E:39:3E
            X509v3 Authority Key Identifier:
                keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:d8:ff:e6:59:11:24:d2:81:7d:d8:b8:f7:22:59:5c:57:
         37:11:88:e4:c3:ed:f3:5f:bb:0a:0d:9e:eb:8d:39:3f:4a:00:
         a7:38:2c:48:aa:ea:17:2a:5c:5d:a1:e2:63:01:c5:30:4d:f4:
         bf:1a:84:c1:71:59:c7:d2:0e:d2:53:8c:2a:b9:c2:0e:11:9c:
         d5:40:28:ad:15:64:aa:4a:19:e2:75:f9:fc:e9:45:ad:ba:df:
         c5:0d:68:60:eb:44:e1:11:24:51:d8:4b:58:e9:e2:ea:24:5b:
         8f:cb:92:0a:35:9d:b4:e6:3e:41:5a:3c:2b:2d:51:9f:6d:70:
         87:6b:cf:61:9e:7b:7f:11:05:91:3d:e8:e9:35:31:b2:c6:8e:
         ab:b0:91:76:6e:60:b8:71:a5:64:51:86:eb:1a:83:9e:21:5a:
         be:67:34:1c:a5:13:cc:ac:bb:bf:76:9c:13:15:88:44:35:c5:
         86:0f:76:76:cd:70:41:c9:d5:45:88:61:8f:c8:34:4b:49:a1:
         ac:96:85:7d:3b:0b:f8:3d:0c:39:0c:ed:a9:3b:16:5b:3f:39:
         f7:5d:2c:5c:91:e5:a7:41:f2:17:8e:9e:d1:01:e0:e4:c5:a6:
         1a:6e:76:b8:50:7b:32:c5:e1:a3:4a:83:ac:7c:dd:53:7b:cd:
         a0:95:d7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIpmwRqH8MqKEAWgqsaQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjBmOTEwMmRiMmViZTFhZjFkMDc1MTY4NDQzODZhNzk2
M2VmNWMwHhcNMjQxMTI3MDEwMDQ5WhcNMjQxMTI4MDEwMDQ5WjAzMTEwLwYDVQQD
EygyYTgyNTYyZDVhOWIzMTA4N2UwYjE0ZDFlYzA2YmJjYzhmMWUzOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp5/jpTlywG5XGQfUnFEmpaGmfg1
C71a4n6Rj8qLbZ52e2l/mblYfz1L4RAQ268UDzwLjPFQGXgSiNA1D4jnyo2A4EnL
Z/+t9o01urMXB5/ayeWZUZulM0VIzilYITMoyyXMFOpqVQDUplHP/XVRhgEsDwXZ
apgctHaSflqQ4Sjnn9fCXbRZvMSB22OBbMs4jVdUvpt9l9tv7RjTZo4HEr0dyjh8
0IULnXfyqBm1Os/wXvkBu8CMku/QeLzqXrrsKGXMBXZmBo+ot9JXjm2qwOHnTTSn
4Mn4Hv1KHp27lAXJt8L+PZdHkdnDkgH50e5dzROJCzBEkG483npJSGaT5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqCVi1amzEIfgsU0ewGu8yPHjk+MB8GA1UdIwQY
MBaAFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMt
MDcyNzM5NjgzMzQ2LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMtMDcyNzM5NjgzMzQ2
LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvnY/+ZZ
ESTSgX3YuPciWVxXNxGI5MPt81+7Cg2e6405P0oApzgsSKrqFypcXaHiYwHFME30
vxqEwXFZx9IO0lOMKrnCDhGc1UAorRVkqkoZ4nX5/OlFrbrfxQ1oYOtE4REkUdhL
WOni6iRbj8uSCjWdtOY+QVo8Ky1Rn21wh2vPYZ57fxEFkT3o6TUxssaOq7CRdm5g
uHGlZFGG6xqDniFavmc0HKUTzKy7v3acExWIRDXFhg92ds1wQcnVRYhhj8g0S0mh
rJaFfTsL+D0MOQztqTsWWz85910sXJHlp0HyF46e0QHg5MWmGm52uFB7MsXho0qD
rHzdU3vNoJXX+g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:51:17 2024 by rpki-client on console-fra.rpki-client.org