Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File:                     aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier:          iUlQEAU0KfRArg22cBfsH+jMAf/I9JuZKVBieR34sCg=
Subject key identifier:   F6:AA:55:DA:3F:56:4E:02:FC:A2:93:B8:7D:23:F0:D8:96:AC:9E:AC
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer:       /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial:       019367EB46B1C8A4708525FE97153022B06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number:          1376
Signing time:             Tue 26 Nov 2024 10:01:32 +0000
Manifest this update:     Tue 26 Nov 2024 10:01:32 +0000
Manifest next update:     Wed 27 Nov 2024 10:01:32 +0000
Files and hashes:         1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: DSesZEMpv0dn/ebuJCy5kSjol1eFVq8kpweHrXUggi4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:eb:46:b1:c8:a4:70:85:25:fe:97:15:30:22:b0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
        Validity
            Not Before: Nov 26 10:01:32 2024 GMT
            Not After : Nov 27 10:01:32 2024 GMT
        Subject: CN=f6aa55da3f564e02fca293b87d23f0d896ac9eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:3b:5b:08:46:4d:b1:66:47:0c:10:60:fd:
                    12:55:14:a5:b4:f4:fa:c0:27:69:64:62:90:25:a6:
                    2a:23:65:13:47:30:ac:45:d8:7f:f6:ca:f9:25:62:
                    71:8c:f1:45:07:80:d1:2c:fd:a0:ce:af:6e:9b:e7:
                    b9:df:15:74:fa:b4:75:7e:54:8d:c0:7e:c9:33:4a:
                    7e:e5:d5:fa:f1:c6:0f:64:92:75:de:72:1f:a9:1d:
                    62:90:fc:27:2c:41:5d:33:19:00:d5:b8:fb:85:41:
                    77:02:5b:53:2f:b6:4e:1b:08:81:23:42:c8:e6:98:
                    62:a0:98:b4:81:fc:3b:ed:c9:d6:3b:95:ca:f3:c3:
                    43:69:ad:4d:80:28:1c:6f:08:80:6f:2d:cc:8a:67:
                    ca:7b:7a:77:a7:f0:ff:c1:67:d2:10:54:32:d2:f4:
                    fc:9d:00:0a:65:31:75:00:91:2c:3e:d7:75:31:62:
                    ab:df:41:b8:57:33:69:06:d9:e2:ec:c3:1f:75:6e:
                    28:e5:2d:0e:ed:85:8d:6a:60:56:b4:30:58:f7:59:
                    0c:b8:8d:74:46:a9:68:95:22:44:0f:eb:84:76:f4:
                    a2:f8:7d:43:33:ec:3a:ea:a5:9a:35:d2:ed:56:cf:
                    65:d6:9d:04:b2:15:ea:bd:e3:27:54:83:64:a2:c4:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AA:55:DA:3F:56:4E:02:FC:A2:93:B8:7D:23:F0:D8:96:AC:9E:AC
            X509v3 Authority Key Identifier:
                keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:06:25:11:38:42:16:ec:4a:fd:da:f4:99:32:a5:66:5f:
         7d:34:bc:44:d9:2c:59:8b:fc:5f:67:d5:7a:72:70:16:c6:be:
         2c:1e:3b:d5:d8:c9:c3:7a:ef:a4:2f:72:3b:62:c4:2c:aa:ed:
         a4:4e:6a:8c:34:45:89:da:96:4c:42:3a:87:dd:7a:ee:36:18:
         66:b9:b8:02:69:3a:15:70:7c:22:e0:c3:20:e4:ad:f4:38:5c:
         e6:c0:12:94:19:05:ce:f7:5b:80:09:82:38:b6:58:d5:1f:75:
         ac:41:d0:a0:94:3b:46:18:6f:0f:d1:eb:5b:dc:46:49:fe:a7:
         f8:1c:58:f5:02:f1:d5:c9:db:60:7a:c0:23:01:ad:f8:5b:5a:
         5d:6e:72:58:da:19:1b:4e:81:ad:f8:f6:9a:54:53:12:d5:83:
         d2:23:c7:be:8f:db:29:3a:ac:fe:af:d9:2a:bf:39:09:f1:a9:
         27:48:de:e8:e0:d1:a1:75:5a:27:22:50:d1:a0:4f:3f:dd:68:
         12:3b:c7:f1:c3:01:d2:42:75:1e:e4:52:2f:e2:b1:0e:97:d7:
         43:23:6e:4d:85:7b:22:8b:41:d4:b7:3a:98:45:64:02:cf:cb:
         88:d6:0b:71:af:35:b6:fe:ab:c0:3a:02:bd:a9:8f:86:c7:06:
         72:0f:7c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn60axyKRwhSX+lxUwIrBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTk1Y2UxODViNjBlNzg2MDQ5ZGY1NWYxNWM5ZDJlYzA1
ZDRmNmIwHhcNMjQxMTI2MTAwMTMyWhcNMjQxMTI3MTAwMTMyWjAzMTEwLwYDVQQD
EyhmNmFhNTVkYTNmNTY0ZTAyZmNhMjkzYjg3ZDIzZjBkODk2YWM5ZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuY7WwhGTbFmRwwQYP0SVRSltPT6
wCdpZGKQJaYqI2UTRzCsRdh/9sr5JWJxjPFFB4DRLP2gzq9um+e53xV0+rR1flSN
wH7JM0p+5dX68cYPZJJ13nIfqR1ikPwnLEFdMxkA1bj7hUF3AltTL7ZOGwiBI0LI
5phioJi0gfw77cnWO5XK88NDaa1NgCgcbwiAby3MimfKe3p3p/D/wWfSEFQy0vT8
nQAKZTF1AJEsPtd1MWKr30G4VzNpBtni7MMfdW4o5S0O7YWNamBWtDBY91kMuI10
RqlolSJED+uEdvSi+H1DM+w66qWaNdLtVs9l1p0EshXqveMnVINkosSFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaqVdo/Vk4C/KKTuH0j8NiWrJ6sMB8GA1UdIwQY
MBaAFGmZXOGFtg54YEnfVfFcnS7AXU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZmRiNjUtYzQ1ZC00ZGU2LWJmYjEt
YjdjOTllYjE4ODM0LzEvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kZmRiNjUtYzQ1ZC00ZGU2LWJmYjEtYjdjOTllYjE4ODM0
LzEvYVpsYzRZVzJEbmhnU2Q5VjhWeWRMc0JkVDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoEGJRE4
QhbsSv3a9JkypWZffTS8RNksWYv8X2fVenJwFsa+LB471djJw3rvpC9yO2LELKrt
pE5qjDRFidqWTEI6h9167jYYZrm4Amk6FXB8IuDDIOSt9Dhc5sASlBkFzvdbgAmC
OLZY1R91rEHQoJQ7RhhvD9HrW9xGSf6n+BxY9QLx1cnbYHrAIwGt+FtaXW5yWNoZ
G06Brfj2mlRTEtWD0iPHvo/bKTqs/q/ZKr85CfGpJ0je6ODRoXVaJyJQ0aBPP91o
EjvH8cMB0kJ1HuRSL+KxDpfXQyNuTYV7IotB1Lc6mEVkAs/LiNYLca81tv6rwDoC
vamPhscGcg98fg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 19:36:31 2024 by rpki-client on console-fra.rpki-client.org