Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
File:                     3edtMFKVeG1Q5jSpan25PzEWzNc.mft (raw, json)
Hash identifier:          XxwzGBI638zw7TTOgGlDYocloDCnfxkMLmwOaoTlbsA=
Subject key identifier:   87:F4:2C:22:0D:45:81:ED:3B:1C:3A:C0:81:76:06:87:C6:98:34:83
Authority key identifier: DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
Certificate issuer:       /CN=dde76d305295786d50e634a96a7db93f3116ccd7
Certificate serial:       0193568B05DD40921AD5605849BC712ABF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
Manifest number:          0492
Signing time:             Sat 23 Nov 2024 01:02:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:51 +0000
Files and hashes:         1: 3edtMFKVeG1Q5jSpan25PzEWzNc.crl (hash: juSjeKJXlebk77haMX3ZTUzQnU/aJ9xKKrMHrzApvxI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:05:dd:40:92:1a:d5:60:58:49:bc:71:2a:bf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde76d305295786d50e634a96a7db93f3116ccd7
        Validity
            Not Before: Nov 23 01:02:51 2024 GMT
            Not After : Nov 24 01:02:51 2024 GMT
        Subject: CN=87f42c220d4581ed3b1c3ac081760687c6983483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:7d:d8:37:4b:37:8e:de:20:1f:20:5a:51:
                    89:77:f0:1d:4e:db:63:3d:71:d8:91:e4:88:2e:48:
                    62:8c:92:eb:7b:4d:44:ec:7b:df:5f:6c:93:7c:5b:
                    8a:fc:0b:32:a9:6d:6f:46:2c:78:83:8e:ab:58:d2:
                    df:c1:94:00:e5:78:1c:35:f4:07:d7:ea:9d:9e:2e:
                    6f:ff:d4:e9:3e:6e:52:76:e1:84:9c:fb:91:59:bc:
                    f6:64:60:6b:b6:df:0e:8b:0e:83:bf:4c:6f:8b:6a:
                    7f:9b:78:f3:b8:d8:d0:ca:ae:31:b6:6c:08:ea:52:
                    4a:cd:45:b8:3e:11:99:27:2d:a5:8e:51:3b:f0:46:
                    a7:5e:16:0b:c8:74:0c:a1:bd:8f:bc:25:cd:fc:b0:
                    ea:5b:23:d0:9d:89:12:81:ce:d4:8f:d2:18:3f:cb:
                    48:bf:9e:9d:5e:9e:07:28:38:43:99:38:5c:ee:cf:
                    40:bb:6c:c7:f4:48:22:d3:b7:e4:40:b9:f6:47:a3:
                    0e:d0:11:0d:42:2a:78:11:e0:e7:86:9a:cf:8f:d6:
                    4c:fe:16:05:41:b3:d8:99:4d:ca:40:14:da:1e:a8:
                    53:41:4b:e1:16:76:0e:0a:2d:74:8c:b0:05:4c:da:
                    1e:a5:fa:08:12:45:56:fe:a2:88:3b:91:ec:df:a1:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:2C:22:0D:45:81:ED:3B:1C:3A:C0:81:76:06:87:C6:98:34:83
            X509v3 Authority Key Identifier:
                keyid:DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:8b:f6:92:08:8d:ed:1f:74:b4:84:14:53:f2:ae:86:ae:
