Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
File:                     4WXiYQLs1LriDDtz6T4hNxWZEnE.mft (raw, json)
Hash identifier:          3/ksfv2Ni8D53Mwx+MOu3bma/iICTimPUdINgHYaoTQ=
Subject key identifier:   47:F7:A8:97:31:EB:79:EE:B7:3A:29:5D:40:03:DC:01:87:2E:1B:35
Authority key identifier: E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
Certificate issuer:       /CN=e165e26102ecd4bae20c3b73e93e213715991271
Certificate serial:       019369DA893ADFAAA9B2A200A5B2B96FA9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WXiYQLs1LriDDtz6T4hNxWZEnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
Manifest number:          06E4
Signing time:             Tue 26 Nov 2024 19:02:29 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:29 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:29 +0000
Files and hashes:         1: 4WXiYQLs1LriDDtz6T4hNxWZEnE.crl (hash: 5docfCr4oSPQ0VG6j3qOP6veHRQJ0/9014wsczoa4sw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WXiYQLs1LriDDtz6T4hNxWZEnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:89:3a:df:aa:a9:b2:a2:00:a5:b2:b9:6f:a9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e165e26102ecd4bae20c3b73e93e213715991271
        Validity
            Not Before: Nov 26 19:02:29 2024 GMT
            Not After : Nov 27 19:02:29 2024 GMT
        Subject: CN=47f7a89731eb79eeb73a295d4003dc01872e1b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:a3:b7:17:6c:bf:82:eb:d1:4c:55:2c:fd:
                    c5:87:67:bf:0e:93:d4:56:df:75:d1:27:0a:9c:c1:
                    74:66:46:4a:47:e4:c2:e1:04:86:68:93:07:b0:62:
                    10:04:97:62:56:fb:ec:b9:de:6a:ec:3b:f4:cb:51:
                    e3:e3:97:ad:52:12:cd:98:0d:83:46:ee:6b:75:7c:
                    65:cf:04:88:1c:8e:eb:c1:ab:e4:14:d2:61:f5:4f:
                    3b:ab:c2:9f:9f:61:ab:15:e6:ac:2e:82:55:9c:64:
                    44:e1:e6:1c:af:9e:7e:d0:03:b7:34:4c:54:fe:48:
                    5d:d9:d2:9c:f6:77:8b:b5:39:98:35:5e:70:f3:84:
                    f1:50:dd:5a:22:1f:8a:f1:79:4d:2d:73:2d:54:f6:
                    86:07:84:40:9d:b0:96:02:bd:05:0d:a7:78:b6:b5:
                    95:e4:a0:0c:41:04:63:9c:e1:a9:30:bd:53:0e:51:
                    ab:f5:b1:41:25:65:a0:fd:0a:0e:c7:db:c7:b6:3d:
                    80:bc:9c:5c:00:57:48:fd:b5:09:d8:14:51:a2:41:
                    40:a4:28:68:e2:51:42:c9:93:0c:f2:a3:8b:50:f3:
                    c9:8c:2d:6d:e9:08:e4:04:ac:44:75:f1:6e:16:3c:
                    03:08:55:b1:9c:26:0e:3b:3f:fb:70:6a:f5:13:e5:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F7:A8:97:31:EB:79:EE:B7:3A:29:5D:40:03:DC:01:87:2E:1B:35
            X509v3 Authority Key Identifier:
