Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
File:                     xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft (raw, json)
Hash identifier:          CxJcgPGjEVo75PU0Mo7nU6hLSjFcB2Y5QCn3JU0yBhk=
Subject key identifier:   45:49:7C:94:21:C6:BB:BD:77:19:17:1B:58:20:B4:17:62:CB:6C:29
Authority key identifier: C4:58:B9:51:38:E9:01:C8:24:D2:FF:6F:DA:B5:A5:C2:F8:31:60:C3
Certificate issuer:       /CN=c458b95138e901c824d2ff6fdab5a5c2f83160c3
Certificate serial:       019356F6B865B54E68E016834ACDC7C91991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
Manifest number:          0296
Signing time:             Sat 23 Nov 2024 03:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:29 +0000
Files and hashes:         1: xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl (hash: FPfwY5wRREqwwxZ7wY2rNXiOn4CfGS8UZbq9RAsIy7U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b8:65:b5:4e:68:e0:16:83:4a:cd:c7:c9:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c458b95138e901c824d2ff6fdab5a5c2f83160c3
        Validity
            Not Before: Nov 23 03:00:29 2024 GMT
            Not After : Nov 24 03:00:29 2024 GMT
        Subject: CN=45497c9421c6bbbd7719171b5820b41762cb6c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:61:74:05:f5:50:5b:ee:dc:73:11:e1:36:
                    e2:64:14:ac:98:6e:52:9f:9d:70:bf:0b:b1:41:c7:
                    b4:70:22:4e:52:e7:26:ba:09:94:a8:8e:76:a3:4c:
                    a8:01:13:36:32:20:6d:28:e0:33:03:f8:b6:70:61:
                    08:5b:92:99:c5:96:7b:f9:a5:7f:9f:a0:df:5a:51:
                    db:ec:81:73:63:7c:91:86:9e:dc:36:40:72:27:f8:
                    49:17:90:d2:ff:6c:48:8a:db:ae:39:f8:7f:a1:e9:
                    4c:b9:57:4f:93:91:89:ea:ab:df:e0:ab:cd:20:f9:
                    1e:8e:8e:d7:05:35:4f:4c:24:fb:38:f2:54:da:83:
                    b3:81:ca:54:b2:19:93:e2:2f:75:97:a2:16:52:52:
                    e8:68:45:4a:af:be:ca:9d:13:ce:af:e8:74:05:8e:
                    44:91:ee:5b:3e:5f:5a:9b:20:33:e9:74:a9:e4:0e:
                    84:fe:ad:f7:5e:9e:5e:be:96:30:a5:30:28:b9:37:
                    e2:98:89:b6:1b:23:d3:70:4d:53:29:27:bd:6b:37:
                    49:15:1d:d0:22:22:c5:e2:44:14:28:12:c4:7f:db:
                    d3:9f:26:af:1f:09:dc:63:f8:f1:0f:cd:df:ed:39:
                    04:70:88:b9:eb:38:a4:30:96:f7:87:17:54:de:10:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:49:7C:94:21:C6:BB:BD:77:19:17:1B:58:20:B4:17:62:CB:6C:29
            X509v3 Authority Key Identifier:
                keyid:C4:58:B9:51:38:E9:01:C8:24:D2:FF:6F:DA:B5:A5:C2:F8:31:60:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:ad:8d:d7:b7:a5:c8:3d:05:48:5d:f9:f7:cb:c6:d0:92:
