Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft
File:                     Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft (raw, json)
Hash identifier:          vzNgUVLi0zEpVuqOVrChdGRMa06ulyEvY56RsDcKLQw=
Subject key identifier:   2D:A2:73:48:62:1A:69:97:7C:97:27:9B:7D:36:B3:4A:2D:17:DF:09
Authority key identifier: 66:3E:2D:2A:72:14:D2:A7:7E:2E:9F:CE:CB:2D:64:77:F9:A0:88:71
Certificate issuer:       /CN=663e2d2a7214d2a77e2e9fcecb2d6477f9a08871
Certificate serial:       019367EB89FAD819135CADD2388049857567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 10:01:49 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:49 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:49 +0000
Files and hashes:         1: Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.crl (hash: rgB2KsBy8GCx4bJwrVoSk1yV18TIhCyOggSczu7W+y0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:89:fa:d8:19:13:5c:ad:d2:38:80:49:85:75:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663e2d2a7214d2a77e2e9fcecb2d6477f9a08871
        Validity
            Not Before: Nov 26 10:01:49 2024 GMT
            Not After : Nov 27 10:01:49 2024 GMT
        Subject: CN=2da27348621a69977c97279b7d36b34a2d17df09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:e5:5f:fb:e9:3a:b2:c4:c7:45:c0:0d:81:
                    38:67:52:5b:a8:70:d2:83:ad:81:9c:b2:1c:93:11:
                    47:6c:6c:42:4d:42:0b:ac:2f:a3:e3:a5:14:21:6b:
                    0c:54:65:f8:32:89:d5:3c:45:06:52:1e:1b:80:5b:
                    44:eb:a7:e6:2b:cf:95:38:83:41:48:b4:e1:4c:a8:
                    a1:8a:65:de:aa:f9:00:d9:a4:e3:96:62:d5:df:90:
                    f3:90:f5:0f:50:30:e8:6c:47:2a:a1:58:72:b1:88:
                    e0:ef:8c:ab:a0:d4:a1:95:a7:0c:f4:4c:ba:22:38:
                    00:fd:bf:7b:c8:f8:c6:bc:54:4d:33:e2:46:21:bf:
                    42:96:ba:ca:12:16:20:58:2b:6f:85:65:19:11:4f:
                    92:3e:02:1d:cc:f4:a2:86:23:74:b2:5f:63:28:85:
                    73:9e:33:b8:7b:10:c9:fc:a6:e9:de:6c:3d:03:8d:
                    b7:6e:b4:ea:73:39:64:b1:b4:7c:3a:b2:18:2e:17:
                    75:30:77:27:d4:b0:c0:2b:28:7a:28:6d:c9:7b:26:
                    60:bd:5a:86:aa:ea:40:16:60:48:b5:76:b0:a1:62:
                    1b:40:ee:28:91:b7:49:7d:8a:62:93:48:c4:1f:86:
                    88:09:ba:f9:f7:18:01:03:8d:4d:b1:cf:f0:77:22:
                    50:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:73:48:62:1A:69:97:7C:97:27:9B:7D:36:B3:4A:2D:17:DF:09
            X509v3 Authority Key Identifier:
