Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File:                     4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier:          CjL9TaQMGl8Jyj11AQv7Hx2TsLqh9Pzmh2LI1Vqe6O4=
Subject key identifier:   C3:17:6B:AC:62:E1:0E:23:53:A9:EA:56:E2:CB:BE:6C:90:27:12:16
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer:       /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial:       01940758FB0B701EE842D0FF4D6EE22EC417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number:          4B
Signing time:             Fri 27 Dec 2024 09:00:59 +0000
Manifest this update:     Fri 27 Dec 2024 09:00:59 +0000
Manifest next update:     Sat 28 Dec 2024 09:00:59 +0000
Files and hashes:         1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: 7vIlrHrLqFAUDBgbY/FSX/heBuqazQUb8H5Wi3glvIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:58:fb:0b:70:1e:e8:42:d0:ff:4d:6e:e2:2e:c4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
        Validity
            Not Before: Dec 27 09:00:59 2024 GMT
            Not After : Dec 28 09:00:59 2024 GMT
        Subject: CN=c3176bac62e10e2353a9ea56e2cbbe6c90271216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:20:d8:dd:29:df:5c:c5:bf:76:7c:5d:fd:
                    c5:22:4a:5a:df:85:44:49:8a:2e:de:ac:ce:f6:94:
                    15:07:16:3c:04:21:71:ca:dd:87:df:f1:08:04:59:
                    a1:72:07:a6:7d:2f:5b:e6:dd:6a:64:b9:44:9f:73:
                    9a:1a:01:b3:ed:ab:37:f3:e3:5b:ec:96:13:a2:10:
                    38:f4:e1:7d:f0:47:b7:c2:0d:02:1f:d0:a7:68:69:
                    dd:c5:cd:b9:e2:b3:4d:3a:65:d7:f2:05:a5:08:e3:
                    65:56:70:46:4b:e7:6a:27:29:65:00:a7:13:60:a1:
                    12:ca:50:c8:2f:4e:76:fa:52:83:ee:cb:49:90:97:
                    fd:6a:23:4f:09:61:3d:45:4f:4d:2a:40:69:36:aa:
                    f8:db:60:a1:b8:e3:0d:69:a1:2f:27:9c:55:3c:f8:
                    5b:79:16:78:6c:11:0c:c2:22:a3:90:af:ac:9f:4c:
                    1e:ea:c8:2c:7a:33:e0:ee:97:fe:5e:88:0c:1d:b4:
                    9a:05:bb:77:63:9b:84:80:62:7d:cd:4f:c6:a1:fe:
                    9c:e5:7e:92:00:5a:e3:19:ec:9c:80:f7:89:2f:08:
                    ff:80:a4:97:40:fe:85:d4:67:b9:84:0e:4f:65:9c:
                    f9:b6:f6:27:ee:de:da:3d:d5:97:34:a7:07:03:5c:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:17:6B:AC:62:E1:0E:23:53:A9:EA:56:E2:CB:BE:6C:90:27:12:16
            X509v3 Authority Key Identifier:
                keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:72:c1:86:10:fc:fc:05:de:f7:46:0c:a2:04:7d:ef:ab:
         8f:99:e7:e1:ba:e0:88:f5:61:c2:89:ed:3a:ec:99:78:c6:01:
         2d:77:20:e7:c3:e7:de:e4:de:e6:f0:6e:1f:45:5c:c6:c8:4b:
         90:f9:83:94:c8:d1:0b:8f:44:14:f4:ef:ae:b9:9e:54:47:26:
         45:ed:64:ae:5c:be:14:79:ae:41:25:5a:93:11:1d:1c:48:d0:
         3a:68:75:31:46:5d:d1:ff:45:75:17:dc:ab:09:dd:d3:37:96:
         a2:14:58:49:c1:40:6b:a0:e4:86:86:fb:8b:76:ed:05:d3:f7:
         fd:1c:70:0c:5f:7e:d9:72:14:b9:08:66:6b:e0:1d:0c:46:fc:
         74:80:04:12:17:9d:78:03:65:91:fc:1f:b3:bd:a3:b2:ab:92:
         b3:d0:dd:ad:8c:2a:93:f7:e1:8f:a4:ea:db:e7:b5:b1:ad:03:
         ab:df:e9:e7:77:4f:7c:8b:e8:30:f4:40:40:21:e4:54:7d:fa:
         af:6c:10:6f:f6:cd:98:1f:39:68:22:c6:b3:3a:cc:58:18:6f:
         dd:04:8c:69:bb:a6:1d:15:bc:f9:db:8a:a3:19:3c:18:67:77:
         2d:f9:4d:17:1c:77:c0:af:a4:7d:f9:d9:31:79:41:00:e2:79:
         d7:b3:5f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHWPsLcB7oQtD/TW7iLsQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJlMjlkNGZlMGM0Yzg0MzUwMTcyYThhMzQ5NmNjNjY3
YzEzZjYwHhcNMjQxMjI3MDkwMDU5WhcNMjQxMjI4MDkwMDU5WjAzMTEwLwYDVQQD
EyhjMzE3NmJhYzYyZTEwZTIzNTNhOWVhNTZlMmNiYmU2YzkwMjcxMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFsg2N0p31zFv3Z8Xf3FIkpa34VE
SYou3qzO9pQVBxY8BCFxyt2H3/EIBFmhcgemfS9b5t1qZLlEn3OaGgGz7as38+Nb
7JYTohA49OF98Ee3wg0CH9CnaGndxc254rNNOmXX8gWlCONlVnBGS+dqJyllAKcT
YKESylDIL052+lKD7stJkJf9aiNPCWE9RU9NKkBpNqr422ChuOMNaaEvJ5xVPPhb
eRZ4bBEMwiKjkK+sn0we6sgsejPg7pf+XogMHbSaBbt3Y5uEgGJ9zU/Gof6c5X6S
AFrjGeycgPeJLwj/gKSXQP6F1Ge5hA5PZZz5tvYn7t7aPdWXNKcHA1z1hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMXa6xi4Q4jU6nqVuLLvmyQJxIWMB8GA1UdIwQY
MBaAFOJL4p1P4MTIQ1AXKoo0lsxmfBP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjct
ZDhmZWNjYmQ2NThjLzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjctZDhmZWNjYmQ2NThj
LzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk9ywYYQ
/PwF3vdGDKIEfe+rj5nn4brgiPVhwontOuyZeMYBLXcg58Pn3uTe5vBuH0VcxshL
kPmDlMjRC49EFPTvrrmeVEcmRe1krly+FHmuQSVakxEdHEjQOmh1MUZd0f9FdRfc
qwnd0zeWohRYScFAa6Dkhob7i3btBdP3/RxwDF9+2XIUuQhma+AdDEb8dIAEEhed
eANlkfwfs72jsquSs9DdrYwqk/fhj6Tq2+e1sa0Dq9/p53dPfIvoMPRAQCHkVH36
r2wQb/bNmB85aCLGszrMWBhv3QSMabumHRW8+duKoxk8GGd3LflNFxx3wK+kffnZ
MXlBAOJ517NfuA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:08:45 2024 by rpki-client on console-fra.rpki-client.org