Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File:                     _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier:          NQcXu8hfUJ07A3jsCMFfBU1P8LQcahBzARMBJGZMBbw=
Subject key identifier:   A5:3F:BF:96:0B:71:D5:5C:A6:84:AA:0C:D7:2B:E2:3E:3B:65:6B:2A
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer:       /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial:       019365FCCBF3EDEFC9A989E13DA91C860485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number:          0CF3
Signing time:             Tue 26 Nov 2024 01:01:26 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:26 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:26 +0000
Files and hashes:         1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: o9A1JdABSRYHtBV0rx5NWSW1jJq6BOcLkWeta/mvvGQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:cb:f3:ed:ef:c9:a9:89:e1:3d:a9:1c:86:04:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
        Validity
            Not Before: Nov 26 01:01:26 2024 GMT
            Not After : Nov 27 01:01:26 2024 GMT
        Subject: CN=a53fbf960b71d55ca684aa0cd72be23e3b656b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:81:32:07:dd:88:ec:c8:46:ed:c5:3e:ef:
                    65:9c:48:ea:50:12:eb:f5:fd:ef:a6:a0:c2:21:50:
                    a7:d1:6d:33:6e:ac:5f:1f:fc:d6:a5:0c:1c:77:c2:
                    cd:56:99:5e:82:ab:6d:9b:26:f7:47:80:b6:eb:68:
                    4f:d1:25:a6:5a:a7:f6:46:8b:12:7e:56:c2:f9:9b:
                    01:1b:88:19:aa:c9:74:5f:4e:0c:de:9a:eb:61:9a:
                    cf:4f:f6:59:8b:87:4c:29:78:d9:78:97:52:5f:15:
                    af:f5:dc:e0:8b:37:11:5d:7d:21:a4:13:0b:a1:fd:
                    4d:a6:b2:45:e7:9c:1d:7a:97:6c:1f:1f:0e:3e:1a:
                    04:5b:03:a6:e8:ba:f8:b4:82:68:e7:2e:fe:24:3a:
                    0e:ca:95:ce:fb:84:a0:79:65:27:b8:3e:d9:ff:5a:
                    57:91:30:4a:09:72:45:b4:de:ff:82:62:c7:ea:a8:
                    66:9f:5d:6d:63:d2:2c:1e:14:7c:51:87:9f:b1:1c:
                    f1:f2:7f:63:40:2d:8c:2e:a7:87:b4:07:e6:6c:ec:
                    c3:4a:12:22:92:06:51:3d:c8:47:4b:46:2c:6c:90:
                    1a:77:31:24:43:28:af:8d:5c:03:27:b0:0c:a0:8e:
                    9e:1a:20:25:a9:1f:91:8a:c4:a6:ac:b3:c6:10:fc:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3F:BF:96:0B:71:D5:5C:A6:84:AA:0C:D7:2B:E2:3E:3B:65:6B:2A
            X509v3 Authority Key Identifier:
                keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:26:54:ba:4c:87:b8:f6:d7:fd:e6:41:70:0b:ec:ac:80:07:
         c1:ba:0d:7b:ae:c9:33:09:2d:58:ef:d0:46:23:6f:19:0d:20:
         3d:c5:5b:38:b1:fc:08:ea:d7:cb:02:eb:3c:14:69:06:f5:13:
         ce:79:b7:a6:2e:db:dd:e5:46:9e:77:38:af:f4:95:1a:b1:eb:
         f6:d2:5e:f2:84:77:cd:f7:b0:5e:4c:ba:a9:d0:77:25:46:ba:
         58:0e:80:76:3b:1b:0d:83:fd:e8:5e:ee:03:83:22:ef:ed:3d:
         87:23:19:0b:68:20:ca:8f:dc:55:11:03:bd:43:c1:03:5c:66:
         2a:76:60:15:ea:45:08:bd:a7:3d:fb:9c:37:e9:ae:fb:fe:16:
         8b:3a:01:d6:bd:43:66:b4:4f:30:bd:ee:e2:13:b2:34:f0:d6:
         88:a8:82:99:5f:bc:2b:a8:60:dd:69:64:6d:60:9c:7b:bf:69:
         22:9d:9c:87:bc:33:8b:4b:68:f0:c5:03:4f:c9:4f:38:5d:65:
         55:f0:c2:11:66:81:52:85:00:ad:83:64:2b:7e:5c:06:7a:18:
         56:a6:3a:f1:37:86:37:fb:f5:85:23:c5:a8:82:fc:98:10:6e:
         04:ae:64:2f:37:b3:b2:c1:af:80:a7:22:c5:07:7f:5a:25:f8:
         0a:22:ce:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/Mvz7e/JqYnhPakchgSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTI3ZDY0YTRjZTk1ZTA4MzExYWZhZmY0M2U2NmQwNzNm
YjIxZDEwHhcNMjQxMTI2MDEwMTI2WhcNMjQxMTI3MDEwMTI2WjAzMTEwLwYDVQQD
EyhhNTNmYmY5NjBiNzFkNTVjYTY4NGFhMGNkNzJiZTIzZTNiNjU2YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRyBMgfdiOzIRu3FPu9lnEjqUBLr
9f3vpqDCIVCn0W0zbqxfH/zWpQwcd8LNVplegqttmyb3R4C262hP0SWmWqf2RosS
flbC+ZsBG4gZqsl0X04M3prrYZrPT/ZZi4dMKXjZeJdSXxWv9dzgizcRXX0hpBML
of1NprJF55wdepdsHx8OPhoEWwOm6Lr4tIJo5y7+JDoOypXO+4SgeWUnuD7Z/1pX
kTBKCXJFtN7/gmLH6qhmn11tY9IsHhR8UYefsRzx8n9jQC2MLqeHtAfmbOzDShIi
kgZRPchHS0YsbJAadzEkQyivjVwDJ7AMoI6eGiAlqR+RisSmrLPGEPyWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU/v5YLcdVcpoSqDNcr4j47ZWsqMB8GA1UdIwQY
MBaAFPzifWSkzpXggxGvr/Q+ZtBz+yHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zN2RjZTYtZmZlNS00NzZiLTgwOGEt
MDAxNGJjODU1YmY0LzEvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zN2RjZTYtZmZlNS00NzZiLTgwOGEtMDAxNGJjODU1YmY0
LzEvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCZUukyH
uPbX/eZBcAvsrIAHwboNe67JMwktWO/QRiNvGQ0gPcVbOLH8COrXywLrPBRpBvUT
znm3pi7b3eVGnnc4r/SVGrHr9tJe8oR3zfewXky6qdB3JUa6WA6AdjsbDYP96F7u
A4Mi7+09hyMZC2ggyo/cVREDvUPBA1xmKnZgFepFCL2nPfucN+mu+/4WizoB1r1D
ZrRPML3u4hOyNPDWiKiCmV+8K6hg3WlkbWCce79pIp2ch7wzi0to8MUDT8lPOF1l
VfDCEWaBUoUArYNkK35cBnoYVqY68TeGN/v1hSPFqIL8mBBuBK5kLzezssGvgKci
xQd/WiX4CiLOuQ==
-----END CERTIFICATE-----