Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
File:                     FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft (raw, json)
Hash identifier:          BTqEJTdOBkld75C78htaTnXna4eFp1ipy5aSfxuCEqo=
Subject key identifier:   B6:30:9E:67:D6:CE:BD:20:61:3D:A3:3F:02:73:24:A6:E8:B3:A5:40
Authority key identifier: 15:16:F9:14:FA:9A:0E:E0:F3:81:7C:4A:41:FA:78:31:5D:A6:F2:70
Certificate issuer:       /CN=1516f914fa9a0ee0f3817c4a41fa78315da6f270
Certificate serial:       019369D89BF57DBB1908434565F589CFE77C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
Manifest number:          092C
Signing time:             Tue 26 Nov 2024 19:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:23 +0000
Files and hashes:         1: FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl (hash: UbZPPyBBDjDn/yakOpCLw8lp6iAbxEhnl3ikFpVvWiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:9b:f5:7d:bb:19:08:43:45:65:f5:89:cf:e7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516f914fa9a0ee0f3817c4a41fa78315da6f270
        Validity
            Not Before: Nov 26 19:00:23 2024 GMT
            Not After : Nov 27 19:00:23 2024 GMT
        Subject: CN=b6309e67d6cebd20613da33f027324a6e8b3a540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:3b:e7:3f:32:30:1c:e3:35:ac:3d:6e:cf:
                    fb:13:e4:4f:6d:18:cb:1b:e4:9e:4f:dd:f0:ff:25:
                    19:65:a3:50:fc:b0:de:2c:59:b4:a4:33:aa:c9:13:
                    d6:7d:1f:04:8d:71:b3:b7:e1:ea:39:07:79:b8:cc:
                    70:6d:34:8f:e3:14:f5:b6:22:d1:df:15:d9:4e:98:
                    be:9c:1a:6a:11:de:59:fd:33:ff:30:6c:45:ad:41:
                    d3:1c:34:d9:c4:18:0f:ba:42:40:bc:39:c0:9a:86:
                    1f:eb:7e:42:67:09:2f:a2:8b:2d:f3:e6:7c:37:8a:
                    30:1e:a0:7f:4f:53:e0:4c:67:71:23:85:41:3a:b0:
                    b6:9c:4e:86:65:ae:02:e3:2a:ca:81:13:cf:a0:b6:
                    33:9b:f8:27:3e:68:8e:a2:1f:55:3b:19:2f:99:0c:
                    bd:54:0d:e8:be:35:28:45:0d:5f:f1:a3:97:1e:7e:
                    82:94:7f:a4:17:31:be:f7:24:72:58:12:06:30:ef:
                    9f:88:5b:ce:ba:ba:5b:24:c0:66:5c:a9:b1:4a:a0:
                    ec:5b:2f:5f:d7:54:1d:3b:5f:0c:83:76:f3:fc:96:
                    68:0f:36:b7:a6:8d:5b:6f:f1:ae:23:9d:81:d8:17:
                    e9:a9:82:d8:73:31:0d:a9:40:24:a7:a6:2c:fc:bd:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:9E:67:D6:CE:BD:20:61:3D:A3:3F:02:73:24:A6:E8:B3:A5:40
            X509v3 Authority Key Identifier:
