Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File:                     mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier:          AdmaivA8iXGbrfb3uHlKJlM0wmup/QZx5chMuiXdPdU=
Subject key identifier:   56:84:7B:82:FA:E1:B3:B7:D1:70:D7:49:0F:F1:C3:04:75:CF:B6:9E
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer:       /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial:       01936220EB4FD6A7F6C03908EF29021FC25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number:          044B
Signing time:             Mon 25 Nov 2024 07:02:24 +0000
Manifest this update:     Mon 25 Nov 2024 07:02:24 +0000
Manifest next update:     Tue 26 Nov 2024 07:02:24 +0000
Files and hashes:         1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: WaGAeWqON7VPfVHvKJNvOAwfTDSCL4JJ/Idar/SOrnM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:62:20:eb:4f:d6:a7:f6:c0:39:08:ef:29:02:1f:c2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
        Validity
            Not Before: Nov 25 07:02:24 2024 GMT
            Not After : Nov 26 07:02:24 2024 GMT
        Subject: CN=56847b82fae1b3b7d170d7490ff1c30475cfb69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:2d:8e:23:a0:4f:de:a6:86:cf:83:82:ee:
                    f1:9e:a3:55:77:42:80:47:af:da:80:e6:bf:52:69:
                    0a:61:8b:3b:fe:8b:9d:1f:5d:73:4e:c2:9c:03:91:
                    4a:05:41:b3:ee:e3:dd:1e:76:87:fc:49:9e:b1:bb:
                    e0:03:04:da:e7:6d:5c:7a:50:b0:16:c9:fc:94:47:
                    12:69:7f:9e:28:f9:6e:64:b2:73:9f:81:80:a3:6a:
                    49:e0:13:e2:8e:f7:d2:4d:d4:01:cd:6c:3b:3c:0f:
                    50:02:e6:de:54:b1:fd:cd:07:27:43:5c:aa:21:70:
                    11:49:f3:a0:6c:cc:80:60:75:16:3e:66:93:43:bc:
                    7e:0c:ff:c3:a5:6d:7d:01:23:64:a1:08:3f:39:3b:
                    ab:f4:b0:aa:2f:40:14:06:64:cb:58:20:90:33:17:
                    e0:06:20:a0:9b:da:d6:52:32:ee:e2:69:9b:92:96:
                    5a:5a:f8:3f:f6:8c:2d:2b:7c:f9:be:2a:19:83:35:
                    60:93:7a:06:23:03:f9:3d:73:11:b9:27:46:4c:07:
                    76:4f:2c:18:d4:97:c0:d8:04:3c:64:ba:b9:b7:4c:
                    35:11:a4:4b:86:cd:3c:38:11:88:d6:fd:28:a8:4d:
                    eb:40:e6:d6:e2:53:33:01:8d:87:88:89:3f:c1:29:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:84:7B:82:FA:E1:B3:B7:D1:70:D7:49:0F:F1:C3:04:75:CF:B6:9E
            X509v3 Authority Key Identifier:
                keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:16:07:b2:50:77:09:99:ef:29:27:5f:c3:a4:9a:82:16:
         03:97:f7:6e:83:6b:fa:2f:84:4b:a7:aa:5f:23:df:3c:e6:54:
         4a:23:10:17:1b:e7:c4:49:b2:88:ca:c9:50:03:a3:d5:76:52:
         50:79:20:42:bf:26:b3:61:59:3c:b0:46:6a:6d:b3:7b:b4:b2:
         2d:13:56:72:3e:7d:e2:80:78:4e:2e:2b:31:2c:ae:f4:f1:d1:
         7a:68:df:2b:de:1e:af:59:b7:11:1a:52:e7:42:1f:2c:93:e5:
         a5:2d:43:3a:4d:72:e1:f0:15:9a:9c:7f:c1:c2:11:4a:17:fd:
         09:11:e1:a3:d4:32:87:e6:e9:18:b1:1b:58:98:d9:46:34:78:
         4f:f3:5b:d1:2c:7c:27:1f:6b:c7:e7:64:3b:db:90:b0:c9:ab:
         83:b8:36:11:fe:d1:0d:cb:c7:e7:c3:d4:bd:bc:6c:18:b2:e2:
         1f:d3:b0:2b:bf:53:82:b8:4d:06:e4:e1:ed:8c:4f:47:57:a1:
         0a:12:8b:9d:48:bb:65:3c:49:69:54:38:e4:15:7e:84:3f:7b:
         ee:df:b6:9f:86:58:94:5a:3a:a4:72:e7:6c:8a:81:8f:83:ff:
         a2:f5:2c:51:52:4a:53:77:8b:40:ee:7b:d4:f0:5d:57:b4:83:
         c2:ce:84:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNiIOtP1qf2wDkI7ykCH8JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3
MjAzOGQwHhcNMjQxMTI1MDcwMjI0WhcNMjQxMTI2MDcwMjI0WjAzMTEwLwYDVQQD
Eyg1Njg0N2I4MmZhZTFiM2I3ZDE3MGQ3NDkwZmYxYzMwNDc1Y2ZiNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lItjiOgT96mhs+Dgu7xnqNVd0KA
R6/agOa/UmkKYYs7/oudH11zTsKcA5FKBUGz7uPdHnaH/EmesbvgAwTa521celCw
Fsn8lEcSaX+eKPluZLJzn4GAo2pJ4BPijvfSTdQBzWw7PA9QAubeVLH9zQcnQ1yq
IXARSfOgbMyAYHUWPmaTQ7x+DP/DpW19ASNkoQg/OTur9LCqL0AUBmTLWCCQMxfg
BiCgm9rWUjLu4mmbkpZaWvg/9owtK3z5vioZgzVgk3oGIwP5PXMRuSdGTAd2TywY
1JfA2AQ8ZLq5t0w1EaRLhs08OBGI1v0oqE3rQObW4lMzAY2HiIk/wSnBbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaEe4L64bO30XDXSQ/xwwR1z7aeMB8GA1UdIwQY
MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt
ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi
LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiccWB7JQ
dwmZ7yknX8OkmoIWA5f3boNr+i+ES6eqXyPfPOZUSiMQFxvnxEmyiMrJUAOj1XZS
UHkgQr8ms2FZPLBGam2ze7SyLRNWcj594oB4Ti4rMSyu9PHRemjfK94er1m3ERpS
50IfLJPlpS1DOk1y4fAVmpx/wcIRShf9CRHho9Qyh+bpGLEbWJjZRjR4T/Nb0Sx8
Jx9rx+dkO9uQsMmrg7g2Ef7RDcvH58PUvbxsGLLiH9OwK79TgrhNBuTh7YxPR1eh
ChKLnUi7ZTxJaVQ45BV+hD977t+2n4ZYlFo6pHLnbIqBj4P/ovUsUVJKU3eLQO57
1PBdV7SDws6EUQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:31:57 2024 by rpki-client on console-fra.rpki-client.org