Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File:                     wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier:          IkU9txQXzDaBkvZuLPZx2cMgJzLpr/OYWm3mNe7UFes=
Subject key identifier:   1C:B7:52:A0:00:AB:1E:2F:C5:22:98:3C:82:FF:96:3F:D3:9C:06:17
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer:       /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial:       019234DD4D6D02B8045CB27DEEEDAEEDB695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number:          0D84
Signing time:             Fri 27 Sep 2024 19:02:51 +0000
Manifest this update:     Fri 27 Sep 2024 19:02:51 +0000
Manifest next update:     Sat 28 Sep 2024 19:02:51 +0000
Files and hashes:         1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: Q6XWKKf89Py8Bf6W7m8M+/7ehKWVGbfRUzp644YEMCs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dd:4d:6d:02:b8:04:5c:b2:7d:ee:ed:ae:ed:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
        Validity
            Not Before: Sep 27 19:02:51 2024 GMT
            Not After : Sep 28 19:02:51 2024 GMT
        Subject: CN=1cb752a000ab1e2fc522983c82ff963fd39c0617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:fb:7f:55:52:ee:51:0c:b2:3b:e0:da:19:
                    71:65:59:e2:4a:13:a0:f2:4f:f7:9e:90:b4:28:09:
                    3d:9f:fe:64:eb:b2:55:02:20:68:c9:98:d4:86:67:
                    a2:67:9f:3d:33:8d:2e:77:a4:74:1c:e2:9a:5e:2e:
                    f8:b0:47:1b:e4:5f:e2:2d:5a:88:e8:78:1d:da:b6:
                    1e:93:90:15:0b:75:10:d8:e8:d0:ac:c6:12:ad:85:
                    31:1c:14:94:85:4d:46:ab:44:e7:37:b5:a6:12:16:
                    9c:d2:08:8e:bb:8d:66:e6:60:3a:14:f9:5a:48:80:
                    89:13:b8:6c:9d:3c:c5:a3:14:f8:0f:6a:51:df:df:
                    73:8d:95:9e:d4:f5:27:27:17:79:41:89:a2:b6:e4:
                    02:5d:c6:60:48:96:d7:79:f2:56:ec:f4:8a:34:47:
                    c5:e9:5d:77:02:86:3d:4f:2c:75:73:7b:5f:cb:10:
                    c6:70:02:97:2a:90:0f:e7:b1:ea:26:d3:41:f2:37:
                    55:7e:40:c6:54:f3:60:6a:49:73:06:03:e2:85:27:
                    9b:07:15:4a:9a:a9:5c:0c:a5:d2:8c:56:32:13:1e:
                    b5:6f:11:d5:0e:a4:a6:1d:51:8c:04:11:0d:9e:0a:
                    d3:cd:54:43:3d:df:d9:64:5d:3b:bd:6e:bd:87:31:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B7:52:A0:00:AB:1E:2F:C5:22:98:3C:82:FF:96:3F:D3:9C:06:17
            X509v3 Authority Key Identifier:
                keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2f:94:1d:a3:8c:e5:0b:5c:09:8f:81:ac:61:58:a7:d2:1b:
         7b:37:e6:7d:68:61:2e:51:b2:6c:e3:9b:30:2e:a7:5b:e1:35:
         ff:76:2c:1b:d8:88:2e:eb:0d:59:37:1f:c5:47:fa:83:7e:d5:
         34:ed:d8:f4:9c:47:10:d8:57:18:49:83:9a:0f:80:19:4c:81:
         fe:98:46:38:f0:b3:99:d1:28:49:d9:57:41:44:9d:15:80:ac:
         c0:ea:fa:d3:23:77:5c:47:15:92:c5:49:27:b1:ad:cd:eb:f5:
         e4:3e:95:6d:96:d4:cc:b2:17:2b:11:34:7d:cc:ad:5c:97:28:
         52:90:09:a7:fa:ec:0e:83:e9:61:56:64:b5:2d:83:65:ac:8d:
         59:7f:31:e9:be:22:4c:28:66:69:f3:cc:6a:a7:2d:e8:a1:dc:
         8d:46:0e:ac:93:48:cc:de:0f:43:04:61:65:1c:e4:65:ae:ae:
         d4:a0:f3:a9:d1:5f:64:1a:46:c1:9c:a1:97:a8:3b:a3:5e:ae:
         ed:9d:0c:26:0d:d9:0c:99:13:2b:11:d1:b6:81:5a:55:04:47:
         d3:cf:00:e4:73:25:04:c5:0d:0b:36:8b:4b:4c:8e:25:9f:c8:
         af:3f:00:d2:0f:20:04:45:bd:9b:f2:29:f6:ae:e9:7d:d1:99:
         c4:23:53:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI03U1tArgEXLJ97u2u7baVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMDU1ZTMyZWNkNzcyYWUyODAzYTRjMzU2ZDc3Njg3ODdl
NzJlMjAwHhcNMjQwOTI3MTkwMjUxWhcNMjQwOTI4MTkwMjUxWjAzMTEwLwYDVQQD
EygxY2I3NTJhMDAwYWIxZTJmYzUyMjk4M2M4MmZmOTYzZmQzOWMwNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cH7f1VS7lEMsjvg2hlxZVniShOg
8k/3npC0KAk9n/5k67JVAiBoyZjUhmeiZ589M40ud6R0HOKaXi74sEcb5F/iLVqI
6Hgd2rYek5AVC3UQ2OjQrMYSrYUxHBSUhU1Gq0TnN7WmEhac0giOu41m5mA6FPla
SICJE7hsnTzFoxT4D2pR399zjZWe1PUnJxd5QYmituQCXcZgSJbXefJW7PSKNEfF
6V13AoY9Tyx1c3tfyxDGcAKXKpAP57HqJtNB8jdVfkDGVPNgaklzBgPihSebBxVK
mqlcDKXSjFYyEx61bxHVDqSmHVGMBBENngrTzVRDPd/ZZF07vW69hzHluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy3UqAAqx4vxSKYPIL/lj/TnAYXMB8GA1UdIwQY
MBaAFMAFXjLs13KuKAOkw1bXdoeH5y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMt
N2MyZDQwOWFjODlhLzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMtN2MyZDQwOWFjODlh
LzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi+UHaOM
5QtcCY+BrGFYp9IbezfmfWhhLlGybOObMC6nW+E1/3YsG9iILusNWTcfxUf6g37V
NO3Y9JxHENhXGEmDmg+AGUyB/phGOPCzmdEoSdlXQUSdFYCswOr60yN3XEcVksVJ
J7Gtzev15D6VbZbUzLIXKxE0fcytXJcoUpAJp/rsDoPpYVZktS2DZayNWX8x6b4i
TChmafPMaqct6KHcjUYOrJNIzN4PQwRhZRzkZa6u1KDzqdFfZBpGwZyhl6g7o16u
7Z0MJg3ZDJkTKxHRtoFaVQRH088A5HMlBMUNCzaLS0yOJZ/Irz8A0g8gBEW9m/Ip
9q7pfdGZxCNTfw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:14:51 2024 by rpki-client on console-fra.rpki-client.org