                keyid:15:16:F9:14:FA:9A:0E:E0:F3:81:7C:4A:41:FA:78:31:5D:A6:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRb5FPqaDuDzgXxKQfp4MV2m8nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fa2b6c-e7f9-47f4-8dbd-7df7570c0c4c/1/FRb5FPqaDuDzgXxKQfp4MV2m8nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:97:2b:19:1a:6d:be:ae:96:71:33:45:27:b3:ca:6b:6d:1b:
         12:be:b9:47:45:0b:1c:f2:07:31:30:55:bb:78:64:d4:d0:fd:
         30:00:9c:07:bf:41:17:e2:82:ff:e2:f0:09:e1:d6:bf:02:49:
         37:82:8c:24:d6:de:07:36:4f:a8:5e:7c:b4:b5:75:50:d1:53:
         24:9f:54:31:db:23:19:72:ee:46:89:6a:32:ac:27:b4:3c:a2:
         a9:56:5f:ba:0b:d5:6b:6b:8f:f7:25:d1:e5:fe:28:6e:b3:0d:
         1e:f8:59:8d:71:1a:9a:94:bd:bc:fe:81:a4:a6:71:25:ca:f6:
         7f:a1:52:5a:75:80:88:1c:6d:0e:78:45:77:c0:7c:91:25:fa:
         ea:f0:34:b8:27:a8:9e:c9:39:61:a4:cf:a7:0d:1f:16:87:00:
         8e:01:9f:fe:ec:ac:3a:e6:e3:75:da:e7:ae:e6:df:1c:b9:61:
         57:95:eb:b7:81:d5:eb:ce:ca:3f:d2:2f:24:80:2b:ce:c5:45:
         cb:a8:bb:4f:91:43:31:56:f6:a1:cf:e9:5a:60:64:2f:35:f6:
         8b:d5:00:dd:21:39:db:2c:50:a7:6d:81:2f:ed:2b:8f:51:f4:
         25:db:40:0a:85:ec:80:e0:8d:dc:d2:e9:ab:84:8c:5b:93:13:
         73:2a:58:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2Jv1fbsZCENFZfWJz+d8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTZmOTE0ZmE5YTBlZTBmMzgxN2M0YTQxZmE3ODMxNWRh
NmYyNzAwHhcNMjQxMTI2MTkwMDIzWhcNMjQxMTI3MTkwMDIzWjAzMTEwLwYDVQQD
EyhiNjMwOWU2N2Q2Y2ViZDIwNjEzZGEzM2YwMjczMjRhNmU4YjNhNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkI75z8yMBzjNaw9bs/7E+RPbRjL
G+SeT93w/yUZZaNQ/LDeLFm0pDOqyRPWfR8EjXGzt+HqOQd5uMxwbTSP4xT1tiLR
3xXZTpi+nBpqEd5Z/TP/MGxFrUHTHDTZxBgPukJAvDnAmoYf635CZwkvoost8+Z8
N4owHqB/T1PgTGdxI4VBOrC2nE6GZa4C4yrKgRPPoLYzm/gnPmiOoh9VOxkvmQy9
VA3ovjUoRQ1f8aOXHn6ClH+kFzG+9yRyWBIGMO+fiFvOurpbJMBmXKmxSqDsWy9f
11QdO18Mg3bz/JZoDza3po1bb/GuI52B2BfpqYLYczENqUAkp6Ys/L0rtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYwnmfWzr0gYT2jPwJzJKbos6VAMB8GA1UdIwQY
MBaAFBUW+RT6mg7g84F8SkH6eDFdpvJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJiNUZQcWFEdUR6Z1h4S1FmcDRNVjJtOG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYTJiNmMtZTdmOS00N2Y0LThkYmQt
N2RmNzU3MGMwYzRjLzEvRlJiNUZQcWFEdUR6Z1h4S1FmcDRNVjJtOG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mYTJiNmMtZTdmOS00N2Y0LThkYmQtN2RmNzU3MGMwYzRj
LzEvRlJiNUZQcWFEdUR6Z1h4S1FmcDRNVjJtOG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpcrGRpt
vq6WcTNFJ7PKa20bEr65R0ULHPIHMTBVu3hk1ND9MACcB79BF+KC/+LwCeHWvwJJ
N4KMJNbeBzZPqF58tLV1UNFTJJ9UMdsjGXLuRolqMqwntDyiqVZfugvVa2uP9yXR
5f4obrMNHvhZjXEampS9vP6BpKZxJcr2f6FSWnWAiBxtDnhFd8B8kSX66vA0uCeo
nsk5YaTPpw0fFocAjgGf/uysOubjddrnrubfHLlhV5Xrt4HV687KP9IvJIArzsVF
y6i7T5FDMVb2oc/pWmBkLzX2i9UA3SE52yxQp22BL+0rj1H0JdtACoXsgOCN3NLp
q4SMW5MTcypYrQ==
-----END CERTIFICATE-----