Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
File:                     uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json)
Hash identifier:          kDhx79KE4H8JWu+hW2iQvTQyDyUlO7jU+G5eUS5rK8c=
Subject key identifier:   84:A6:73:BB:83:94:25:15:34:4A:98:A9:12:B1:27:09:7F:49:D7:79
Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Certificate issuer:       /CN=b90907cee4fac50f3753622ad21a989ae7741c47
Certificate serial:       0193685830953C8C715D5D771BF274AED9ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
Manifest number:          107C
Signing time:             Tue 26 Nov 2024 12:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 12:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 12:00:30 +0000
Files and hashes:         1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: JrumlCSxoPGLm9eErx85jMm7PRqnFojby4IkF/kSVnE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:58:30:95:3c:8c:71:5d:5d:77:1b:f2:74:ae:d9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47
        Validity
            Not Before: Nov 26 12:00:30 2024 GMT
            Not After : Nov 27 12:00:30 2024 GMT
        Subject: CN=84a673bb83942515344a98a912b127097f49d779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:18:5f:0a:7a:9e:87:46:87:2f:e2:99:5e:
                    9b:7f:a9:83:4b:6d:41:e3:c8:70:06:7f:da:73:7d:
                    be:2d:1f:73:f2:b7:9b:4a:27:f3:d5:fd:0b:54:f4:
                    22:e4:c4:9e:c6:e8:ea:31:49:e5:6f:d4:ca:28:b1:
                    0e:aa:b9:73:c2:0e:0a:09:a5:0f:7c:a6:3e:93:9d:
                    65:cb:2a:89:2e:e4:b2:4a:ae:26:c1:59:d1:95:cd:
                    74:0d:53:8d:a3:5a:13:d4:68:93:0e:78:9b:4c:a9:
                    79:a1:b0:ba:80:8b:e6:ef:13:6c:e3:27:16:0a:2d:
                    48:2c:10:5b:4d:2e:85:60:07:ba:4b:21:c5:74:0a:
                    96:72:43:bf:24:a2:2c:49:e7:27:aa:a1:7c:f1:f1:
                    1b:87:ce:60:6f:74:4e:a0:ef:c1:48:da:fd:f1:2b:
                    28:58:e9:6f:a5:41:68:a9:90:48:99:02:f5:4d:2d:
                    22:54:26:e0:72:57:a6:2d:c6:47:37:b3:dc:b9:c2:
                    a4:91:ff:b4:04:09:4d:59:4b:ef:51:30:00:b6:b9:
                    d1:89:e5:b5:17:83:0d:9c:43:81:f2:2a:be:13:02:
                    fc:65:03:44:08:91:cf:54:1f:00:7e:a9:bf:bf:0e:
                    cf:6b:44:31:7c:62:6b:7d:38:1d:d6:52:48:df:0e:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A6:73:BB:83:94:25:15:34:4A:98:A9:12:B1:27:09:7F:49:D7:79
            X509v3 Authority Key Identifier:
                keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:d9:a8:92:1f:ad:ac:b0:e0:2a:80:aa:10:51:b5:b0:89:
         21:a1:f8:4b:78:0b:54:03:38:15:c5:cc:6b:2d:16:87:91:0d:
         96:37:22:06:ef:81:45:df:f2:85:e1:37:78:4e:a9:73:7a:48:
         ae:ba:02:67:68:83:30:55:f7:d3:ac:c8:40:26:b3:ab:94:82:
         9e:00:f2:15:80:79:0c:2f:6b:11:6c:b9:48:52:d8:60:94:5e:
         8d:d0:65:b6:f2:c9:b8:15:30:73:7f:39:3d:e5:80:c2:de:2c:
         29:ae:bf:a3:72:95:67:cf:03:88:2c:37:4f:b8:e8:9e:3a:24:
         be:5e:63:29:f5:1f:68:d0:23:50:6d:75:0e:d8:1f:91:22:21:
         8b:44:73:ee:37:f7:a0:65:ba:79:30:96:df:2b:b8:90:9f:30:
         ae:cf:04:95:9f:d2:50:28:1f:12:26:ce:0d:2d:ae:1d:8d:86:
         f9:8b:de:91:71:72:e9:93:91:56:37:18:fd:48:b7:64:7f:db:
         81:36:ee:64:1f:52:a8:ee:d2:cf:77:ec:7e:26:be:1a:f3:ec:
         d3:ab:08:6b:89:d6:f8:8d:7c:51:9a:f4:a9:45:ce:6e:58:b5:
         cb:21:f0:59:86:fa:18:29:76:3e:ef:16:6c:8b:a5:98:d0:c8:
         8c:06:52:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoWDCVPIxxXV13G/J0rtntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDkwN2NlZTRmYWM1MGYzNzUzNjIyYWQyMWE5ODlhZTc3
NDFjNDcwHhcNMjQxMTI2MTIwMDMwWhcNMjQxMTI3MTIwMDMwWjAzMTEwLwYDVQQD
Eyg4NGE2NzNiYjgzOTQyNTE1MzQ0YTk4YTkxMmIxMjcwOTdmNDlkNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rQYXwp6nodGhy/imV6bf6mDS21B
48hwBn/ac32+LR9z8rebSifz1f0LVPQi5MSexujqMUnlb9TKKLEOqrlzwg4KCaUP
fKY+k51lyyqJLuSySq4mwVnRlc10DVONo1oT1GiTDnibTKl5obC6gIvm7xNs4ycW
Ci1ILBBbTS6FYAe6SyHFdAqWckO/JKIsSecnqqF88fEbh85gb3ROoO/BSNr98Sso
WOlvpUFoqZBImQL1TS0iVCbgclemLcZHN7PcucKkkf+0BAlNWUvvUTAAtrnRieW1
F4MNnEOB8iq+EwL8ZQNECJHPVB8Afqm/vw7Pa0QxfGJrfTgd1lJI3w53EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISmc7uDlCUVNEqYqRKxJwl/Sdd5MB8GA1UdIwQY
MBaAFLkJB87k+sUPN1NiKtIamJrndBxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQt
NTk5NmNhZTlkMTE1LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zYzE2ZDItZDI5MC00N2ZiLTkxMWQtNTk5NmNhZTlkMTE1
LzEvdVFrSHp1VDZ4UTgzVTJJcTBocVltdWQwSEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7fZqJIf
rayw4CqAqhBRtbCJIaH4S3gLVAM4FcXMay0Wh5ENljciBu+BRd/yheE3eE6pc3pI
rroCZ2iDMFX306zIQCazq5SCngDyFYB5DC9rEWy5SFLYYJRejdBltvLJuBUwc385
PeWAwt4sKa6/o3KVZ88DiCw3T7jonjokvl5jKfUfaNAjUG11DtgfkSIhi0Rz7jf3
oGW6eTCW3yu4kJ8wrs8ElZ/SUCgfEibODS2uHY2G+YvekXFy6ZORVjcY/Ui3ZH/b
gTbuZB9SqO7Sz3fsfia+GvPs06sIa4nW+I18UZr0qUXObli1yyHwWYb6GCl2Pu8W
bIulmNDIjAZSIg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 17:55:54 2024 by rpki-client on console-ams.rpki-client.org