Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
File:                     8L_9ke3QeSGPdPosV29kAINLQ2U.mft (raw, json)
Hash identifier:          UCZlAZGgRo9wjGzmViTmkUXoG1ihtvWkOSkKmSE3tkU=
Subject key identifier:   B8:FE:F7:B2:35:CD:49:C6:0B:CC:A8:CF:55:DE:57:20:D8:E6:06:11
Authority key identifier: F0:BF:FD:91:ED:D0:79:21:8F:74:FA:2C:57:6F:64:00:83:4B:43:65
Certificate issuer:       /CN=f0bffd91edd079218f74fa2c576f6400834b4365
Certificate serial:       019405D7EFFB4A6DCEA119404C3887CBAAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8L_9ke3QeSGPdPosV29kAINLQ2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
Manifest number:          2F
Signing time:             Fri 27 Dec 2024 02:00:25 +0000
Manifest this update:     Fri 27 Dec 2024 02:00:25 +0000
Manifest next update:     Sat 28 Dec 2024 02:00:25 +0000
Files and hashes:         1: 8L_9ke3QeSGPdPosV29kAINLQ2U.crl (hash: sTS0b5l0m7N1fKTwQMG+A8t97caIihoVY1NOKrsZIqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8L_9ke3QeSGPdPosV29kAINLQ2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:d7:ef:fb:4a:6d:ce:a1:19:40:4c:38:87:cb:aa:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0bffd91edd079218f74fa2c576f6400834b4365
        Validity
            Not Before: Dec 27 02:00:25 2024 GMT
            Not After : Dec 28 02:00:25 2024 GMT
        Subject: CN=b8fef7b235cd49c60bcca8cf55de5720d8e60611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:6e:b1:f7:7b:fc:9b:ab:8e:f9:e0:51:c0:
                    aa:9b:34:db:a6:b0:f8:c7:12:e6:ec:08:0f:d2:90:
                    c7:c2:39:8c:8a:f5:0a:fd:2d:d6:79:5e:30:22:6e:
                    46:73:ef:57:dc:15:26:b3:fa:7f:8e:00:4b:08:34:
                    a4:73:e0:98:8c:05:5d:21:54:4f:f3:14:93:88:dc:
                    55:bc:a3:1a:b8:8f:68:a1:45:d8:68:26:96:fb:96:
                    1b:b9:56:48:37:f4:16:40:18:ef:9c:ce:6c:df:95:
                    cb:ba:9e:c8:bf:5a:b4:84:4d:0d:74:2b:3f:4d:fb:
                    6f:da:8a:3f:72:23:bd:94:6a:62:84:71:20:9b:86:
                    17:62:d6:8f:51:07:49:ab:a1:82:76:29:07:6a:93:
                    68:76:30:f1:57:ae:3d:74:64:ca:37:19:8d:7c:99:
                    b5:71:97:2a:ae:21:b3:3e:c6:e7:83:5d:55:ec:c7:
                    01:6f:c7:29:da:21:e2:ab:25:1e:52:8f:8e:67:c6:
                    24:65:a3:d1:03:9e:54:0f:73:ed:8b:6f:2c:01:27:
                    c8:ab:af:07:e0:ac:0e:ad:0f:93:ea:f2:ac:44:55:
                    d3:2b:69:66:f0:dd:03:ee:9b:61:d5:51:08:2e:6e:
                    af:4e:9f:0f:ad:d5:9f:19:c3:0e:78:9e:cb:4f:f4:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FE:F7:B2:35:CD:49:C6:0B:CC:A8:CF:55:DE:57:20:D8:E6:06:11
            X509v3 Authority Key Identifier:
