Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File:                     AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier:          HjBqj2FLjPdw+oqetmDH7tZ1bbUKPjb/+1BlnJgCQ3M=
Subject key identifier:   45:59:B5:1B:03:28:46:54:0F:F6:8E:B7:50:3A:76:74:27:EC:DD:BB
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer:       /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial:       019356891D92AB0A4C17C0BE4A174EBBDA42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number:          0A41
Signing time:             Sat 23 Nov 2024 01:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:46 +0000
Files and hashes:         1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: W7FXyYTXWVjQAxQEnyDj9Hjqnh9qZuwWril40wcolAU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:1d:92:ab:0a:4c:17:c0:be:4a:17:4e:bb:da:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
        Validity
            Not Before: Nov 23 01:00:46 2024 GMT
            Not After : Nov 24 01:00:46 2024 GMT
        Subject: CN=4559b51b032846540ff68eb7503a767427ecddbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:1d:5c:34:d0:61:af:af:f3:a6:9b:a3:82:
                    07:c0:d3:82:66:e7:97:c0:cd:65:5b:64:cc:ad:37:
                    ef:71:d5:02:a2:0b:8a:4b:85:35:61:ef:d8:1c:f3:
                    ca:e0:95:64:c2:9c:fb:d2:90:da:69:01:42:c5:cd:
                    2e:fa:0e:9b:e2:23:ee:c3:3f:e6:c0:33:7f:56:ff:
                    b9:28:05:ad:8c:3a:01:5c:63:60:ac:84:6b:29:78:
                    ca:1f:10:a8:62:2d:4f:8c:d8:01:1b:31:a6:7b:56:
                    dc:ad:4a:f7:99:ec:72:f3:b3:43:91:05:cb:52:89:
                    1b:59:fd:0a:f9:d7:b6:59:1a:ac:f1:66:74:bd:cc:
                    18:47:74:3d:2e:49:c9:d1:66:9d:f1:d8:a1:dc:f5:
                    52:15:35:24:1d:81:13:fc:57:68:47:60:05:df:10:
                    81:13:6e:dd:40:18:39:6b:cd:1a:8c:4d:50:45:9c:
                    37:a4:d5:ba:f2:32:40:f3:25:b0:3b:b9:ce:d2:2b:
                    23:a5:d7:25:94:0d:48:bc:c2:79:6b:23:fe:b6:69:
                    27:db:2b:d9:79:dd:2e:60:8c:30:9c:0a:86:fb:27:
                    9f:72:e5:d7:7f:fa:97:c3:2b:bd:4f:09:3e:54:29:
                    24:01:a9:68:4c:ec:fa:a9:18:7a:23:af:08:4d:45:
                    f8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:59:B5:1B:03:28:46:54:0F:F6:8E:B7:50:3A:76:74:27:EC:DD:BB
            X509v3 Authority Key Identifier:
                keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:25:61:a5:13:48:c8:48:01:d3:7d:ce:d0:4f:0e:09:49:29:
         b5:46:7b:63:d7:1b:02:29:27:c6:52:2d:8e:28:c7:5c:e4:61:
         f8:3f:87:8f:5d:83:8a:8f:33:88:d7:67:f6:fd:c7:cf:ad:be:
         69:36:d2:f8:33:8a:07:18:90:10:9b:4b:2c:50:7f:ee:8d:47:
         08:e9:94:c0:c9:9c:a3:58:01:48:4b:8e:2a:82:c6:f9:84:3b:
         c5:f6:61:38:e0:d8:bd:f4:59:fe:9c:2a:3b:d0:47:d3:0d:4f:
         aa:e8:1d:80:ab:6d:b6:af:e1:98:a7:5c:08:2f:2a:0b:e9:5b:
         c3:bd:6d:44:76:52:ac:ad:7f:0f:5f:96:75:05:e3:34:ed:a9:
         ac:51:1f:28:34:fa:e4:8f:e7:51:82:08:da:32:d8:1c:c5:04:
         48:dc:0f:23:62:ba:d0:bb:88:ce:8f:12:70:8f:fd:ae:bf:ac:
         19:ad:dd:4c:3d:c4:79:07:89:1e:69:01:80:87:82:f5:48:09:
         6e:11:6d:8e:90:43:13:79:46:0f:63:e2:0a:86:18:c7:40:d9:
         35:b2:c9:f7:ac:8b:df:ea:83:0e:87:62:5c:15:1b:ad:7a:04:
         96:65:4c:c8:68:d5:bf:c7:8d:2a:76:93:46:06:97:e0:24:20:
         90:ff:9c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiR2SqwpMF8C+ShdOu9pCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4
NmQ1YzAwHhcNMjQxMTIzMDEwMDQ2WhcNMjQxMTI0MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg0NTU5YjUxYjAzMjg0NjU0MGZmNjhlYjc1MDNhNzY3NDI3ZWNkZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA104dXDTQYa+v86abo4IHwNOCZueX
wM1lW2TMrTfvcdUCoguKS4U1Ye/YHPPK4JVkwpz70pDaaQFCxc0u+g6b4iPuwz/m
wDN/Vv+5KAWtjDoBXGNgrIRrKXjKHxCoYi1PjNgBGzGme1bcrUr3mexy87NDkQXL
UokbWf0K+de2WRqs8WZ0vcwYR3Q9LknJ0Wad8dih3PVSFTUkHYET/FdoR2AF3xCB
E27dQBg5a80ajE1QRZw3pNW68jJA8yWwO7nO0isjpdcllA1IvMJ5ayP+tmkn2yvZ
ed0uYIwwnAqG+yefcuXXf/qXwyu9Twk+VCkkAaloTOz6qRh6I68ITUX4ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVZtRsDKEZUD/aOt1A6dnQn7N27MB8GA1UdIwQY
MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It
ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2
LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISVhpRNI
yEgB033O0E8OCUkptUZ7Y9cbAiknxlItjijHXORh+D+Hj12Dio8ziNdn9v3Hz62+
aTbS+DOKBxiQEJtLLFB/7o1HCOmUwMmco1gBSEuOKoLG+YQ7xfZhOODYvfRZ/pwq
O9BH0w1PqugdgKtttq/hmKdcCC8qC+lbw71tRHZSrK1/D1+WdQXjNO2prFEfKDT6
5I/nUYII2jLYHMUESNwPI2K60LuIzo8ScI/9rr+sGa3dTD3EeQeJHmkBgIeC9UgJ
bhFtjpBDE3lGD2PiCoYYx0DZNbLJ96yL3+qDDodiXBUbrXoElmVMyGjVv8eNKnaT
RgaX4CQgkP+cxA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:30 2024 by rpki-client on console-fra.rpki-client.org