Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File:                     CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier:          RvWXAlmRjFFQmSvPt+1adkCVRUVGlGmThpTc3s0M+Fw=
Subject key identifier:   BF:0A:78:B6:0B:7A:6C:AC:66:42:5A:B2:E2:8A:23:D9:02:33:B4:C9
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer:       /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial:       01936A7D8038511897F2DCABE21E0706DF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number:          1343
Signing time:             Tue 26 Nov 2024 22:00:29 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:29 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:29 +0000
Files and hashes:         1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: szBqpUo/XOMBAejPGei16ElEkMQiITngdXOOfJBA4OQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:80:38:51:18:97:f2:dc:ab:e2:1e:07:06:df:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
        Validity
            Not Before: Nov 26 22:00:29 2024 GMT
            Not After : Nov 27 22:00:29 2024 GMT
        Subject: CN=bf0a78b60b7a6cac66425ab2e28a23d90233b4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:48:96:5e:ad:68:c6:e7:84:97:07:e1:53:33:
                    0d:aa:cf:82:07:e9:82:2d:db:ee:f8:89:d2:0d:94:
                    8d:42:53:7f:d7:b6:29:82:3d:0a:ed:ff:f0:45:96:
                    f3:f3:14:66:b2:d0:dd:06:5d:6a:dd:d6:a9:c1:19:
                    e6:7b:2b:12:8c:4d:f1:2c:08:32:4a:91:44:c9:6e:
                    1d:aa:1a:5f:0c:af:23:9e:65:23:28:63:eb:2e:7e:
                    f2:d1:2f:d8:af:c2:42:59:95:69:d5:6f:34:a0:51:
                    23:5c:40:43:92:97:cd:0f:bb:e2:b9:9f:72:43:d0:
                    8e:41:35:2e:f1:82:5d:75:b2:cd:b4:86:c4:1b:94:
                    c1:50:58:35:aa:1e:d4:a7:df:ff:11:d8:09:4a:15:
                    0d:47:0a:f7:f9:26:4f:7e:83:81:c2:5d:9e:bf:2f:
                    25:1a:01:8a:60:23:9e:16:a2:f2:0a:a0:2f:4d:ad:
                    76:38:8c:28:6a:41:cc:57:3e:df:6b:f1:c1:75:92:
                    2f:ba:d8:1a:8c:bb:e4:4a:0b:f6:bb:63:51:03:0a:
                    ec:3e:f1:d4:96:d9:f5:34:08:e1:1e:61:40:bc:49:
                    37:79:52:1e:40:57:6c:95:1b:1a:27:dc:b4:f8:aa:
                    65:76:e9:59:53:82:1d:4d:63:27:3c:25:e9:3b:ec:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0A:78:B6:0B:7A:6C:AC:66:42:5A:B2:E2:8A:23:D9:02:33:B4:C9
            X509v3 Authority Key Identifier:
                keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:ea:8e:af:b5:5e:4b:21:49:47:50:a3:91:80:25:2d:5c:
         9d:51:e5:56:e3:80:1e:c1:f7:85:01:ae:e8:b7:c1:23:4e:79:
         ac:54:a7:11:8c:e7:84:b6:bb:d5:40:25:9f:1d:a0:49:f4:04:
         4f:5b:d1:a0:79:dd:d3:58:3b:40:10:0a:f2:51:f4:e7:a6:66:
         ce:14:10:8d:be:90:3e:66:09:24:2d:cc:16:3d:49:67:0e:d5:
         44:c3:ba:b9:cb:9d:10:d6:74:2a:a3:ff:16:02:ce:1c:fc:da:
         15:57:56:30:2f:bf:3a:84:7a:16:1d:91:af:f0:d8:ff:b5:e6:
         94:55:48:c5:12:f6:60:9a:2b:cc:d6:7e:db:76:c6:30:75:29:
         22:21:20:93:8b:78:e2:84:a4:d9:79:6e:20:79:bc:8c:1c:bd:
         30:62:83:e3:c9:7f:31:e0:cb:98:c9:aa:ce:36:80:54:16:15:
         fa:0a:b1:ee:56:fc:f1:ec:23:79:b0:68:6c:9f:5d:bb:0e:a2:
         1b:45:f7:e5:21:58:a7:ca:8e:63:3e:c2:6d:22:90:5c:20:00:
         38:a4:49:aa:b9:5c:82:0a:c7:14:b2:5b:9e:55:b6:90:fa:d1:
         cf:57:e8:ea:d9:19:5d:9a:11:19:58:eb:e5:58:56:6d:e0:0f:
         4c:cd:50:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfYA4URiX8tyr4h4HBt+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi
ZjJlZWMwHhcNMjQxMTI2MjIwMDI5WhcNMjQxMTI3MjIwMDI5WjAzMTEwLwYDVQQD
EyhiZjBhNzhiNjBiN2E2Y2FjNjY0MjVhYjJlMjhhMjNkOTAyMzNiNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUiWXq1oxueElwfhUzMNqs+CB+mC
Ldvu+InSDZSNQlN/17Ypgj0K7f/wRZbz8xRmstDdBl1q3dapwRnmeysSjE3xLAgy
SpFEyW4dqhpfDK8jnmUjKGPrLn7y0S/Yr8JCWZVp1W80oFEjXEBDkpfND7viuZ9y
Q9COQTUu8YJddbLNtIbEG5TBUFg1qh7Up9//EdgJShUNRwr3+SZPfoOBwl2evy8l
GgGKYCOeFqLyCqAvTa12OIwoakHMVz7fa/HBdZIvutgajLvkSgv2u2NRAwrsPvHU
ltn1NAjhHmFAvEk3eVIeQFdslRsaJ9y0+KpldulZU4IdTWMnPCXpO+yBfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8KeLYLemysZkJasuKKI9kCM7TJMB8GA1UdIwQY
MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt
ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1
LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTvqjq+1
XkshSUdQo5GAJS1cnVHlVuOAHsH3hQGu6LfBI055rFSnEYznhLa71UAlnx2gSfQE
T1vRoHnd01g7QBAK8lH056ZmzhQQjb6QPmYJJC3MFj1JZw7VRMO6ucudENZ0KqP/
FgLOHPzaFVdWMC+/OoR6Fh2Rr/DY/7XmlFVIxRL2YJorzNZ+23bGMHUpIiEgk4t4
4oSk2XluIHm8jBy9MGKD48l/MeDLmMmqzjaAVBYV+gqx7lb88ewjebBobJ9duw6i
G0X35SFYp8qOYz7CbSKQXCAAOKRJqrlcggrHFLJbnlW2kPrRz1fo6tkZXZoRGVjr
5VhWbeAPTM1Q9w==
-----END CERTIFICATE-----