         73:c8:b2:e8:d4:aa:e7:13:a6:cb:45:cc:59:fb:69:1a:de:46:
         60:c0:20:1c:98:08:b2:0d:ef:ba:4d:54:f6:d4:de:f2:8e:9b:
         bb:d0:13:ff:b6:65:20:84:b6:0c:e7:0f:e2:11:7a:46:28:ff:
         6c:d4:7b:18:b6:95:ca:3e:72:27:c4:e1:d1:cb:4d:22:f1:51:
         94:5c:87:3c:c6:aa:59:60:4a:71:6a:83:9b:ea:6a:c6:fd:56:
         d8:1f:f5:a5:68:e3:24:f2:d3:aa:73:dd:1e:24:1a:15:da:a2:
         09:49:a1:88:79:71:6e:20:e0:d9:f9:fb:ef:4f:8c:3c:e3:03:
         19:49:cd:de:c7:0f:e1:06:6c:de:84:d9:4c:26:55:60:ff:f2:
         f0:c6:84:3b:13:6a:c0:da:86:c3:7d:38:96:06:ce:68:88:09:
         58:75:34:ca:70:1a:be:7d:0f:d1:94:5e:75:f4:f8:64:79:a5:
         d8:62:71:76:74:cf:d9:5d:a3:38:91:f9:96:92:bc:3b:d8:53:
         19:a5:21:e8:51:f0:b8:2f:ef:fd:18:6a:15:26:d9:a0:6f:9b:
         91:e6:87:92:15:bf:23:18:ca:36:1a:47:eb:cb:94:2a:65:35:
         11:9a:d8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9rhltU5o4BaDSs3HyRmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NThiOTUxMzhlOTAxYzgyNGQyZmY2ZmRhYjVhNWMyZjgz
MTYwYzMwHhcNMjQxMTIzMDMwMDI5WhcNMjQxMTI0MDMwMDI5WjAzMTEwLwYDVQQD
Eyg0NTQ5N2M5NDIxYzZiYmJkNzcxOTE3MWI1ODIwYjQxNzYyY2I2YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqNhdAX1UFvu3HMR4TbiZBSsmG5S
n51wvwuxQce0cCJOUucmugmUqI52o0yoARM2MiBtKOAzA/i2cGEIW5KZxZZ7+aV/
n6DfWlHb7IFzY3yRhp7cNkByJ/hJF5DS/2xIituuOfh/oelMuVdPk5GJ6qvf4KvN
IPkejo7XBTVPTCT7OPJU2oOzgcpUshmT4i91l6IWUlLoaEVKr77KnRPOr+h0BY5E
ke5bPl9amyAz6XSp5A6E/q33Xp5evpYwpTAouTfimIm2GyPTcE1TKSe9azdJFR3Q
IiLF4kQUKBLEf9vTnyavHwncY/jxD83f7TkEcIi56zikMJb3hxdU3hASWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVJfJQhxru9dxkXG1ggtBdiy2wpMB8GA1UdIwQY
MBaAFMRYuVE46QHIJNL/b9q1pcL4MWDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZpNVVUanBBY2drMHY5djJyV2x3dmd4WU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNzAwZDAtY2JiMi00OGNmLThhMDQt
MmRjYzQ1MzQ3Mjk4LzEveEZpNVVUanBBY2drMHY5djJyV2x3dmd4WU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNzAwZDAtY2JiMi00OGNmLThhMDQtMmRjYzQ1MzQ3Mjk4
LzEveEZpNVVUanBBY2drMHY5djJyV2x3dmd4WU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnOtjde3
pcg9BUhd+ffLxtCSc8iy6NSq5xOmy0XMWftpGt5GYMAgHJgIsg3vuk1U9tTe8o6b
u9AT/7ZlIIS2DOcP4hF6Rij/bNR7GLaVyj5yJ8Th0ctNIvFRlFyHPMaqWWBKcWqD
m+pqxv1W2B/1pWjjJPLTqnPdHiQaFdqiCUmhiHlxbiDg2fn770+MPOMDGUnN3scP
4QZs3oTZTCZVYP/y8MaEOxNqwNqGw304lgbOaIgJWHU0ynAavn0P0ZRedfT4ZHml
2GJxdnTP2V2jOJH5lpK8O9hTGaUh6FHwuC/v/RhqFSbZoG+bkeaHkhW/IxjKNhpH
68uUKmU1EZrYnQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:08 2024 by rpki-client on console-fra.rpki-client.org