Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File:                     kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier:          ciX/OaHvqlsC5b2fx5AOHGLp/8jP2EU4Eu5kl7giHZ4=
Subject key identifier:   3D:BD:D1:20:14:7E:EA:C1:AE:54:20:4B:31:59:18:E9:27:17:0E:8B
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer:       /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial:       019356F6B0774FBC8EF7F73789022F1A7C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 03:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:27 +0000
Files and hashes:         1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: k5eCxn9f2veRjH7ALMLI5pXWxcp1VNAOawAoKjYv3h8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b0:77:4f:bc:8e:f7:f7:37:89:02:2f:1a:7c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
        Validity
            Not Before: Nov 23 03:00:27 2024 GMT
            Not After : Nov 24 03:00:27 2024 GMT
        Subject: CN=3dbdd120147eeac1ae54204b315918e927170e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:32:5d:a9:12:75:5e:6d:19:a9:35:e0:17:
                    81:46:93:2e:d3:54:5f:e5:a0:28:ac:99:ba:8a:3d:
                    c7:3c:c8:79:c9:c8:a6:47:44:ae:b3:03:1a:b9:4f:
                    bc:d8:e7:45:1e:68:b6:70:26:a9:cb:25:7f:4e:11:
                    e7:e0:04:3a:05:17:29:db:a7:ff:3d:08:6f:60:fb:
                    af:97:e3:2c:00:a6:d8:e0:58:21:b2:7d:f3:28:33:
                    90:57:c3:6b:a4:9e:a5:3a:d9:f6:f2:6f:8a:32:0c:
                    e0:88:06:1e:b2:d1:62:ba:8f:1c:3c:2e:0d:68:63:
                    19:14:bc:77:c0:fe:f7:62:96:65:01:b7:c9:60:bc:
                    aa:1b:b3:e2:e5:d4:7a:9b:23:2b:25:1e:51:1e:e7:
                    3a:e8:33:0a:48:c2:f2:77:b5:b6:35:01:8b:5a:ef:
                    49:d7:66:67:bf:52:f0:3f:94:9e:d0:95:3f:ba:e6:
                    3a:31:a7:74:4d:be:f2:84:fc:4b:6e:74:cf:07:e8:
                    dd:1d:a9:12:8f:22:f4:8e:42:14:e7:4a:6b:1f:d3:
                    80:60:3d:26:5d:c1:30:df:53:82:ab:53:3a:3b:0f:
                    45:0e:cd:3d:1e:2e:00:cd:44:40:c9:71:ad:81:a1:
                    d4:bd:0e:da:3d:b6:16:d5:6e:17:67:d2:b9:0b:9c:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BD:D1:20:14:7E:EA:C1:AE:54:20:4B:31:59:18:E9:27:17:0E:8B
            X509v3 Authority Key Identifier:
                keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:1f:c0:c6:fc:08:09:a1:c5:c5:cb:7d:48:36:fe:c5:ee:
         16:10:94:10:09:9c:01:61:0a:3d:9f:ff:4b:db:c9:90:b3:a4:
         c7:45:61:05:bc:d2:c0:1f:a4:b6:74:b9:0d:b7:f3:a0:b1:20:
         46:da:b2:63:b8:d5:54:78:72:f2:80:ec:aa:ba:a9:d8:21:58:
         fe:97:36:66:76:e5:66:fa:40:1f:e4:8d:b4:b1:a3:4c:5b:ba:
         59:14:97:73:c9:51:45:fe:80:a5:2c:de:a8:62:58:49:92:bd:
         9e:5a:11:33:2c:fe:a1:5b:18:10:a1:48:28:3e:84:ee:6f:d4:
         c8:19:ae:02:2c:b2:4c:42:0c:25:82:9e:38:21:5d:4e:95:84:
         4f:af:68:e3:1c:60:1b:21:02:0e:b8:f1:64:9a:88:fc:4d:8c:
         1c:2c:15:31:79:db:10:00:59:cd:a9:d7:9b:9c:54:d9:6b:5a:
         11:cc:2e:cb:5e:87:89:a6:15:56:ad:13:9c:6b:dd:23:f4:ff:
         11:26:b9:a7:21:65:66:db:61:17:06:51:54:46:67:d6:9f:fb:
         40:63:07:ed:01:30:d4:6d:f5:fb:35:1b:3a:1c:2e:33:5e:d8:
         c5:fd:1f:01:aa:e7:c6:6c:2a:de:ff:5b:43:d5:ac:2f:91:f2:
         cb:3c:9c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9rB3T7yO9/c3iQIvGnyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzIwZThiZTdjNzRjYTY1NWM3YzNlOTc4YmMxYWE2MGZk
OGRiNDQwHhcNMjQxMTIzMDMwMDI3WhcNMjQxMTI0MDMwMDI3WjAzMTEwLwYDVQQD
EygzZGJkZDEyMDE0N2VlYWMxYWU1NDIwNGIzMTU5MThlOTI3MTcwZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW8yXakSdV5tGak14BeBRpMu01Rf
5aAorJm6ij3HPMh5ycimR0SuswMauU+82OdFHmi2cCapyyV/ThHn4AQ6BRcp26f/
PQhvYPuvl+MsAKbY4Fghsn3zKDOQV8NrpJ6lOtn28m+KMgzgiAYestFiuo8cPC4N
aGMZFLx3wP73YpZlAbfJYLyqG7Pi5dR6myMrJR5RHuc66DMKSMLyd7W2NQGLWu9J
12Znv1LwP5Se0JU/uuY6Mad0Tb7yhPxLbnTPB+jdHakSjyL0jkIU50prH9OAYD0m
XcEw31OCq1M6Ow9FDs09Hi4AzURAyXGtgaHUvQ7aPbYW1W4XZ9K5C5yXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD290SAUfurBrlQgSzFZGOknFw6LMB8GA1UdIwQY
MBaAFJMyDovnx0ymVcfD6Xi8GqYP2NtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNmQzNzMtNDRjNi00OGY3LThiNzYt
ZmE5MWM3NWZiOWRjLzEva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lNmQzNzMtNDRjNi00OGY3LThiNzYtZmE5MWM3NWZiOWRj
LzEva3pJT2ktZkhUS1pWeDhQcGVMd2FwZ19ZMjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBwfwMb8
CAmhxcXLfUg2/sXuFhCUEAmcAWEKPZ//S9vJkLOkx0VhBbzSwB+ktnS5DbfzoLEg
RtqyY7jVVHhy8oDsqrqp2CFY/pc2ZnblZvpAH+SNtLGjTFu6WRSXc8lRRf6ApSze
qGJYSZK9nloRMyz+oVsYEKFIKD6E7m/UyBmuAiyyTEIMJYKeOCFdTpWET69o4xxg
GyECDrjxZJqI/E2MHCwVMXnbEABZzanXm5xU2WtaEcwuy16HiaYVVq0TnGvdI/T/
ESa5pyFlZtthFwZRVEZn1p/7QGMH7QEw1G31+zUbOhwuM17Yxf0fAarnxmwq3v9b
Q9WsL5HyyzycmA==
-----END CERTIFICATE-----