Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          XwdnOWEPEF0sxNkdV8lL8AHWga+868mGiC6f7AF5flo=
Subject key identifier:   E7:19:CC:EE:24:30:C8:10:11:EF:33:F0:6E:81:1A:46:98:70:91:44
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       0191F9A2E6D6539F363FB9DAEF1D5F63C693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          0C8B
Signing time:             Mon 16 Sep 2024 07:01:28 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:28 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:28 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: 2LBgcqonDLNzoc5cYMZoGH1vORhXR74H7wsNczUbZgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:e6:d6:53:9f:36:3f:b9:da:ef:1d:5f:63:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Sep 16 07:01:28 2024 GMT
            Not After : Sep 17 07:01:28 2024 GMT
        Subject: CN=e719ccee2430c81011ef33f06e811a4698709144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:20:93:05:3f:b8:9a:62:73:e9:eb:cf:53:
                    e7:90:94:d9:f2:a2:d5:94:88:7a:37:50:30:bf:9a:
                    26:bf:f2:2b:c1:ef:fb:cc:91:04:51:bf:00:7f:01:
                    0a:00:e3:97:93:33:8c:8b:46:bc:0e:d1:64:b9:0f:
                    1b:ac:47:1e:9f:50:54:02:76:4c:6c:30:7b:d4:8f:
                    8c:4f:59:23:11:76:11:6c:96:dd:eb:d7:b4:7c:42:
                    66:1d:b3:a1:9e:4e:a8:2c:88:c9:53:9e:43:ea:eb:
                    cf:1a:d6:7c:92:83:72:67:7d:61:b7:70:16:a1:a1:
                    6b:9f:10:5d:40:31:0e:92:69:0e:2e:00:1a:7e:b5:
                    23:fb:8d:a6:ba:c1:ee:c5:13:c5:33:0a:ea:21:14:
                    96:81:4f:d6:ae:a2:5c:6d:11:07:e1:50:43:fc:c1:
                    d6:20:31:72:93:a7:bb:05:e7:60:8b:67:af:bc:0e:
                    1f:43:5d:02:2a:ea:d9:18:6c:b6:5c:df:b4:23:97:
                    89:15:eb:91:0d:dd:7a:64:59:66:d9:8f:8c:35:8c:
                    aa:54:02:91:4e:0c:c0:e7:14:f5:eb:06:d8:6d:2b:
                    96:20:c2:18:bc:b6:b6:db:52:f5:b6:e2:22:d2:9e:
                    cd:8e:77:c1:92:e7:99:82:c1:72:65:02:92:ae:16:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:19:CC:EE:24:30:C8:10:11:EF:33:F0:6E:81:1A:46:98:70:91:44
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:47:5e:a2:57:fe:be:30:ba:8c:8d:44:e1:73:c6:b5:68:
         65:2c:55:bd:86:e7:cd:6a:d9:0d:f0:8a:85:ac:1c:49:e6:4a:
         62:85:5e:f8:87:50:50:a6:e2:ab:ba:87:74:1f:1d:6d:0b:ba:
         cc:f3:bd:7c:88:94:ee:04:39:10:d9:04:05:d5:d0:41:ed:68:
         5c:43:5f:e1:b1:18:2d:ec:21:3f:3b:7e:33:d0:d7:e0:14:54:
         5d:ef:a6:e5:f7:0b:35:1a:48:d1:9d:cb:ca:18:1b:18:ae:c7:
         e4:0b:71:4c:28:1f:4a:9f:65:b4:ce:af:7a:4a:b9:46:3a:a8:
         2f:65:3a:a7:be:6f:b1:87:11:8f:86:88:4c:23:cf:0f:23:84:
         fb:48:3f:fc:42:fd:86:4c:c6:ec:8b:f7:9c:91:a9:f8:be:fe:
         8e:76:04:49:88:36:e5:bd:36:6b:6b:7a:50:3b:a9:25:f9:b1:
         c9:69:a1:aa:d7:ac:f0:39:cf:53:ce:37:07:c4:25:46:69:53:
         8e:bf:cb:f0:30:42:b7:6d:5a:a5:f4:0b:9d:4c:ae:2b:f3:eb:
         4c:c0:cd:2a:af:af:04:3d:24:68:6b:90:e3:23:6c:3c:2c:a2:
         17:9f:8b:27:ce:65:40:56:fe:1f:77:3c:58:0e:3d:73:be:3b:
         77:e7:28:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5oubWU582P7na7x1fY8aTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZmVlNTYwMWNmMjM4ZTFkZDc5MjFhYzlkODgyOTZlMmNj
Y2RlODgwHhcNMjQwOTE2MDcwMTI4WhcNMjQwOTE3MDcwMTI4WjAzMTEwLwYDVQQD
EyhlNzE5Y2NlZTI0MzBjODEwMTFlZjMzZjA2ZTgxMWE0Njk4NzA5MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ4gkwU/uJpic+nrz1PnkJTZ8qLV
lIh6N1Awv5omv/Irwe/7zJEEUb8AfwEKAOOXkzOMi0a8DtFkuQ8brEcen1BUAnZM
bDB71I+MT1kjEXYRbJbd69e0fEJmHbOhnk6oLIjJU55D6uvPGtZ8koNyZ31ht3AW
oaFrnxBdQDEOkmkOLgAafrUj+42musHuxRPFMwrqIRSWgU/WrqJcbREH4VBD/MHW
IDFyk6e7Bedgi2evvA4fQ10CKurZGGy2XN+0I5eJFeuRDd16ZFlm2Y+MNYyqVAKR
TgzA5xT16wbYbSuWIMIYvLa221L1tuIi0p7NjnfBkueZgsFyZQKSrhYAgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcZzO4kMMgQEe8z8G6BGkaYcJFEMB8GA1UdIwQY
MBaAFBH+5WAc8jjh3XkhrJ2IKW4szN6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEt
YzQ2ZTAwNzhlZGY3LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEtYzQ2ZTAwNzhlZGY3
LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVJHXqJX
/r4wuoyNROFzxrVoZSxVvYbnzWrZDfCKhawcSeZKYoVe+IdQUKbiq7qHdB8dbQu6
zPO9fIiU7gQ5ENkEBdXQQe1oXENf4bEYLewhPzt+M9DX4BRUXe+m5fcLNRpI0Z3L
yhgbGK7H5AtxTCgfSp9ltM6vekq5RjqoL2U6p75vsYcRj4aITCPPDyOE+0g//EL9
hkzG7Iv3nJGp+L7+jnYESYg25b02a2t6UDupJfmxyWmhqtes8DnPU843B8QlRmlT
jr/L8DBCt21apfQLnUyuK/PrTMDNKq+vBD0kaGuQ4yNsPCyiF5+LJ85lQFb+H3c8
WA49c747d+co+Q==
-----END CERTIFICATE-----