Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          cpcJzGhDVCIjf6Q8sJ1uU9oyeOF/9RkQkY5+Xs1Vem0=
Subject key identifier:   B4:A2:81:87:6D:27:A8:30:B6:CC:B8:D6:8F:65:0B:42:26:CA:B3:0C
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       01940645C676E6357BC1304A1E0C5259BAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          13B9
Signing time:             Fri 27 Dec 2024 04:00:23 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:23 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:23 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: Tvavlvt44G6CZ3vfiV1KxW1gFrk16UYb+jWdGrXybTI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:c6:76:e6:35:7b:c1:30:4a:1e:0c:52:59:ba:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Dec 27 04:00:23 2024 GMT
            Not After : Dec 28 04:00:23 2024 GMT
        Subject: CN=b4a281876d27a830b6ccb8d68f650b4226cab30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:66:75:c7:0d:c1:ab:fe:3f:be:0c:13:88:
                    67:6e:e2:d6:47:41:e5:7b:73:03:e2:ad:04:ac:b5:
                    83:e9:10:9d:58:18:71:6e:76:66:f1:68:26:97:b5:
                    09:15:42:3c:3c:9f:5d:bf:c8:3c:c9:97:34:65:d6:
                    76:d8:e9:aa:2d:ad:d8:8d:d7:b6:38:b2:79:01:28:
                    34:63:b8:0c:06:f1:a6:b9:34:26:26:a4:54:a8:3e:
                    87:85:ea:b3:d3:5f:d0:7e:c1:c1:67:a9:38:f8:3a:
                    64:be:91:a5:bb:de:d0:66:85:1f:ed:1e:61:14:ce:
                    b0:92:bb:96:1c:d5:25:c9:6a:b8:05:76:28:e5:dc:
                    1a:9b:30:e3:4a:04:9a:d5:c9:08:5a:f4:7b:cc:c9:
                    3e:38:23:54:67:c9:31:77:16:5e:3e:c7:6d:f8:e7:
                    82:82:5e:2d:9b:4d:80:49:32:cf:4d:ac:4e:fe:cc:
                    12:a7:dd:00:81:43:b4:f2:c3:4d:d8:19:5a:c5:f4:
                    1d:4b:c9:25:1b:06:28:2d:5d:50:b2:d0:46:ce:fd:
                    ef:e1:88:85:59:bb:9c:f8:e7:69:ce:6b:3a:8a:82:
                    7b:ab:86:ea:5d:51:15:a3:ab:46:09:34:3b:c2:cb:
                    f2:84:ab:32:13:e2:50:38:eb:fc:7b:84:d7:aa:71:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:81:87:6D:27:A8:30:B6:CC:B8:D6:8F:65:0B:42:26:CA:B3:0C
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6f:b8:01:06:b2:e2:5a:7f:29:bc:60:4f:e8:3b:9b:39:7e:
         dd:e6:93:68:49:be:ba:89:c6:fa:69:eb:cf:63:ac:9c:b2:d5:
         e4:54:ed:52:d2:f8:0c:0b:2d:cd:62:d5:79:e6:b5:2a:a1:1e:
         71:57:ce:1f:20:69:a3:3f:c4:13:63:fe:11:a7:30:60:21:d4:
         ed:83:fb:af:8d:dd:f8:15:90:bd:be:fe:6a:ae:5c:08:b9:d5:
         3e:2c:9a:2a:87:f3:9c:21:2c:6b:b8:fb:55:c8:ac:8d:e7:bb:
         aa:5b:01:fd:b4:42:ba:fc:0c:f8:3d:91:98:fc:cc:8a:0a:d0:
         a5:1d:52:22:25:23:a1:07:5b:c6:54:34:1f:9b:ef:5a:f2:62:
         1c:5f:50:e4:49:83:e6:f4:4c:3b:85:ba:be:81:a4:b3:99:5b:
         0d:e9:84:ac:66:b0:79:07:d1:4e:43:2b:dc:1f:79:47:c0:47:
         98:34:31:24:1c:87:18:80:ac:97:75:4f:4f:22:62:05:2c:cc:
         74:38:90:a0:a8:58:93:1e:32:a1:8f:9a:c9:ed:05:05:e3:d1:
         9d:86:e1:50:eb:11:6c:ac:f6:fd:b4:cd:75:59:5c:9c:08:2a:
         bd:2d:1b:3f:0c:4d:f9:2c:6b:7f:43:7a:0b:52:a3:bb:fd:41:
         0b:48:cb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGRcZ25jV7wTBKHgxSWbrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw
YzIyYTAwHhcNMjQxMjI3MDQwMDIzWhcNMjQxMjI4MDQwMDIzWjAzMTEwLwYDVQQD
EyhiNGEyODE4NzZkMjdhODMwYjZjY2I4ZDY4ZjY1MGI0MjI2Y2FiMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNdmdccNwav+P74ME4hnbuLWR0Hl
e3MD4q0ErLWD6RCdWBhxbnZm8Wgml7UJFUI8PJ9dv8g8yZc0ZdZ22OmqLa3Yjde2
OLJ5ASg0Y7gMBvGmuTQmJqRUqD6Hheqz01/QfsHBZ6k4+DpkvpGlu97QZoUf7R5h
FM6wkruWHNUlyWq4BXYo5dwamzDjSgSa1ckIWvR7zMk+OCNUZ8kxdxZePsdt+OeC
gl4tm02ASTLPTaxO/swSp90AgUO08sNN2BlaxfQdS8klGwYoLV1QstBGzv3v4YiF
Wbuc+Odpzms6ioJ7q4bqXVEVo6tGCTQ7wsvyhKsyE+JQOOv8e4TXqnEn3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSigYdtJ6gwtsy41o9lC0ImyrMMMB8GA1UdIwQY
MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt
NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy
LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2+4AQay
4lp/KbxgT+g7mzl+3eaTaEm+uonG+mnrz2OsnLLV5FTtUtL4DAstzWLVeea1KqEe
cVfOHyBpoz/EE2P+EacwYCHU7YP7r43d+BWQvb7+aq5cCLnVPiyaKofznCEsa7j7
Vcisjee7qlsB/bRCuvwM+D2RmPzMigrQpR1SIiUjoQdbxlQ0H5vvWvJiHF9Q5EmD
5vRMO4W6voGks5lbDemErGaweQfRTkMr3B95R8BHmDQxJByHGICsl3VPTyJiBSzM
dDiQoKhYkx4yoY+aye0FBePRnYbhUOsRbKz2/bTNdVlcnAgqvS0bPwxN+Sxrf0N6
C1Kju/1BC0jLug==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:01:55 2024 by rpki-client on console-ams.rpki-client.org