Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
File:                     j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft (raw, json)
Hash identifier:          E5lHsYnhRdQbmMWXgu0m5rLvrmVskD4jJjSyelKCp7g=
Subject key identifier:   E8:FC:37:87:C4:63:36:44:8E:C4:3C:97:3E:36:AE:3D:04:3C:C1:3E
Authority key identifier: 8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
Certificate issuer:       /CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Certificate serial:       0193568A1F8D4ED5CE3FEBEA18FD7D9E931C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl (hash: zAtcxlE3qFLqsqXbKPP4BirvXE3RKKSLiKVYXqal2iI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1f:8d:4e:d5:ce:3f:eb:ea:18:fd:7d:9e:93:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=e8fc3787c46336448ec43c973e36ae3d043cc13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:b7:a6:78:c7:35:3c:08:75:25:cc:3c:58:
                    b3:a9:d4:42:58:72:30:49:fc:e4:90:e5:0f:df:55:
                    68:39:d2:22:4e:ae:8b:d0:f2:e0:cb:f7:b1:0f:a9:
                    8b:65:9c:1f:d6:c0:9f:25:ee:da:33:76:3b:0f:a4:
                    62:a4:72:2e:2d:b2:5f:a4:98:dd:55:51:f2:39:a1:
                    e1:e0:8f:a8:82:ec:10:0b:7b:35:b2:22:18:b9:d4:
                    48:7a:09:47:5f:0f:f0:6a:d3:e5:cd:80:fe:f9:ab:
                    36:2a:fe:e0:e7:6d:53:04:bc:16:76:4c:78:ba:f7:
                    17:a7:c3:a6:fb:dd:b4:6b:38:23:1a:07:5a:6e:3a:
                    3e:65:a9:fa:7b:2e:5a:f6:71:8b:28:ca:fd:3a:ed:
                    f7:51:4e:71:05:5e:ac:17:50:44:62:14:20:42:f1:
                    ed:0c:f7:d4:4e:1f:78:01:60:25:f7:d0:18:8f:a8:
                    b8:09:0b:86:b3:ab:24:64:9a:c7:62:cb:db:2f:32:
                    02:24:a8:50:0b:25:df:94:d5:72:cb:e0:81:a2:d6:
                    da:e8:28:9a:49:aa:25:5d:b6:34:2e:bf:3a:fa:8e:
                    e4:4a:30:fe:6a:ed:ea:26:a1:26:98:f4:ea:09:55:
                    2d:f1:08:20:98:36:9f:a5:1c:a9:8b:89:26:b9:27:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:37:87:C4:63:36:44:8E:C4:3C:97:3E:36:AE:3D:04:3C:C1:3E
            X509v3 Authority Key Identifier:
                keyid:8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ed:90:1e:0d:36:ce:66:9f:ac:94:1f:31:23:39:b2:d4:66:
         41:f7:ea:b3:e8:ef:6d:48:3d:fa:1e:22:c5:6e:fc:51:da:a9:
         54:97:e4:c7:7a:0e:4d:cf:e0:a6:ad:b5:ac:7a:b8:f3:ae:18:
         a0:a4:1e:c1:29:c6:44:65:ef:1d:0a:ff:0d:8b:bd:07:ba:76:
         aa:d0:4c:87:da:c7:50:e1:9d:f3:87:3d:f6:42:1f:f4:2b:96:
         d7:83:cd:ae:0d:8a:80:ca:36:70:b6:6a:77:4b:93:68:46:97:
         1a:4c:12:7c:ec:50:de:2e:09:65:72:24:5c:cc:f3:0c:b3:88:
         d7:75:54:5c:5d:48:78:54:6c:45:02:96:15:9e:61:c8:7b:72:
         83:9e:6b:2c:10:8b:12:99:65:83:d1:3c:ac:04:f5:b4:9c:b9:
         3b:e7:88:06:32:fa:ae:3b:a7:5d:d7:0b:10:74:26:ea:3c:1a:
         48:68:27:5f:fc:3d:b7:af:fc:42:92:98:b5:8c:f6:f7:d3:ba:
         4f:2a:04:de:94:1b:c0:59:94:0e:d7:ad:21:88:7e:4f:f9:b1:
         66:98:f9:8b:8b:f8:84:e9:37:41:a7:39:3b:5d:31:6e:ce:02:
         52:a6:c7:e0:a7:d8:53:4c:5b:36:12:ec:10:9e:e0:38:34:e2:
         4c:fa:f8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWih+NTtXOP+vqGP19npMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWVjZDdkNGVkNTlmNGNlNmUzNDQ2MThjYWVkYjI3ZDJh
MzU4ZGEwHhcNMjQxMTIzMDEwMTUyWhcNMjQxMTI0MDEwMTUyWjAzMTEwLwYDVQQD
EyhlOGZjMzc4N2M0NjMzNjQ0OGVjNDNjOTczZTM2YWUzZDA0M2NjMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAi3pnjHNTwIdSXMPFizqdRCWHIw
SfzkkOUP31VoOdIiTq6L0PLgy/exD6mLZZwf1sCfJe7aM3Y7D6RipHIuLbJfpJjd
VVHyOaHh4I+oguwQC3s1siIYudRIeglHXw/watPlzYD++as2Kv7g521TBLwWdkx4
uvcXp8Om+920azgjGgdabjo+Zan6ey5a9nGLKMr9Ou33UU5xBV6sF1BEYhQgQvHt
DPfUTh94AWAl99AYj6i4CQuGs6skZJrHYsvbLzICJKhQCyXflNVyy+CBotba6Cia
SaolXbY0Lr86+o7kSjD+au3qJqEmmPTqCVUt8QggmDafpRypi4kmuSdbmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj8N4fEYzZEjsQ8lz42rj0EPME+MB8GA1UdIwQY
MBaAFI+ezX1O1Z9M5uNEYYyu2yfSo1jaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajU3TmZVN1ZuMHptNDBSaGpLN2JKOUtqV05vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81YzI1ODQtNWJlNi00ZTU4LWI0ZjEt
MjllNDQ5MzE4YzU2LzEvajU3TmZVN1ZuMHptNDBSaGpLN2JKOUtqV05vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81YzI1ODQtNWJlNi00ZTU4LWI0ZjEtMjllNDQ5MzE4YzU2
LzEvajU3TmZVN1ZuMHptNDBSaGpLN2JKOUtqV05vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAue2QHg02
zmafrJQfMSM5stRmQffqs+jvbUg9+h4ixW78UdqpVJfkx3oOTc/gpq21rHq4864Y
oKQewSnGRGXvHQr/DYu9B7p2qtBMh9rHUOGd84c99kIf9CuW14PNrg2KgMo2cLZq
d0uTaEaXGkwSfOxQ3i4JZXIkXMzzDLOI13VUXF1IeFRsRQKWFZ5hyHtyg55rLBCL
Epllg9E8rAT1tJy5O+eIBjL6rjunXdcLEHQm6jwaSGgnX/w9t6/8QpKYtYz299O6
TyoE3pQbwFmUDtetIYh+T/mxZpj5i4v4hOk3Qac5O10xbs4CUqbH4KfYU0xbNhLs
EJ7gODTiTPr4jg==
-----END CERTIFICATE-----