                keyid:E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WXiYQLs1LriDDtz6T4hNxWZEnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:53:1e:05:87:4a:a0:e2:a0:4b:a3:d4:89:0a:63:d5:4b:
         e1:e0:77:40:ab:13:2e:9d:5b:ed:fe:44:a2:b2:b8:60:20:f9:
         49:fc:87:54:43:14:06:36:5a:3d:00:7a:74:f8:1b:3a:0c:f3:
         2c:b5:7a:77:35:7a:42:bf:bd:13:e8:58:63:dd:99:2c:f9:f7:
         fd:a2:84:0a:f2:e7:95:32:06:77:a9:b9:c2:3d:80:f4:e4:38:
         89:aa:6b:52:0a:19:df:cc:ce:06:3e:6c:45:de:ba:b0:a1:81:
         c2:15:58:b6:e3:18:98:ee:1d:9c:c4:7f:05:25:54:57:39:5e:
         bb:7a:0b:7b:0f:9d:72:23:8b:d7:68:2f:4c:c1:58:72:33:bb:
         6d:79:aa:8d:3d:c7:e3:d8:94:dd:92:a4:20:4c:41:ef:dc:4c:
         13:54:44:85:77:e8:fa:85:e4:12:d9:1f:e6:3c:9a:1e:b6:45:
         36:d5:e7:ea:89:72:af:20:4a:81:a9:87:6c:dd:2d:7a:20:08:
         b9:df:34:a3:fd:48:0e:fc:1f:1a:e6:81:42:5a:35:9f:e2:37:
         f5:da:27:66:29:89:38:1c:6a:13:81:b2:f2:5e:79:01:b6:dd:
         dd:c5:4b:b7:c5:68:bd:2b:ac:0d:3d:f8:14:2c:89:a0:9d:ab:
         03:7c:c9:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2ok636qpsqIApbK5b6nKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNjVlMjYxMDJlY2Q0YmFlMjBjM2I3M2U5M2UyMTM3MTU5
OTEyNzEwHhcNMjQxMTI2MTkwMjI5WhcNMjQxMTI3MTkwMjI5WjAzMTEwLwYDVQQD
Eyg0N2Y3YTg5NzMxZWI3OWVlYjczYTI5NWQ0MDAzZGMwMTg3MmUxYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmejtxdsv4Lr0UxVLP3Fh2e/DpPU
Vt910ScKnMF0ZkZKR+TC4QSGaJMHsGIQBJdiVvvsud5q7Dv0y1Hj45etUhLNmA2D
Ru5rdXxlzwSIHI7rwavkFNJh9U87q8Kfn2GrFeasLoJVnGRE4eYcr55+0AO3NExU
/khd2dKc9neLtTmYNV5w84TxUN1aIh+K8XlNLXMtVPaGB4RAnbCWAr0FDad4trWV
5KAMQQRjnOGpML1TDlGr9bFBJWWg/QoOx9vHtj2AvJxcAFdI/bUJ2BRRokFApCho
4lFCyZMM8qOLUPPJjC1t6QjkBKxEdfFuFjwDCFWxnCYOOz/7cGr1E+UIvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf3qJcx63nutzopXUAD3AGHLhs1MB8GA1UdIwQY
MBaAFOFl4mEC7NS64gw7c+k+ITcVmRJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFdYaVlRTHMxTHJpRER0ejZUNGhOeFdaRW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzllZmItY2JhOC00OTQwLTkyNTkt
MmNkM2Q2ZWJhOTY5LzEvNFdYaVlRTHMxTHJpRER0ejZUNGhOeFdaRW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzllZmItY2JhOC00OTQwLTkyNTktMmNkM2Q2ZWJhOTY5
LzEvNFdYaVlRTHMxTHJpRER0ejZUNGhOeFdaRW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn1THgWH
SqDioEuj1IkKY9VL4eB3QKsTLp1b7f5EorK4YCD5SfyHVEMUBjZaPQB6dPgbOgzz
LLV6dzV6Qr+9E+hYY92ZLPn3/aKECvLnlTIGd6m5wj2A9OQ4iaprUgoZ38zOBj5s
Rd66sKGBwhVYtuMYmO4dnMR/BSVUVzleu3oLew+dciOL12gvTMFYcjO7bXmqjT3H
49iU3ZKkIExB79xME1REhXfo+oXkEtkf5jyaHrZFNtXn6olyryBKgamHbN0teiAI
ud80o/1IDvwfGuaBQlo1n+I39donZimJOBxqE4Gy8l55Abbd3cVLt8VovSusDT34
FCyJoJ2rA3zJaQ==
-----END CERTIFICATE-----