Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
File:                     C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json)
Hash identifier:          vxvB2ZVlUlWydmd7dD9AQ3GDxW5JNHISO0j22bN5SB8=
Subject key identifier:   F6:18:49:BA:79:62:60:52:3F:9B:E2:15:35:32:9B:51:40:28:3E:91
Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9
Certificate issuer:       /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
Certificate serial:       01940647DA4FFE973DEE430ABDD33F4F8D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
Manifest number:          1359
Signing time:             Fri 27 Dec 2024 04:02:39 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:39 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:39 +0000
Files and hashes:         1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: 1FC8QYxUuzY7Gt9pc/ZO2CBphARfRPKr2rnscQiWReA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:da:4f:fe:97:3d:ee:43:0a:bd:d3:3f:4f:8d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9
        Validity
            Not Before: Dec 27 04:02:39 2024 GMT
            Not After : Dec 28 04:02:39 2024 GMT
        Subject: CN=f61849ba796260523f9be21535329b5140283e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:8f:f8:4b:cb:6e:ba:21:78:68:ea:a0:47:
                    43:bf:63:ea:48:75:6a:9f:7f:4a:43:9a:81:c0:24:
                    f7:33:5d:1c:28:d7:9e:3d:5b:69:e9:e5:ff:70:69:
                    e1:a4:db:37:13:a6:41:54:0e:64:bc:5c:db:62:2d:
                    b9:11:55:b3:ae:3c:48:40:88:b3:1c:f8:b0:8f:a9:
                    d9:b1:5e:e9:bd:ad:34:39:55:86:2e:79:6b:15:f9:
                    fc:bd:b3:7f:0a:b1:2b:01:bb:87:1f:c5:ea:df:4e:
                    da:d5:0b:95:b5:98:0e:67:eb:d4:78:e0:07:33:c5:
                    bd:19:eb:b9:cd:7a:64:a2:69:fc:5b:05:5e:55:2c:
                    f3:3a:01:ea:40:20:48:79:39:91:89:5c:61:91:31:
                    1c:43:e7:19:94:b9:9d:e7:77:f6:4f:bd:87:c3:65:
                    7a:1d:e7:9a:f0:61:04:0f:8e:d4:5d:ee:c7:33:b6:
                    a2:c8:57:19:18:17:3b:fd:72:47:fa:58:8d:c4:9f:
                    69:79:ef:81:53:db:5d:1e:6d:08:37:79:e8:ef:a2:
                    b4:63:ab:4d:7a:67:5e:7f:08:c5:db:2e:cd:73:8c:
                    54:7a:0c:cc:87:10:c8:02:0d:94:48:78:11:ed:8a:
                    34:5b:4e:95:c5:57:60:c3:5c:b8:20:88:50:66:8f:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:49:BA:79:62:60:52:3F:9B:E2:15:35:32:9B:51:40:28:3E:91
            X509v3 Authority Key Identifier:
                keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:8d:e7:57:1f:7a:e3:11:03:79:91:bf:7f:63:c7:c9:26:
         bb:61:54:cd:93:6b:01:8e:6e:0b:ea:dc:f2:83:97:11:bb:74:
         72:f2:70:bd:87:7f:31:40:76:f9:33:7c:d5:54:3c:fc:d0:6b:
         4c:ad:33:e1:13:0e:29:d6:79:52:9a:1e:fa:63:ab:64:36:09:
         90:7e:75:36:26:8d:9c:fe:27:c6:aa:e4:a4:c3:ea:ba:43:d3:
         7f:b8:86:f5:b6:ee:a0:81:3f:94:be:4b:6c:05:c0:e4:18:6b:
         a3:bc:98:a8:b4:f7:42:ce:41:8c:b5:f5:68:4f:bd:10:60:ec:
         88:b9:bb:40:75:af:d9:07:b5:d3:19:28:c3:63:97:6d:05:df:
         f6:aa:20:07:58:72:15:40:91:a2:48:99:36:3c:db:51:45:48:
         7f:5a:df:17:23:f9:ac:ad:b8:9c:ab:ed:8c:94:30:36:b8:23:
         e2:ad:f3:77:1a:a9:b7:48:ff:e6:af:28:f5:d3:14:14:72:77:
         bd:76:45:9b:60:68:f1:e8:42:d7:9b:00:64:84:d6:d0:ab:00:
         ea:8f:e8:2e:1b:a4:0c:79:23:94:51:7f:4e:74:1c:cb:89:d4:
         1b:2f:7b:b2:cf:39:80:58:3f:dc:f8:44:55:04:78:28:22:7f:
         a0:cc:1f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGR9pP/pc97kMKvdM/T42bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk
MzI1ZDkwHhcNMjQxMjI3MDQwMjM5WhcNMjQxMjI4MDQwMjM5WjAzMTEwLwYDVQQD
EyhmNjE4NDliYTc5NjI2MDUyM2Y5YmUyMTUzNTMyOWI1MTQwMjgzZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxiP+EvLbroheGjqoEdDv2PqSHVq
n39KQ5qBwCT3M10cKNeePVtp6eX/cGnhpNs3E6ZBVA5kvFzbYi25EVWzrjxIQIiz
HPiwj6nZsV7pva00OVWGLnlrFfn8vbN/CrErAbuHH8Xq307a1QuVtZgOZ+vUeOAH
M8W9Geu5zXpkomn8WwVeVSzzOgHqQCBIeTmRiVxhkTEcQ+cZlLmd53f2T72Hw2V6
Heea8GEED47UXe7HM7aiyFcZGBc7/XJH+liNxJ9pee+BU9tdHm0IN3no76K0Y6tN
emdefwjF2y7Nc4xUegzMhxDIAg2USHgR7Yo0W06VxVdgw1y4IIhQZo8rXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYYSbp5YmBSP5viFTUym1FAKD6RMB8GA1UdIwQY
MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt
ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj
LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsGN51cf
euMRA3mRv39jx8kmu2FUzZNrAY5uC+rc8oOXEbt0cvJwvYd/MUB2+TN81VQ8/NBr
TK0z4RMOKdZ5Upoe+mOrZDYJkH51NiaNnP4nxqrkpMPqukPTf7iG9bbuoIE/lL5L
bAXA5Bhro7yYqLT3Qs5BjLX1aE+9EGDsiLm7QHWv2Qe10xkow2OXbQXf9qogB1hy
FUCRokiZNjzbUUVIf1rfFyP5rK24nKvtjJQwNrgj4q3zdxqpt0j/5q8o9dMUFHJ3
vXZFm2Bo8ehC15sAZITW0KsA6o/oLhukDHkjlFF/TnQcy4nUGy97ss85gFg/3PhE
VQR4KCJ/oMwfQQ==
-----END CERTIFICATE-----