Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File:                     1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier:          apA+mtUUykYJ5Zz9wxJQMHzmL7+dFc+M/AfIBJ/Na+Y=
Subject key identifier:   0F:91:51:75:D0:A0:6C:7B:A2:8A:B6:30:5B:24:48:9D:05:21:15:C5
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer:       /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial:       0192F0652E98CD9A70973221AF575E30A98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number:          0180
Signing time:             Sun 03 Nov 2024 05:00:15 +0000
Manifest this update:     Sun 03 Nov 2024 05:00:15 +0000
Manifest next update:     Mon 04 Nov 2024 05:00:15 +0000
Files and hashes:         1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: pzwKo0YQQKb9jFRK13tJD/x2sRJuswtePoNVmHukr3c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:65:2e:98:cd:9a:70:97:32:21:af:57:5e:30:a9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
        Validity
            Not Before: Nov  3 05:00:15 2024 GMT
            Not After : Nov  4 05:00:15 2024 GMT
        Subject: CN=0f915175d0a06c7ba28ab6305b24489d052115c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fe:04:f8:58:b1:03:42:39:33:0f:dc:02:e0:
                    9f:65:9f:5b:82:e2:75:ee:8d:b7:b6:28:e9:09:f7:
                    be:d3:43:64:d4:c4:3a:6b:5d:9f:44:f7:cf:ee:64:
                    7c:13:cb:6b:dc:8a:fa:00:2c:09:22:9d:9a:60:58:
                    0a:52:13:c9:28:fc:00:9b:fa:48:f4:98:14:68:d9:
                    9b:88:ea:f3:b7:6d:d7:bf:16:b5:1f:73:4d:07:ff:
                    55:7b:20:96:ad:0f:a6:96:5f:4f:24:d9:44:53:a0:
                    5b:36:a2:12:3e:95:30:f5:7b:56:a6:92:cb:82:0e:
                    61:75:d4:ae:cc:90:8b:6b:9c:aa:1f:af:a7:77:80:
                    de:11:85:aa:6d:f7:f4:49:f2:e7:45:23:c5:66:dc:
                    c9:f1:0d:9a:58:ef:99:76:c3:a6:ea:dd:0d:db:7b:
                    19:c0:88:f5:9e:0b:63:22:31:d7:db:5e:ef:2c:a0:
                    86:04:0d:f5:4f:3d:d5:05:c5:b6:c6:2e:5d:96:a5:
                    a7:6e:a3:e9:2f:5e:14:0b:5f:06:e4:f3:39:93:b3:
                    b6:f4:2c:9f:bd:6a:0b:9d:a4:7e:ca:4d:03:0f:ee:
                    d5:d1:80:75:a1:c3:03:10:c2:43:a0:65:3d:48:24:
                    63:3e:52:82:11:30:c9:73:a7:2a:df:16:dc:31:b9:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:51:75:D0:A0:6C:7B:A2:8A:B6:30:5B:24:48:9D:05:21:15:C5
            X509v3 Authority Key Identifier:
                keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:7c:bb:b5:9a:91:3b:43:e2:2e:30:d0:62:e2:cf:60:7b:
         e5:77:73:de:a8:1c:dc:3d:79:64:07:6d:b4:5a:6f:2c:9b:8c:
         ab:3b:a9:93:01:f1:9a:af:ce:53:6a:ae:99:5f:93:a4:db:55:
         2c:61:e8:a4:f9:92:7d:9d:d3:02:c3:63:c3:32:e3:e0:b0:21:
         9c:98:b2:23:c0:24:9b:c6:92:a2:32:cd:ef:b8:a6:a2:17:58:
         2c:28:43:2d:91:8a:41:5e:20:e3:69:05:1d:24:e6:b0:8a:75:
         a2:72:56:75:f5:dd:5d:cf:da:20:0c:88:3b:60:50:5f:2c:b0:
         4d:5e:9f:f2:ca:79:e3:75:5b:8a:5c:a2:a4:38:9b:98:9f:b1:
         09:9c:f0:3f:1d:50:e3:c7:ba:be:59:12:55:ba:8e:cd:3f:9f:
         71:42:10:65:dd:28:c6:e2:59:b7:80:94:65:95:73:fb:f3:97:
         a3:a5:30:53:3a:fb:f3:da:39:48:59:e0:63:67:14:46:2a:f1:
         e7:2d:98:f5:c5:93:29:21:f2:c1:86:38:b5:cb:46:04:e9:9f:
         34:79:6a:4c:93:6e:4e:bc:02:0c:38:4e:a5:7b:64:50:4b:12:
         38:d9:bd:c9:72:95:e3:66:32:50:64:dd:36:c7:cf:82:25:59:
         0d:aa:67:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLwZS6YzZpwlzIhr1deMKmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTAwN2VkMmZlMDhkNDMzZTBmMGEwMmY0M2NhN2FjYjI2
ZjVhMGUwHhcNMjQxMTAzMDUwMDE1WhcNMjQxMTA0MDUwMDE1WjAzMTEwLwYDVQQD
EygwZjkxNTE3NWQwYTA2YzdiYTI4YWI2MzA1YjI0NDg5ZDA1MjExNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv4E+FixA0I5Mw/cAuCfZZ9bguJ1
7o23tijpCfe+00Nk1MQ6a12fRPfP7mR8E8tr3Ir6ACwJIp2aYFgKUhPJKPwAm/pI
9JgUaNmbiOrzt23Xvxa1H3NNB/9VeyCWrQ+mll9PJNlEU6BbNqISPpUw9XtWppLL
gg5hddSuzJCLa5yqH6+nd4DeEYWqbff0SfLnRSPFZtzJ8Q2aWO+ZdsOm6t0N23sZ
wIj1ngtjIjHX217vLKCGBA31Tz3VBcW2xi5dlqWnbqPpL14UC18G5PM5k7O29Cyf
vWoLnaR+yk0DD+7V0YB1ocMDEMJDoGU9SCRjPlKCETDJc6cq3xbcMbmbjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+RUXXQoGx7ooq2MFskSJ0FIRXFMB8GA1UdIwQY
MBaAFNSgB+0v4I1DPg8KAvQ8p6yyb1oOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgt
YzJiODFjZTk4YzZkLzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84NmNlYjgtNDE4OC00YjZjLThiZDgtYzJiODFjZTk4YzZk
LzEvMUtBSDdTX2dqVU0tRHdvQzlEeW5yTEp2V2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwp8u7Wa
kTtD4i4w0GLiz2B75Xdz3qgc3D15ZAdttFpvLJuMqzupkwHxmq/OU2qumV+TpNtV
LGHopPmSfZ3TAsNjwzLj4LAhnJiyI8Akm8aSojLN77imohdYLChDLZGKQV4g42kF
HSTmsIp1onJWdfXdXc/aIAyIO2BQXyywTV6f8sp543VbilyipDibmJ+xCZzwPx1Q
48e6vlkSVbqOzT+fcUIQZd0oxuJZt4CUZZVz+/OXo6UwUzr789o5SFngY2cURirx
5y2Y9cWTKSHywYY4tctGBOmfNHlqTJNuTrwCDDhOpXtkUEsSONm9yXKV42YyUGTd
NsfPgiVZDapnVQ==
-----END CERTIFICATE-----
Generated at Sun Nov 3 11:06:01 2024 by rpki-client on console-ams.rpki-client.org