Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File:                     cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier:          18XdDLYc3k4BRTLAxcNVIQ97d5sgZHLILt1ErlicT5s=
Subject key identifier:   36:B8:39:AE:8E:96:89:22:FC:1B:4F:13:17:34:AC:EE:D8:DB:2A:17
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer:       /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial:       019369D9AB34E6CD8976ABBE916140014311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:01:32 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:32 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:32 +0000
Files and hashes:         1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: xQjxjzTVvEX5SUkvrpuXFVDwfgvwmm+H78F4bNDxpxI=)
                          2: u3sHSE5KETHgDwcWxyDJbZ_M4bg.roa (hash: HU102uYMpnCLmNOcHFOhegIC22tjAiQPXNjzjCEpFeE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:ab:34:e6:cd:89:76:ab:be:91:61:40:01:43:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
        Validity
            Not Before: Nov 26 19:01:32 2024 GMT
            Not After : Nov 27 19:01:32 2024 GMT
        Subject: CN=36b839ae8e968922fc1b4f131734aceed8db2a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:79:a1:ba:ac:58:f2:a6:bd:1d:a1:49:0d:
                    d7:4c:bd:b6:3f:43:51:ad:8a:1c:b3:f1:85:f8:21:
                    52:c1:8e:b7:62:85:6e:bf:eb:41:de:3b:03:11:2b:
                    60:4a:52:e7:97:89:8c:67:60:0d:78:a2:76:f6:f8:
                    1b:ad:0f:4e:3d:bb:f9:9a:83:15:5b:b7:69:3e:36:
                    aa:84:4b:a9:49:1a:80:2c:61:78:c3:90:62:f4:eb:
                    6a:1d:d3:50:98:f9:b1:35:1a:df:c7:f3:77:3f:47:
                    1e:8f:1c:af:e4:ff:ae:5a:cf:2a:19:3b:d4:f8:7d:
                    e2:41:aa:8c:33:a8:7a:a1:50:28:34:4d:3c:c4:8a:
                    78:7d:73:3b:e1:fa:f1:c5:ee:a5:12:42:a9:3c:db:
                    bf:97:fe:d7:17:23:e7:ec:1a:04:a0:56:d0:8e:eb:
                    44:5a:dc:55:c9:67:6a:cf:50:55:9f:52:8b:f1:4d:
                    01:a8:00:c9:fb:c0:61:a2:66:3f:d2:41:3a:b7:73:
                    e0:54:3c:ef:89:05:91:d7:69:7b:33:04:d3:21:b6:
                    30:a5:aa:01:58:89:e0:00:b3:4f:11:26:39:96:98:
                    fc:4a:a1:ca:b5:2d:d1:dd:05:81:f6:f9:1f:46:4c:
                    5b:70:8a:41:22:67:d6:87:c3:50:80:58:3e:e5:dd:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B8:39:AE:8E:96:89:22:FC:1B:4F:13:17:34:AC:EE:D8:DB:2A:17
            X509v3 Authority Key Identifier:
                keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d0:50:21:51:86:34:6e:f1:1b:26:a3:51:6b:c7:e8:95:30:
         f8:4f:4c:52:dd:f0:b4:79:42:71:2e:58:6d:61:47:3b:75:1f:
         ee:11:b3:34:7d:23:1e:e4:dd:26:80:db:a8:c9:ed:3a:ae:14:
         1e:a2:4a:53:86:3d:6a:3b:d7:18:af:d9:e7:ba:ca:0f:bd:1b:
         64:9e:d1:46:10:51:57:1c:e9:21:3a:41:92:ce:16:a7:32:ad:
         a0:8f:b0:f5:ba:99:77:1f:71:3c:b0:b4:9c:14:10:ee:eb:68:
         1c:2e:28:65:53:0a:47:7d:b2:3d:af:27:52:d1:28:f4:f9:8f:
         b6:fe:1b:59:31:bd:79:27:33:74:cb:9a:df:9f:38:df:b0:0f:
         01:e1:36:53:4d:90:1d:7a:02:7b:6d:08:8d:75:8a:8d:dd:7c:
         60:ac:08:70:5b:21:69:cd:21:08:fa:14:80:c3:cb:75:ff:79:
         bb:25:76:9d:0a:48:2e:f2:fa:3c:ac:e9:8f:7b:7c:ec:64:b3:
         51:36:16:15:26:8d:d8:00:28:9a:78:e2:0d:8e:0b:83:1a:19:
         aa:78:f4:62:48:72:df:38:ad:ac:49:e6:c9:7a:6c:2c:90:c1:
         02:13:4f:38:da:0d:11:a4:cc:5e:5b:33:ba:01:18:35:0a:fa:
         a8:08:f2:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2as05s2Jdqu+kWFAAUMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi
ZjJlMDEwHhcNMjQxMTI2MTkwMTMyWhcNMjQxMTI3MTkwMTMyWjAzMTEwLwYDVQQD
EygzNmI4MzlhZThlOTY4OTIyZmMxYjRmMTMxNzM0YWNlZWQ4ZGIyYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jd5obqsWPKmvR2hSQ3XTL22P0NR
rYocs/GF+CFSwY63YoVuv+tB3jsDEStgSlLnl4mMZ2ANeKJ29vgbrQ9OPbv5moMV
W7dpPjaqhEupSRqALGF4w5Bi9OtqHdNQmPmxNRrfx/N3P0cejxyv5P+uWs8qGTvU
+H3iQaqMM6h6oVAoNE08xIp4fXM74frxxe6lEkKpPNu/l/7XFyPn7BoEoFbQjutE
WtxVyWdqz1BVn1KL8U0BqADJ+8BhomY/0kE6t3PgVDzviQWR12l7MwTTIbYwpaoB
WIngALNPESY5lpj8SqHKtS3R3QWB9vkfRkxbcIpBImfWh8NQgFg+5d1NlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa4Oa6Oloki/BtPExc0rO7Y2yoXMB8GA1UdIwQY
MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt
NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2
LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdBQIVGG
NG7xGyajUWvH6JUw+E9MUt3wtHlCcS5YbWFHO3Uf7hGzNH0jHuTdJoDbqMntOq4U
HqJKU4Y9ajvXGK/Z57rKD70bZJ7RRhBRVxzpITpBks4WpzKtoI+w9bqZdx9xPLC0
nBQQ7utoHC4oZVMKR32yPa8nUtEo9PmPtv4bWTG9eSczdMua358437APAeE2U02Q
HXoCe20IjXWKjd18YKwIcFshac0hCPoUgMPLdf95uyV2nQpILvL6PKzpj3t87GSz
UTYWFSaN2AAomnjiDY4LgxoZqnj0Ykhy3zitrEnmyXpsLJDBAhNPONoNEaTMXlsz
ugEYNQr6qAjyvw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:18 2024 by rpki-client on console-fra.rpki-client.org