Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
File:                     9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json)
Hash identifier:          IeQnvjt612VjsXPH3nQ+jVXaoMfg1bynfc6cMdPHWy0=
Subject key identifier:   E1:56:E8:A1:4B:EC:59:DD:76:4C:89:22:84:B1:AB:26:B2:F7:1F:66
Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47
Certificate issuer:       /CN=f50b6b425600a25a6dc132de514797e2aa4b0247
Certificate serial:       019406EB0EA1ACA3935865994D605F5C91E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 07:00:55 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:55 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:55 +0000
Files and hashes:         1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: P9HYjJZkPUo71eSwKy+bil9CzWdSIm+FZAWHXMw/HIc=)
                          2: pGwgjjNX-noWFb6O8Z27W3nr6Ho.roa (hash: CMvL+Cun+hnulv/8owl5aKHqpmVeGRnjkdPwgRM0loM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:eb:0e:a1:ac:a3:93:58:65:99:4d:60:5f:5c:91:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247
        Validity
            Not Before: Dec 27 07:00:55 2024 GMT
            Not After : Dec 28 07:00:55 2024 GMT
        Subject: CN=e156e8a14bec59dd764c892284b1ab26b2f71f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:4f:01:20:e4:21:dd:33:0e:c6:68:77:e1:
                    98:30:9e:5f:2b:3f:0b:f0:cf:14:ad:f7:8f:97:37:
                    ed:10:26:fd:06:06:8b:67:10:36:75:12:0f:a5:9f:
                    0c:d0:bb:f4:fa:58:5b:08:ac:44:51:ed:65:47:39:
                    98:9b:b4:63:80:0c:c3:e9:ff:5c:7a:b8:0d:6f:9c:
                    07:f2:e4:13:db:23:d1:9c:24:0c:93:34:ba:bf:ae:
                    b0:ec:27:40:fa:46:3b:0c:f1:ef:10:87:ad:54:71:
                    c8:3e:dd:b3:ca:66:22:86:73:79:5a:f4:65:6b:70:
                    87:b8:d0:df:30:9a:92:90:29:fc:f0:c8:a7:30:da:
                    5b:4a:21:a3:a8:97:f9:bd:55:56:54:23:19:b5:52:
                    5a:96:b8:40:af:5f:2b:89:d2:1c:ac:da:c7:67:3b:
                    bd:c1:bd:ee:ad:0a:52:a4:12:9b:29:ec:8d:2b:e7:
                    cb:72:27:58:08:99:a9:31:23:5e:34:1c:aa:4a:fc:
                    7c:49:07:9c:c7:6f:32:e5:7f:7c:37:5f:91:f6:ca:
                    a1:cd:29:76:3b:7d:83:64:51:12:4a:4a:41:2c:38:
                    68:cc:b4:7a:97:de:41:34:ff:ce:0b:8e:cf:f6:cd:
                    45:ca:6d:71:15:4d:1a:01:f4:a4:4e:a6:59:1d:e0:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:E8:A1:4B:EC:59:DD:76:4C:89:22:84:B1:AB:26:B2:F7:1F:66
            X509v3 Authority Key Identifier:
                keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:97:45:99:d2:d2:b8:e7:48:04:90:5d:7e:eb:4d:2e:e3:
         d1:ed:88:d0:3f:2c:33:3e:01:b2:13:e5:1d:b2:ed:e2:79:ba:
         11:ce:f2:d4:a0:cd:83:f3:67:3f:ff:2b:f0:41:50:df:c2:dc:
         bf:98:05:be:bc:b9:d6:e9:d3:3c:36:7c:7b:32:82:9c:4e:6a:
         b0:69:39:d7:a9:d8:de:7d:d9:bd:8e:57:d6:80:49:e2:af:0e:
         92:de:c6:f0:64:5e:ab:0b:84:51:78:eb:1f:c5:a0:f3:48:a5:
         65:ee:e1:32:ec:8e:ca:93:84:18:f8:3e:2f:92:1b:2e:ad:7a:
         e9:41:ce:d8:b0:94:54:1a:29:64:93:e2:15:ab:f0:e2:b0:cd:
         0c:92:02:45:6d:aa:09:d9:73:8b:ef:f7:0e:4b:90:50:2e:32:
         04:0a:84:ad:8a:24:87:90:38:bd:73:d1:b6:35:97:20:75:8b:
         ab:7e:47:1d:3e:3b:25:56:4b:32:23:9c:29:fb:bf:98:d8:4d:
         2c:16:16:9b:cc:48:f0:d5:c7:f4:80:7a:63:82:26:05:3b:05:
         af:30:f7:cf:fa:27:44:83:fe:a3:a5:7c:32:73:8e:1a:9b:7f:
         8f:58:0a:7e:67:13:05:66:01:79:05:d4:e6:33:f5:d1:0c:f5:
         cd:14:74:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQG6w6hrKOTWGWZTWBfXJHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0
YjAyNDcwHhcNMjQxMjI3MDcwMDU1WhcNMjQxMjI4MDcwMDU1WjAzMTEwLwYDVQQD
EyhlMTU2ZThhMTRiZWM1OWRkNzY0Yzg5MjI4NGIxYWIyNmIyZjcxZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O1PASDkId0zDsZod+GYMJ5fKz8L
8M8UrfePlzftECb9BgaLZxA2dRIPpZ8M0Lv0+lhbCKxEUe1lRzmYm7RjgAzD6f9c
ergNb5wH8uQT2yPRnCQMkzS6v66w7CdA+kY7DPHvEIetVHHIPt2zymYihnN5WvRl
a3CHuNDfMJqSkCn88MinMNpbSiGjqJf5vVVWVCMZtVJalrhAr18ridIcrNrHZzu9
wb3urQpSpBKbKeyNK+fLcidYCJmpMSNeNByqSvx8SQecx28y5X98N1+R9sqhzSl2
O32DZFESSkpBLDhozLR6l95BNP/OC47P9s1Fym1xFU0aAfSkTqZZHeBGYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFW6KFL7FnddkyJIoSxqyay9x9mMB8GA1UdIwQY
MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt
MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj
LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv+XRZnS
0rjnSASQXX7rTS7j0e2I0D8sMz4BshPlHbLt4nm6Ec7y1KDNg/NnP/8r8EFQ38Lc
v5gFvry51unTPDZ8ezKCnE5qsGk516nY3n3ZvY5X1oBJ4q8Okt7G8GReqwuEUXjr
H8Wg80ilZe7hMuyOypOEGPg+L5IbLq166UHO2LCUVBopZJPiFavw4rDNDJICRW2q
Cdlzi+/3DkuQUC4yBAqErYokh5A4vXPRtjWXIHWLq35HHT47JVZLMiOcKfu/mNhN
LBYWm8xI8NXH9IB6Y4ImBTsFrzD3z/onRIP+o6V8MnOOGpt/j1gKfmcTBWYBeQXU
5jP10Qz1zRR0cA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:14 2024 by rpki-client on console-fra.rpki-client.org