Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File:                     t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier:          GYpuaO7jCDLAQVbVTOf9bvjmLenV1PnBcsjgcE96UZg=
Subject key identifier:   2D:F8:7F:ED:03:28:01:44:F6:37:DE:D0:07:B1:10:72:A9:E2:AC:51
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer:       /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial:       01936A4687EA2B46C20EF1DED905CF55A501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number:          0A10
Signing time:             Tue 26 Nov 2024 21:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:27 +0000
Files and hashes:         1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: P/tCupP3lVd0iXMiNZyeD/UivCWa9L9CUUJey+AgGuA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:87:ea:2b:46:c2:0e:f1:de:d9:05:cf:55:a5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
        Validity
            Not Before: Nov 26 21:00:27 2024 GMT
            Not After : Nov 27 21:00:27 2024 GMT
        Subject: CN=2df87fed03280144f637ded007b11072a9e2ac51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:12:73:93:99:84:b3:ba:bb:dd:66:b9:5e:
                    cb:c8:d6:15:c3:d7:e3:d9:fc:ee:11:2d:6b:a8:d3:
                    aa:91:12:6e:b9:a1:4e:06:f0:d8:76:f3:3a:85:41:
                    7e:a3:8c:ce:90:6f:f5:bd:77:c8:61:7e:ce:52:0c:
                    42:53:17:ae:e0:82:bc:25:d0:0a:fe:06:de:dc:4f:
                    f4:a5:9f:55:15:f4:e1:d4:03:d0:a4:5e:90:fc:b8:
                    2d:b2:e1:49:fe:4c:f4:53:9f:fa:bb:6c:c0:5f:fe:
                    7a:15:dd:dd:f7:aa:14:e4:b8:f9:98:8b:7f:b9:9a:
                    9a:76:d0:d3:1c:40:75:2d:3f:aa:4a:7c:67:77:35:
                    d9:24:26:87:d5:c6:30:35:29:97:85:86:e8:ec:38:
                    41:bc:af:82:39:3b:24:80:cb:c6:8d:a7:01:94:e9:
                    2c:ae:b1:36:f4:47:ab:63:ed:6c:92:80:7e:2c:aa:
                    43:78:3f:fd:7a:33:58:9f:85:6b:7c:b5:b5:25:de:
                    a8:69:b7:63:d7:80:28:a4:98:63:b3:c5:29:5b:a6:
                    63:d0:e8:8e:9f:ba:90:f6:9f:6b:85:74:86:93:9f:
                    e5:61:1a:7d:38:05:92:7e:c1:ed:8f:a7:95:9c:d3:
                    54:f0:81:8e:d9:c1:60:83:a1:4b:2d:0e:e4:e3:cc:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F8:7F:ED:03:28:01:44:F6:37:DE:D0:07:B1:10:72:A9:E2:AC:51
            X509v3 Authority Key Identifier:
                keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d9:9f:d6:8a:3b:5d:78:df:57:60:3b:02:8f:d7:81:05:d2:
         6f:03:76:aa:1c:58:50:72:2a:6e:c3:39:9c:9c:48:e8:3a:dc:
         1c:9c:ff:bf:cf:5e:70:17:d2:9a:c0:81:9e:4a:56:bc:92:37:
         95:ec:7b:89:ea:cd:c9:61:1e:f0:94:7a:13:2b:3c:7c:72:d7:
         3d:39:7f:23:14:33:80:db:19:ae:72:2d:f3:07:f4:a2:8a:03:
         cd:31:6d:df:7d:e6:b6:ad:73:ea:2c:2b:13:d1:f5:e5:00:3e:
         34:2c:de:72:b7:e9:91:62:b0:56:53:e7:aa:86:4b:09:a7:01:
         78:57:2e:4a:86:b4:e3:8e:c2:83:a1:7a:2f:7b:c0:32:0d:57:
         28:fd:d7:5f:83:21:02:8f:bd:d7:ec:6d:2c:75:ac:a5:35:99:
         b1:a8:45:0f:7c:0a:28:c4:5a:df:fa:0c:73:85:12:81:a7:d3:
         9e:72:fe:69:21:f1:a5:25:81:d2:49:bf:7b:a6:06:94:2b:fe:
         ee:bc:cd:86:ed:21:b5:39:28:7b:c0:75:b2:b3:5c:72:36:49:
         23:5e:8f:67:cc:51:90:c0:18:13:b2:13:c1:e1:cf:d9:aa:6a:
         ee:87:4e:ad:e7:fd:dc:b3:04:dc:54:47:1a:2c:1c:ae:29:e3:
         e3:00:d2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRofqK0bCDvHe2QXPVaUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTJkN2VjZjNiNDVjNDkzOGYwNWJiOTA1MWM1YTg5NzI5
ZGQ0NDEwHhcNMjQxMTI2MjEwMDI3WhcNMjQxMTI3MjEwMDI3WjAzMTEwLwYDVQQD
EygyZGY4N2ZlZDAzMjgwMTQ0ZjYzN2RlZDAwN2IxMTA3MmE5ZTJhYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKISc5OZhLO6u91muV7LyNYVw9fj
2fzuES1rqNOqkRJuuaFOBvDYdvM6hUF+o4zOkG/1vXfIYX7OUgxCUxeu4IK8JdAK
/gbe3E/0pZ9VFfTh1APQpF6Q/LgtsuFJ/kz0U5/6u2zAX/56Fd3d96oU5Lj5mIt/
uZqadtDTHEB1LT+qSnxndzXZJCaH1cYwNSmXhYbo7DhBvK+COTskgMvGjacBlOks
rrE29EerY+1skoB+LKpDeD/9ejNYn4VrfLW1Jd6oabdj14AopJhjs8UpW6Zj0OiO
n7qQ9p9rhXSGk5/lYRp9OAWSfsHtj6eVnNNU8IGO2cFgg6FLLQ7k48z7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC34f+0DKAFE9jfe0AexEHKp4qxRMB8GA1UdIwQY
MBaAFLeS1+zztFxJOPBbuQUcWolyndRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYt
YTMyNTQ5MjMyNTIwLzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iMDVlNjItY2FjMi00MmY5LTllZjYtYTMyNTQ5MjMyNTIw
LzEvdDVMWDdQTzBYRWs0OEZ1NUJSeGFpWEtkMUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtmf1oo7
XXjfV2A7Ao/XgQXSbwN2qhxYUHIqbsM5nJxI6DrcHJz/v89ecBfSmsCBnkpWvJI3
lex7ierNyWEe8JR6Eys8fHLXPTl/IxQzgNsZrnIt8wf0oooDzTFt333mtq1z6iwr
E9H15QA+NCzecrfpkWKwVlPnqoZLCacBeFcuSoa0447Cg6F6L3vAMg1XKP3XX4Mh
Ao+91+xtLHWspTWZsahFD3wKKMRa3/oMc4USgafTnnL+aSHxpSWB0km/e6YGlCv+
7rzNhu0htTkoe8B1srNccjZJI16PZ8xRkMAYE7ITweHP2apq7odOref93LME3FRH
Giwcrinj4wDSfg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:11 2024 by rpki-client on console-ams.rpki-client.org