         06:1e:4c:00:8c:eb:d5:a8:8d:98:42:63:62:57:bc:1d:e1:b3:
         07:b6:df:be:2d:71:b6:67:3f:f3:e2:c9:f3:fa:e0:46:b7:61:
         67:15:5b:1a:db:a1:bc:0b:ee:31:ad:e0:a6:e7:e0:e7:d2:92:
         f8:fe:d2:34:de:08:fe:4b:3b:a7:ed:f6:3a:18:0b:b7:05:ab:
         08:6a:85:56:0d:c7:89:54:53:0a:1e:85:eb:70:1d:3f:34:b2:
         57:02:62:d8:12:0c:60:ea:43:e9:ca:81:cf:cd:62:c7:92:b2:
         0c:38:aa:91:04:d8:37:f5:49:fb:aa:2e:0f:cf:70:f2:62:c8:
         84:ef:c8:f5:10:c9:b2:56:5a:42:17:71:4c:0e:19:4d:f9:73:
         e7:df:b8:06:60:97:3a:b5:53:11:82:2f:05:e7:95:a2:9f:12:
         5e:87:ab:08:58:08:c0:58:1e:d4:cd:15:f3:49:51:a3:23:e5:
         41:a4:d5:d4:62:e8:5b:e8:cb:7b:af:d9:90:1f:f2:06:dc:b2:
         be:8f:c7:e7:c6:2b:61:77:1a:2f:72:e1:72:0b:55:3d:b8:9d:
         e1:b2:ce:fa:83:19:7d:e3:5a:b8:50:32:c5:4b:a3:f7:e5:d6:
         c2:5d:7b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiwXdQJIa1WBYSbxxKr+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZTc2ZDMwNTI5NTc4NmQ1MGU2MzRhOTZhN2RiOTNmMzEx
NmNjZDcwHhcNMjQxMTIzMDEwMjUxWhcNMjQxMTI0MDEwMjUxWjAzMTEwLwYDVQQD
Eyg4N2Y0MmMyMjBkNDU4MWVkM2IxYzNhYzA4MTc2MDY4N2M2OTgzNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM592DdLN47eIB8gWlGJd/AdTttj
PXHYkeSILkhijJLre01E7HvfX2yTfFuK/AsyqW1vRix4g46rWNLfwZQA5XgcNfQH
1+qdni5v/9TpPm5SduGEnPuRWbz2ZGBrtt8Oiw6Dv0xvi2p/m3jzuNjQyq4xtmwI
6lJKzUW4PhGZJy2ljlE78EanXhYLyHQMob2PvCXN/LDqWyPQnYkSgc7Uj9IYP8tI
v56dXp4HKDhDmThc7s9Au2zH9Egi07fkQLn2R6MO0BENQip4EeDnhprPj9ZM/hYF
QbPYmU3KQBTaHqhTQUvhFnYOCi10jLAFTNoepfoIEkVW/qKIO5Hs36H32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf0LCINRYHtOxw6wIF2BofGmDSDMB8GA1UdIwQY
MBaAFN3nbTBSlXhtUOY0qWp9uT8xFszXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VkdE1GS1ZlRzFRNWpTcGFuMjVQekVXek5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81YmUwYWUtODFhZC00OWVhLTgxOGQt
MTM2YTc1OWUwNjFkLzEvM2VkdE1GS1ZlRzFRNWpTcGFuMjVQekVXek5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81YmUwYWUtODFhZC00OWVhLTgxOGQtMTM2YTc1OWUwNjFk
LzEvM2VkdE1GS1ZlRzFRNWpTcGFuMjVQekVXek5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMGL9pII
je0fdLSEFFPyroauBh5MAIzr1aiNmEJjYle8HeGzB7bfvi1xtmc/8+LJ8/rgRrdh
ZxVbGtuhvAvuMa3gpufg59KS+P7SNN4I/ks7p+32OhgLtwWrCGqFVg3HiVRTCh6F
63AdPzSyVwJi2BIMYOpD6cqBz81ix5KyDDiqkQTYN/VJ+6ouD89w8mLIhO/I9RDJ
slZaQhdxTA4ZTflz59+4BmCXOrVTEYIvBeeVop8SXoerCFgIwFge1M0V80lRoyPl
QaTV1GLoW+jLe6/ZkB/yBtyyvo/H58YrYXcaL3LhcgtVPbid4bLO+oMZfeNauFAy
xUuj9+XWwl17Xw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:44 2024 by rpki-client on console-ams.rpki-client.org