                keyid:F0:BF:FD:91:ED:D0:79:21:8F:74:FA:2C:57:6F:64:00:83:4B:43:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L_9ke3QeSGPdPosV29kAINLQ2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a6892c-61bc-48df-b65f-3e6344566e04/1/8L_9ke3QeSGPdPosV29kAINLQ2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:6f:d6:2f:cd:52:8d:94:d6:29:7a:16:f0:dc:0f:6e:1a:
         c0:ce:a0:15:df:0b:e4:24:41:92:94:7f:e0:93:07:b9:f6:b5:
         44:5f:95:94:e4:3f:48:06:41:90:82:98:59:d3:e6:18:3a:c5:
         b1:03:16:e2:91:ad:58:79:c3:e5:36:08:6d:0f:d1:69:c1:73:
         b6:3a:f2:5b:e9:80:c3:55:47:4f:6d:4c:47:45:cd:30:54:5f:
         4e:80:fb:ec:fa:c7:36:a4:cd:c1:be:35:37:07:40:50:e7:d6:
         b0:f7:b1:da:13:ca:5b:33:18:36:ca:ec:8f:7d:2b:7f:3e:65:
         72:94:41:ec:7e:b8:06:ec:d9:3d:ae:7a:8d:d6:a9:5f:4c:55:
         16:25:08:cf:2d:4d:61:0e:c1:a9:ff:e9:9c:ed:6a:64:5b:49:
         2b:81:cf:d6:39:79:a2:69:b2:02:8f:4d:41:28:f6:95:42:89:
         92:b5:b4:72:4b:9b:f8:14:a7:fb:f4:f5:e5:e8:4e:a5:ee:20:
         2d:71:54:41:bb:8d:51:01:ef:d6:42:c6:e7:86:29:47:09:8c:
         32:a7:59:f5:7a:2d:bf:5a:cb:e2:04:2c:07:02:89:58:4a:9b:
         a1:00:de:ca:18:c1:73:d9:41:f5:98:d5:88:6d:5b:8c:06:6b:
         b6:07:a3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQF1+/7Sm3OoRlATDiHy6q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYmZmZDkxZWRkMDc5MjE4Zjc0ZmEyYzU3NmY2NDAwODM0
YjQzNjUwHhcNMjQxMjI3MDIwMDI1WhcNMjQxMjI4MDIwMDI1WjAzMTEwLwYDVQQD
EyhiOGZlZjdiMjM1Y2Q0OWM2MGJjY2E4Y2Y1NWRlNTcyMGQ4ZTYwNjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTtusfd7/JurjvngUcCqmzTbprD4
xxLm7AgP0pDHwjmMivUK/S3WeV4wIm5Gc+9X3BUms/p/jgBLCDSkc+CYjAVdIVRP
8xSTiNxVvKMauI9ooUXYaCaW+5YbuVZIN/QWQBjvnM5s35XLup7Iv1q0hE0NdCs/
Tftv2oo/ciO9lGpihHEgm4YXYtaPUQdJq6GCdikHapNodjDxV649dGTKNxmNfJm1
cZcqriGzPsbng11V7McBb8cp2iHiqyUeUo+OZ8YkZaPRA55UD3Pti28sASfIq68H
4KwOrQ+T6vKsRFXTK2lm8N0D7pth1VEILm6vTp8PrdWfGcMOeJ7LT/SveQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj+97I1zUnGC8yoz1XeVyDY5gYRMB8GA1UdIwQY
MBaAFPC//ZHt0Hkhj3T6LFdvZACDS0NlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOExfOWtlM1FlU0dQZFBvc1YyOWtBSU5MUTJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNjg5MmMtNjFiYy00OGRmLWI2NWYt
M2U2MzQ0NTY2ZTA0LzEvOExfOWtlM1FlU0dQZFBvc1YyOWtBSU5MUTJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNjg5MmMtNjFiYy00OGRmLWI2NWYtM2U2MzQ0NTY2ZTA0
LzEvOExfOWtlM1FlU0dQZFBvc1YyOWtBSU5MUTJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj5v1i/N
Uo2U1il6FvDcD24awM6gFd8L5CRBkpR/4JMHufa1RF+VlOQ/SAZBkIKYWdPmGDrF
sQMW4pGtWHnD5TYIbQ/RacFztjryW+mAw1VHT21MR0XNMFRfToD77PrHNqTNwb41
NwdAUOfWsPex2hPKWzMYNsrsj30rfz5lcpRB7H64BuzZPa56jdapX0xVFiUIzy1N
YQ7Bqf/pnO1qZFtJK4HP1jl5ommyAo9NQSj2lUKJkrW0ckub+BSn+/T15ehOpe4g
LXFUQbuNUQHv1kLG54YpRwmMMqdZ9Xotv1rL4gQsBwKJWEqboQDeyhjBc9lB9ZjV
iG1bjAZrtgej3g==
-----END CERTIFICATE-----