Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          lYCdwiL3+r6b1tgXyrmX29CcIIM4qBZ0JoDcHfKsTHo=
Subject key identifier:   12:3A:53:1E:C1:08:8B:3B:7F:61:DC:A1:01:E7:18:2C:A3:DB:A2:74
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       0194060EDFB58A8B972B3445B5BFB7F73004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0140
Signing time:             Fri 27 Dec 2024 03:00:25 +0000
Manifest this update:     Fri 27 Dec 2024 03:00:25 +0000
Manifest next update:     Sat 28 Dec 2024 03:00:25 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: Tbyn/eiUmadu4zNRVnI7PfkG8M8Vdc3egOPUhUSlKsw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:0e:df:b5:8a:8b:97:2b:34:45:b5:bf:b7:f7:30:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Dec 27 03:00:25 2024 GMT
            Not After : Dec 28 03:00:25 2024 GMT
        Subject: CN=123a531ec1088b3b7f61dca101e7182ca3dba274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:16:f5:30:e9:0c:65:9a:d8:10:96:ef:15:
                    f9:33:98:46:2e:46:b3:69:eb:d9:98:13:dc:16:e7:
                    f6:45:ca:67:c5:7c:f6:ee:a5:83:b3:b7:ca:0a:46:
                    3b:56:3f:fb:3d:63:3e:82:a9:28:95:0f:0c:a0:5a:
                    92:43:b7:e7:60:7d:e8:72:3f:80:d5:27:ab:81:a6:
                    1c:00:76:d7:31:bb:d3:f1:75:fa:cf:29:90:30:ea:
                    ac:09:e1:32:55:30:b7:22:80:de:35:3a:85:ab:19:
                    81:e3:e7:10:ba:83:c1:37:1d:cd:cd:5f:cb:1d:7c:
                    75:9d:cb:8e:0e:0c:ac:bd:0f:ff:5f:5a:fd:56:4b:
                    aa:74:aa:21:0e:57:5e:6b:c8:51:e7:88:5e:dc:43:
                    bd:4c:8e:a3:da:52:b2:de:9f:71:40:39:6b:4c:7c:
                    f6:f7:d5:f4:f2:11:bd:25:fa:8f:0a:69:35:4f:46:
                    ae:32:df:0b:58:d8:13:bd:7a:73:2f:e2:d7:30:cb:
                    3f:e7:33:c2:bc:21:ce:8e:9c:02:d3:fd:70:07:2f:
                    5e:41:69:c2:a5:84:2c:8c:5f:27:b2:0f:35:d0:85:
                    ef:00:e0:d2:91:eb:7f:8d:13:b2:f5:14:0a:e9:46:
                    c3:3b:9d:42:21:33:72:78:f1:c5:72:03:a8:e7:ff:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:53:1E:C1:08:8B:3B:7F:61:DC:A1:01:E7:18:2C:A3:DB:A2:74
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a5:c1:e5:e5:44:f0:91:c3:78:de:0d:fe:14:6d:16:bf:89:
         5f:bb:0d:b8:b3:41:31:53:ed:14:e2:71:ad:5c:0e:02:dc:86:
         cb:89:52:7c:e7:27:c9:48:a2:3d:59:f8:df:78:36:d1:cc:67:
         5f:c7:9d:b5:d1:64:63:2b:be:b6:8a:16:97:b0:d4:30:d0:e0:
         f2:14:d7:1c:d1:8b:d1:d7:2d:ee:c4:c7:27:f1:e8:93:99:04:
         62:b6:3c:3e:75:8c:23:b4:73:95:f1:37:37:e9:15:de:3f:4d:
         06:09:2e:5d:df:63:4b:5a:d4:95:f0:07:42:3f:f5:63:c7:8c:
         14:95:77:5a:e7:cd:c2:8d:ba:cd:7e:1a:97:5a:d5:a3:06:81:
         c1:3b:60:3f:1f:b0:93:d3:ed:f4:39:2f:3c:5c:12:55:4e:b5:
         c2:b4:d5:9d:32:5c:0e:e1:c1:de:f6:c7:1f:0b:f8:8c:d4:a7:
         87:b3:90:ea:3b:34:85:56:a4:b7:df:a7:67:fc:b6:f7:05:ff:
         9e:d1:f0:6f:99:d2:aa:c6:c3:b3:7e:1f:60:87:5d:46:a3:9c:
         d2:28:c3:75:ab:d1:b6:be:e4:18:77:f8:6a:f2:a9:48:85:bf:
         54:c9:d4:d8:f9:95:a4:c9:2a:9b:47:26:8c:b9:df:e8:fc:11:
         be:b1:30:2a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQGDt+1iouXKzRFtb+39zAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmE1YzdlZWJiOGQ1ODhmMmZmMjJjNzc1YzFjMWExNDRj
MjJkYmMwHhcNMjQxMjI3MDMwMDI1WhcNMjQxMjI4MDMwMDI1WjAzMTEwLwYDVQQD
EygxMjNhNTMxZWMxMDg4YjNiN2Y2MWRjYTEwMWU3MTgyY2EzZGJhMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJUW9TDpDGWa2BCW7xX5M5hGLkaz
aevZmBPcFuf2RcpnxXz27qWDs7fKCkY7Vj/7PWM+gqkolQ8MoFqSQ7fnYH3ocj+A
1SergaYcAHbXMbvT8XX6zymQMOqsCeEyVTC3IoDeNTqFqxmB4+cQuoPBNx3NzV/L
HXx1ncuODgysvQ//X1r9VkuqdKohDldea8hR54he3EO9TI6j2lKy3p9xQDlrTHz2
99X08hG9JfqPCmk1T0auMt8LWNgTvXpzL+LXMMs/5zPCvCHOjpwC0/1wBy9eQWnC
pYQsjF8nsg810IXvAODSket/jROy9RQK6UbDO51CITNyePHFcgOo5/+2CwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBI6Ux7BCIs7f2HcoQHnGCyj26J0MB8GA1UdIwQY
MBaAFPtqXH7ruNWI8v8ix3XBwaFEwi28MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0ycGNmdXU0MVlqeV95TEhkY0hCb1VUQ0xidy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhl
LTk0NGNkOTJjMGMwZi8xLzEtMnBjZnV1NDFZanlfeUxIZGNIQm9VVENMYncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q1LzUzNmYwYi05Zjc5LTRkNTYtYWY4ZS05NDRjZDkyYzBj
MGYvMS8xLTJwY2Z1dTQxWWp5X3lMSGRjSEJvVVRDTGJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqXB
5eVE8JHDeN4N/hRtFr+JX7sNuLNBMVPtFOJxrVwOAtyGy4lSfOcnyUiiPVn433g2
0cxnX8edtdFkYyu+tooWl7DUMNDg8hTXHNGL0dct7sTHJ/Hok5kEYrY8PnWMI7Rz
lfE3N+kV3j9NBgkuXd9jS1rUlfAHQj/1Y8eMFJV3WufNwo26zX4al1rVowaBwTtg
Px+wk9Pt9DkvPFwSVU61wrTVnTJcDuHB3vbHHwv4jNSnh7OQ6js0hVakt9+nZ/y2
9wX/ntHwb5nSqsbDs34fYIddRqOc0ijDdavRtr7kGHf4avKpSIW/VMnU2PmVpMkq
m0cmjLnf6PwRvrEwKg==
-----END CERTIFICATE-----