Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File:                     pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier:          B7C2TMPXBImi4t9dGcGe7jlU42lBliQugyYUGVBG0SM=
Subject key identifier:   E1:88:13:9F:69:69:3A:16:CE:FA:B0:7E:83:50:3B:98:DD:2C:4A:6C
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       019358775B3C915F23F649A7062781EAD2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number:          0500
Signing time:             Sat 23 Nov 2024 10:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:37 +0000
Files and hashes:         1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: Msy9C3t8qdv8aIsqS97GxzVQgczHJ1j0Ag8nVAfXUgo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:5b:3c:91:5f:23:f6:49:a7:06:27:81:ea:d2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Nov 23 10:00:37 2024 GMT
            Not After : Nov 24 10:00:37 2024 GMT
        Subject: CN=e188139f69693a16cefab07e83503b98dd2c4a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:86:67:49:31:2a:ee:28:73:34:8a:eb:1f:7c:
                    75:e1:70:eb:5e:d3:d4:07:0a:a8:91:6d:4a:8b:34:
                    cb:e3:f4:ff:04:82:9b:20:2e:97:d0:04:11:d9:7a:
                    55:56:98:97:e9:6c:16:84:0f:1f:26:cd:65:62:5f:
                    b2:7d:ca:4f:28:fb:3d:3a:c2:3b:89:0d:4d:f3:27:
                    1b:24:35:75:21:4f:71:3a:9c:7c:d6:aa:53:30:b4:
                    14:b3:d5:7f:00:0d:29:28:6b:81:e4:6d:d8:d7:44:
                    3f:c8:4e:80:00:81:37:c8:8d:22:ee:83:17:15:a0:
                    54:79:1d:b7:37:09:c4:31:da:5f:5f:b3:53:85:fb:
                    b1:91:b1:74:45:94:7c:0a:07:d0:9f:95:d8:3c:33:
                    58:e6:07:b6:f4:21:82:92:98:5f:7e:8e:33:e6:74:
                    c4:9f:54:d4:0a:c7:d2:e1:51:6f:ee:6c:be:34:88:
                    ec:01:a3:f8:0f:36:3f:17:44:8c:aa:11:c7:d8:0d:
                    65:9f:39:10:3e:10:c7:a9:40:b3:6d:79:af:fb:59:
                    af:9f:55:54:ed:62:66:65:52:4b:09:ce:8e:b9:5b:
                    94:b1:84:1d:d4:35:ca:a9:7d:81:52:d0:cb:c0:4d:
                    11:7a:08:45:53:df:19:e2:da:31:97:bd:44:98:89:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:88:13:9F:69:69:3A:16:CE:FA:B0:7E:83:50:3B:98:DD:2C:4A:6C
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:7b:49:04:b8:e0:61:83:14:8c:2b:e5:64:3a:98:e5:b2:
         5f:d8:ab:e3:95:3c:18:9a:c3:e1:eb:41:69:d8:2d:c0:ba:07:
         f8:77:a3:3b:20:5f:6a:25:ce:14:cf:7d:2c:56:73:19:99:f9:
         17:eb:00:e0:4e:79:89:3e:9e:cc:d6:26:ec:67:36:14:3f:70:
         ce:31:bc:af:ec:e3:24:18:59:9e:d1:5d:55:c2:96:5a:c6:f5:
         88:a5:0d:ed:70:87:4c:e4:b1:d4:df:90:61:68:ac:c0:13:15:
         45:12:ea:ac:9d:30:8b:a6:da:98:9d:52:86:75:19:ee:31:4d:
         cb:4a:fb:3d:32:a5:76:5a:46:52:f4:c0:59:b4:68:16:c3:42:
         d0:81:68:77:3f:7f:d1:c7:5b:b4:ed:13:db:a9:63:df:36:2f:
         30:a1:c4:17:69:88:2c:f4:d2:1e:16:c2:c8:79:1a:3e:07:07:
         1c:10:85:14:48:15:1a:4d:55:13:32:be:9b:d5:84:53:5e:c4:
         9b:50:fb:ad:9c:4d:55:c7:38:c7:c7:a0:81:fc:3c:2c:b2:bf:
         aa:b0:ce:59:c5:1e:3d:9b:c6:ac:af:65:cb:3c:38:49:90:28:
         bf:ab:5a:bf:ed:d0:2f:6d:f0:eb:97:07:2b:c3:7e:9a:2b:70:
         26:8a:6e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd1s8kV8j9kmnBieB6tK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz
ZTM2OGIwHhcNMjQxMTIzMTAwMDM3WhcNMjQxMTI0MTAwMDM3WjAzMTEwLwYDVQQD
EyhlMTg4MTM5ZjY5NjkzYTE2Y2VmYWIwN2U4MzUwM2I5OGRkMmM0YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZnSTEq7ihzNIrrH3x14XDrXtPU
BwqokW1KizTL4/T/BIKbIC6X0AQR2XpVVpiX6WwWhA8fJs1lYl+yfcpPKPs9OsI7
iQ1N8ycbJDV1IU9xOpx81qpTMLQUs9V/AA0pKGuB5G3Y10Q/yE6AAIE3yI0i7oMX
FaBUeR23NwnEMdpfX7NThfuxkbF0RZR8CgfQn5XYPDNY5ge29CGCkphffo4z5nTE
n1TUCsfS4VFv7my+NIjsAaP4DzY/F0SMqhHH2A1lnzkQPhDHqUCzbXmv+1mvn1VU
7WJmZVJLCc6OuVuUsYQd1DXKqX2BUtDLwE0ReghFU98Z4toxl71EmIkzXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGIE59paToWzvqwfoNQO5jdLEpsMB8GA1UdIwQY
MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt
OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2
LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWt7SQS4
4GGDFIwr5WQ6mOWyX9ir45U8GJrD4etBadgtwLoH+HejOyBfaiXOFM99LFZzGZn5
F+sA4E55iT6ezNYm7Gc2FD9wzjG8r+zjJBhZntFdVcKWWsb1iKUN7XCHTOSx1N+Q
YWiswBMVRRLqrJ0wi6bamJ1ShnUZ7jFNy0r7PTKldlpGUvTAWbRoFsNC0IFodz9/
0cdbtO0T26lj3zYvMKHEF2mILPTSHhbCyHkaPgcHHBCFFEgVGk1VEzK+m9WEU17E
m1D7rZxNVcc4x8eggfw8LLK/qrDOWcUePZvGrK9lyzw4SZAov6tav+3QL23w65cH
K8N+mitwJopupg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:53 2024 by rpki-client on console-fra.rpki-client.org