Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File:                     sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier:          4WdWVv5GFcgGX33LqPcPdwMeV9F013yNky/c/6jqAIE=
Subject key identifier:   B9:DD:FA:91:F1:81:BE:E0:FF:C0:A9:40:80:50:66:C6:CE:FD:7F:72
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer:       /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial:       0193568A4FDE6D045E2EF48B9D8762648DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:02:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:05 +0000
Files and hashes:         1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: cUB2OhkPUF+3DEOQh4Qczd5AivOB/3zsn6YzmUx4T4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:4f:de:6d:04:5e:2e:f4:8b:9d:87:62:64:8d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
        Validity
            Not Before: Nov 23 01:02:05 2024 GMT
            Not After : Nov 24 01:02:05 2024 GMT
        Subject: CN=b9ddfa91f181bee0ffc0a940805066c6cefd7f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:d3:6a:8e:8e:10:d2:cf:cb:06:c5:65:52:
                    8f:0c:f9:1b:14:e9:18:75:b0:44:78:31:d2:08:59:
                    be:b9:09:ea:51:cb:8f:47:3a:a2:41:c8:f6:5b:c0:
                    e3:bc:75:ea:55:9c:bb:7c:4e:11:6a:07:ec:98:da:
                    dd:28:b9:b5:7a:c2:1a:89:95:1e:1b:2d:69:fd:b0:
                    df:f7:e4:04:15:ec:c9:9b:f7:c5:2a:16:e1:fe:27:
                    32:35:80:ee:ea:47:b1:9c:aa:fa:b9:59:45:46:6b:
                    46:dc:69:e3:a2:45:eb:98:15:a4:e6:64:43:a9:b3:
                    fa:7f:e8:58:b3:9a:ad:a5:a3:fe:04:4e:77:35:73:
                    6e:48:31:b5:19:e5:3b:43:2c:79:7a:3c:7c:37:5c:
                    15:4c:9a:28:c9:cf:ce:5a:5f:58:74:6e:ea:1d:c8:
                    31:56:b6:b2:5c:0f:18:d2:40:22:e4:68:4a:6b:45:
                    b4:9c:f3:2d:94:06:8f:7a:c4:6b:ca:4e:b0:e9:fb:
                    81:7c:a5:bd:68:b9:83:f3:ea:2f:98:80:3f:8f:c8:
                    d3:53:4c:7a:01:81:cd:83:2e:6f:e4:95:91:d9:57:
                    c7:76:d9:22:04:1e:ba:2b:5a:c9:c6:dc:ce:9d:d8:
                    92:cc:53:67:27:84:81:87:a2:36:a6:e9:a9:ce:e6:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DD:FA:91:F1:81:BE:E0:FF:C0:A9:40:80:50:66:C6:CE:FD:7F:72
            X509v3 Authority Key Identifier:
                keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:58:81:04:54:3a:a4:99:f4:ca:05:80:d0:b1:b3:c7:f2:
         6f:36:25:78:8d:13:e2:aa:8f:20:d1:ab:75:08:00:fb:41:e2:
         a3:b1:70:04:3e:59:d9:d3:68:10:c3:a2:b6:03:12:c9:88:fb:
         40:af:d9:cb:71:1e:45:fa:41:96:52:a4:c5:f0:d6:6d:93:a7:
         a3:ae:f8:ff:ed:3f:15:e8:96:18:c2:0e:e1:64:7a:a7:7b:d4:
         0e:63:9e:90:9b:52:4c:fa:52:35:78:c3:7c:67:d9:6f:93:22:
         2e:9c:25:5d:44:f6:02:e2:6c:17:7e:f2:da:95:49:98:57:8c:
         42:18:06:8c:0b:72:ec:44:3f:c5:6b:da:1a:3b:0b:03:1c:81:
         91:13:5e:30:28:56:79:10:61:96:df:16:27:d5:bb:e6:c3:58:
         0f:b5:72:12:12:67:74:6c:ec:41:09:69:42:d8:ac:f3:e5:b6:
         54:48:0e:17:50:8b:cd:27:b8:9e:d1:31:f4:48:57:93:e2:8a:
         d6:c3:9f:eb:fe:4d:50:dc:eb:fc:b6:b7:71:7d:c4:73:1c:96:
         07:27:b7:79:69:4c:50:1e:15:ad:75:fb:08:7b:a1:6c:4f:22:
         25:ba:a0:34:0f:26:38:88:7f:01:66:a7:e5:8d:ef:0d:47:b5:
         20:1e:00:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWik/ebQReLvSLnYdiZI30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmI4N2QyMGNjNDIwZGY0MWUwOTBjMzNiNGM0MGVmY2Iw
ZGQ4NzgwHhcNMjQxMTIzMDEwMjA1WhcNMjQxMTI0MDEwMjA1WjAzMTEwLwYDVQQD
EyhiOWRkZmE5MWYxODFiZWUwZmZjMGE5NDA4MDUwNjZjNmNlZmQ3ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PrTao6OENLPywbFZVKPDPkbFOkY
dbBEeDHSCFm+uQnqUcuPRzqiQcj2W8DjvHXqVZy7fE4RagfsmNrdKLm1esIaiZUe
Gy1p/bDf9+QEFezJm/fFKhbh/icyNYDu6kexnKr6uVlFRmtG3GnjokXrmBWk5mRD
qbP6f+hYs5qtpaP+BE53NXNuSDG1GeU7Qyx5ejx8N1wVTJooyc/OWl9YdG7qHcgx
VrayXA8Y0kAi5GhKa0W0nPMtlAaPesRryk6w6fuBfKW9aLmD8+ovmIA/j8jTU0x6
AYHNgy5v5JWR2VfHdtkiBB66K1rJxtzOndiSzFNnJ4SBh6I2pumpzuZuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnd+pHxgb7g/8CpQIBQZsbO/X9yMB8GA1UdIwQY
MBaAFLC7h9IMxCDfQeCQwztMQO/LDdh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjIt
MzdiYzhlNjU2ZWIxLzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80ODEzZjItNGM2My00YWEwLTliMjItMzdiYzhlNjU2ZWIx
LzEvc0x1SDBnekVJTjlCNEpERE8weEE3OHNOMkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFxYgQRU
OqSZ9MoFgNCxs8fybzYleI0T4qqPINGrdQgA+0Hio7FwBD5Z2dNoEMOitgMSyYj7
QK/Zy3EeRfpBllKkxfDWbZOno674/+0/FeiWGMIO4WR6p3vUDmOekJtSTPpSNXjD
fGfZb5MiLpwlXUT2AuJsF37y2pVJmFeMQhgGjAty7EQ/xWvaGjsLAxyBkRNeMChW
eRBhlt8WJ9W75sNYD7VyEhJndGzsQQlpQtis8+W2VEgOF1CLzSe4ntEx9EhXk+KK
1sOf6/5NUNzr/La3cX3EcxyWBye3eWlMUB4VrXX7CHuhbE8iJbqgNA8mOIh/AWan
5Y3vDUe1IB4A9A==
-----END CERTIFICATE-----