Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File:                     4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier:          vFlo+r2qwAlZOnPhTwYsllqXlDMR6mfXN+plQnVHAOE=
Subject key identifier:   07:0F:F7:52:11:A6:F1:C6:8E:44:00:DD:64:59:11:E8:B4:E9:39:3C
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer:       /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial:       01936031859BA4C7DFDC72CFE3461CEA2F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number:          1372
Signing time:             Sun 24 Nov 2024 22:01:18 +0000
Manifest this update:     Sun 24 Nov 2024 22:01:18 +0000
Manifest next update:     Mon 25 Nov 2024 22:01:18 +0000
Files and hashes:         1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: GLbZJqx6h8HnN8xEuUdnbUdSyWo/iYN3bligdqAr0zw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:31:85:9b:a4:c7:df:dc:72:cf:e3:46:1c:ea:2f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
        Validity
            Not Before: Nov 24 22:01:18 2024 GMT
            Not After : Nov 25 22:01:18 2024 GMT
        Subject: CN=070ff75211a6f1c68e4400dd645911e8b4e9393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:f3:e8:90:69:67:8e:db:2b:a0:ba:52:0f:
                    7f:a5:d4:26:4f:6c:c5:74:fd:f5:50:66:7d:b6:e7:
                    26:40:b4:55:53:d8:b3:bf:35:9c:5c:c2:e2:a3:25:
                    fe:3d:a2:80:13:49:45:46:a9:b8:17:9c:0f:90:49:
                    6b:e4:e2:9f:4b:18:97:2e:9b:b4:4c:35:ce:ee:ca:
                    47:0f:e2:ef:d0:1d:be:e1:74:6a:a1:7e:48:96:f0:
                    b4:19:71:21:2b:fc:1c:e6:ef:3b:9c:9b:01:7e:8b:
                    47:37:5f:10:df:42:ed:19:4b:37:02:d4:84:87:c0:
                    34:a7:7d:26:72:0d:68:e3:73:37:87:0d:a0:43:ff:
                    53:0f:03:65:70:32:a4:22:63:f7:a0:d8:9a:8b:9b:
                    29:f3:8a:ac:95:e7:84:43:1a:62:43:d8:40:a7:c7:
                    08:20:3d:a7:ca:04:99:ff:b0:bc:d6:02:1d:69:3c:
                    f9:79:a1:30:d3:b4:b2:a8:77:38:c5:3d:96:8a:15:
                    8b:51:62:68:56:87:ce:1f:f1:30:83:f0:e8:93:e9:
                    8a:80:c6:63:b5:0c:b2:70:8a:23:78:9a:91:53:93:
                    14:d3:7d:ec:8b:83:c9:93:6b:bc:46:ab:28:29:0b:
                    f7:7e:73:70:98:94:9b:cb:b0:be:6e:f6:f0:71:22:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:F7:52:11:A6:F1:C6:8E:44:00:DD:64:59:11:E8:B4:E9:39:3C
            X509v3 Authority Key Identifier:
                keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:93:bf:a8:d3:5b:d6:c2:cf:45:b5:14:5c:b0:a3:94:69:cf:
         a6:96:9a:93:e5:26:81:3f:5b:b0:92:ec:94:58:43:aa:c7:3e:
         a5:a1:87:6e:ae:24:ac:1c:25:e6:68:2c:6e:c9:94:e9:54:9f:
         af:51:ed:9c:55:76:6b:62:e0:7f:47:66:4d:bc:45:17:0e:e1:
         c6:f8:74:ee:b8:d7:f8:71:78:b4:7d:c1:49:7a:39:0c:27:cb:
         cf:86:01:f8:11:b2:c9:4e:0f:c9:aa:74:68:e5:27:13:7a:20:
         fe:a2:b7:ff:1c:26:6a:c0:f7:bc:f6:02:08:f4:78:2d:7d:08:
         a5:b5:f5:92:f6:5e:2c:88:96:3b:b1:83:d9:1e:c2:9e:67:27:
         af:d7:d5:5e:ee:6e:ab:33:de:01:83:cb:24:03:5c:5f:aa:f2:
         3f:0e:97:7d:66:24:85:e2:eb:f3:cc:28:23:46:e3:d4:bf:ea:
         b8:a2:13:9a:67:09:08:c0:d6:b9:de:9c:7f:79:36:80:e2:7b:
         04:bc:eb:9d:8b:29:73:e3:02:3a:76:2f:a8:3e:85:2d:fd:38:
         55:c6:75:f0:bf:90:02:d8:ff:92:f1:26:5a:1f:b8:44:33:36:
         98:4e:55:84:33:8f:0d:e7:30:c3:d5:88:b0:94:69:a2:c6:84:
         03:26:85:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNgMYWbpMff3HLP40Yc6i+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjQxMTI0MjIwMTE4WhcNMjQxMTI1MjIwMTE4WjAzMTEwLwYDVQQD
EygwNzBmZjc1MjExYTZmMWM2OGU0NDAwZGQ2NDU5MTFlOGI0ZTkzOTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5jz6JBpZ47bK6C6Ug9/pdQmT2zF
dP31UGZ9tucmQLRVU9izvzWcXMLioyX+PaKAE0lFRqm4F5wPkElr5OKfSxiXLpu0
TDXO7spHD+Lv0B2+4XRqoX5IlvC0GXEhK/wc5u87nJsBfotHN18Q30LtGUs3AtSE
h8A0p30mcg1o43M3hw2gQ/9TDwNlcDKkImP3oNiai5sp84qsleeEQxpiQ9hAp8cI
ID2nygSZ/7C81gIdaTz5eaEw07SyqHc4xT2WihWLUWJoVofOH/Ewg/Dok+mKgMZj
tQyycIojeJqRU5MU033si4PJk2u8RqsoKQv3fnNwmJSby7C+bvbwcSLbLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcP91IRpvHGjkQA3WRZEei06Tk8MB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupO/qNNb
1sLPRbUUXLCjlGnPppaak+UmgT9bsJLslFhDqsc+paGHbq4krBwl5mgsbsmU6VSf
r1HtnFV2a2Lgf0dmTbxFFw7hxvh07rjX+HF4tH3BSXo5DCfLz4YB+BGyyU4Pyap0
aOUnE3og/qK3/xwmasD3vPYCCPR4LX0IpbX1kvZeLIiWO7GD2R7Cnmcnr9fVXu5u
qzPeAYPLJANcX6ryPw6XfWYkheLr88woI0bj1L/quKITmmcJCMDWud6cf3k2gOJ7
BLzrnYspc+MCOnYvqD6FLf04VcZ18L+QAtj/kvEmWh+4RDM2mE5VhDOPDecww9WI
sJRposaEAyaFfQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:20 2024 by rpki-client on console-fra.rpki-client.org