                keyid:66:3E:2D:2A:72:14:D2:A7:7E:2E:9F:CE:CB:2D:64:77:F9:A0:88:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4ea6e9-7a4e-40c8-a816-9a4d88545029/1/Zj4tKnIU0qd-Lp_Oyy1kd_mgiHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:99:ac:22:af:68:71:f8:2a:9b:41:9b:d3:97:3f:8b:22:
         97:c9:2a:9a:e7:92:c7:68:36:ef:13:21:0f:c0:05:c7:16:e8:
         6e:2f:2f:bb:62:ed:23:1b:e0:d4:ee:0e:dc:74:db:df:d5:a9:
         fc:58:45:24:53:ca:ba:c3:e7:61:de:3d:12:33:90:e7:84:be:
         52:4e:8f:39:55:e2:bc:05:06:f5:d1:ab:a0:08:e5:8b:28:06:
         70:b4:09:28:32:19:fa:a3:34:78:e9:71:74:2b:fc:d8:d7:66:
         de:74:b9:7f:6b:66:38:83:7f:3f:dd:6a:86:36:1d:51:41:63:
         d3:7c:c0:72:e4:d5:14:3e:58:96:95:7b:a4:67:f7:a7:4c:94:
         12:a1:5d:26:80:e3:b2:d1:47:67:7c:4e:f5:45:e9:65:93:1c:
         c7:2c:4a:7f:07:11:b1:ab:a1:bb:2e:36:3f:68:b6:f1:1c:16:
         ca:46:32:b8:6d:6f:a3:73:9b:e9:aa:5f:dd:b4:b1:23:71:b0:
         35:84:8e:75:a6:2f:aa:b8:9d:bf:eb:0c:bd:c0:02:1c:62:4c:
         53:6b:b9:99:29:19:f1:88:d2:6e:8c:66:6d:27:36:87:85:b2:
         9c:26:39:3f:66:f7:a5:fe:ef:bd:60:c6:83:08:ce:e2:34:5b:
         9d:8f:1e:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn64n62BkTXK3SOIBJhXVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2M2UyZDJhNzIxNGQyYTc3ZTJlOWZjZWNiMmQ2NDc3Zjlh
MDg4NzEwHhcNMjQxMTI2MTAwMTQ5WhcNMjQxMTI3MTAwMTQ5WjAzMTEwLwYDVQQD
EygyZGEyNzM0ODYyMWE2OTk3N2M5NzI3OWI3ZDM2YjM0YTJkMTdkZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOjlX/vpOrLEx0XADYE4Z1JbqHDS
g62BnLIckxFHbGxCTUILrC+j46UUIWsMVGX4MonVPEUGUh4bgFtE66fmK8+VOINB
SLThTKihimXeqvkA2aTjlmLV35DzkPUPUDDobEcqoVhysYjg74yroNShlacM9Ey6
IjgA/b97yPjGvFRNM+JGIb9ClrrKEhYgWCtvhWUZEU+SPgIdzPSihiN0sl9jKIVz
njO4exDJ/Kbp3mw9A423brTqczlksbR8OrIYLhd1MHcn1LDAKyh6KG3JeyZgvVqG
qupAFmBItXawoWIbQO4okbdJfYpik0jEH4aICbr59xgBA41Nsc/wdyJQlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2ic0hiGmmXfJcnm302s0otF98JMB8GA1UdIwQY
MBaAFGY+LSpyFNKnfi6fzsstZHf5oIhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmo0dEtuSVUwcWQtTHBfT3l5MWtkX21naUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80ZWE2ZTktN2E0ZS00MGM4LWE4MTYt
OWE0ZDg4NTQ1MDI5LzEvWmo0dEtuSVUwcWQtTHBfT3l5MWtkX21naUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80ZWE2ZTktN2E0ZS00MGM4LWE4MTYtOWE0ZDg4NTQ1MDI5
LzEvWmo0dEtuSVUwcWQtTHBfT3l5MWtkX21naUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3SZrCKv
aHH4KptBm9OXP4sil8kqmueSx2g27xMhD8AFxxbobi8vu2LtIxvg1O4O3HTb39Wp
/FhFJFPKusPnYd49EjOQ54S+Uk6POVXivAUG9dGroAjliygGcLQJKDIZ+qM0eOlx
dCv82Ndm3nS5f2tmOIN/P91qhjYdUUFj03zAcuTVFD5YlpV7pGf3p0yUEqFdJoDj
stFHZ3xO9UXpZZMcxyxKfwcRsauhuy42P2i28RwWykYyuG1vo3Ob6apf3bSxI3Gw
NYSOdaYvqridv+sMvcACHGJMU2u5mSkZ8YjSboxmbSc2h4WynCY5P2b3pf7vvWDG
gwjO4jRbnY8eHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:29 2024 by rpki-client on console-fra.rpki-client.org