Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File:                     2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier:          XN3yQButFe5KdH4nPfbwpaSADTzGzm3ohbtwHIZUYGQ=
Subject key identifier:   49:2F:58:B9:6A:F6:29:86:23:E5:04:A4:54:B1:9B:2C:5A:0A:7B:CB
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer:       /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial:       01933245DFC77FF90328B681743D7A04DE61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number:          05C8
Signing time:             Sat 16 Nov 2024 00:01:00 +0000
Manifest this update:     Sat 16 Nov 2024 00:01:00 +0000
Manifest next update:     Sun 17 Nov 2024 00:01:00 +0000
Files and hashes:         1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: mHoIQ+mlcHfam11ShPvXbzwS2kgNp/10xMvTwjGAcEM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:32:45:df:c7:7f:f9:03:28:b6:81:74:3d:7a:04:de:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
        Validity
            Not Before: Nov 16 00:01:00 2024 GMT
            Not After : Nov 17 00:01:00 2024 GMT
        Subject: CN=492f58b96af6298623e504a454b19b2c5a0a7bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:e6:bb:ee:57:89:c3:aa:6a:10:df:34:a6:
                    ed:75:75:79:4c:dd:14:6a:6a:39:6d:48:a4:cf:bb:
                    ae:d4:ad:b9:33:ca:5d:e2:55:d1:64:0c:61:a8:6f:
                    32:a5:c1:a1:ba:b5:af:a2:d9:bb:95:60:ac:b8:38:
                    6a:9e:8c:d4:e3:d8:e3:b2:b7:9f:5f:17:97:af:d9:
                    dd:6c:94:a5:51:a4:55:30:48:4e:8f:60:ff:e2:46:
                    b7:c4:4d:b5:b5:05:84:da:22:92:d0:2f:91:a7:8b:
                    37:3f:0b:69:71:a0:43:b3:05:b8:5e:cc:5d:71:ee:
                    0f:a8:02:1a:54:da:a3:12:69:d7:02:f1:77:9f:01:
                    e4:d6:48:b9:a5:ea:26:f8:e0:71:b3:e7:d0:b1:31:
                    8b:31:0a:2c:06:90:33:ef:73:80:12:d4:3b:a3:7c:
                    f6:6a:de:bb:12:e0:2e:13:24:2f:69:9c:25:86:4b:
                    00:bc:46:6d:06:1d:05:31:dc:0f:0c:82:da:7d:17:
                    d0:80:d9:88:53:32:70:ca:7b:61:a9:79:79:69:28:
                    03:67:38:c8:1b:ea:88:1d:3e:de:a7:9f:01:28:62:
                    f6:8a:0a:38:1c:ba:70:8c:ee:0d:4a:ff:90:43:64:
                    d6:4c:51:fb:88:0a:91:73:88:be:5c:f2:56:b8:8b:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:58:B9:6A:F6:29:86:23:E5:04:A4:54:B1:9B:2C:5A:0A:7B:CB
            X509v3 Authority Key Identifier:
                keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:17:7c:1a:35:fe:6e:d7:5d:f4:42:17:c6:2f:6c:0e:68:1d:
         b7:bc:df:71:bf:ef:4a:f7:8a:b7:83:16:f3:a7:d3:79:42:aa:
         2c:26:4a:30:64:0c:32:8b:19:cf:46:b7:b2:b7:e4:9f:db:11:
         95:ea:7a:bf:24:6f:bf:fd:70:57:f1:39:74:4f:1a:60:7b:b8:
         8e:39:2d:c0:32:8b:4d:91:6d:51:4a:0b:cb:d2:80:2b:69:64:
         bb:9d:aa:08:0b:10:af:36:9a:bb:7b:ec:49:77:60:ef:42:4d:
         6d:a2:86:1b:97:d9:46:87:86:d4:2c:5d:72:d2:a5:a4:5e:8f:
         af:93:bb:de:59:6e:73:72:c3:b8:e1:84:c6:02:6b:37:68:96:
         33:83:cb:34:22:87:20:87:32:6f:8e:e6:7b:0e:1c:32:72:db:
         74:83:47:89:6c:1a:a4:6d:fb:81:af:d3:57:d0:a5:68:7c:b4:
         4b:41:45:50:db:19:39:72:5a:41:cc:71:f8:7e:5b:8a:e8:14:
         88:b5:1e:6b:dc:35:cd:dc:84:e3:c3:34:c4:f0:56:a1:49:ee:
         49:6c:fd:9a:4c:7b:d3:ff:0d:a5:26:f9:65:63:38:a8:e4:b5:
         16:98:6f:03:a5:13:ff:d2:3f:92:1d:1a:f1:b2:68:15:26:1e:
         08:5f:02:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMyRd/Hf/kDKLaBdD16BN5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWNhZDdhOWYwYTA5YjNkNTRkYTZjZGNkZTc0MzEyZmFj
YzZkNzcwHhcNMjQxMTE2MDAwMTAwWhcNMjQxMTE3MDAwMTAwWjAzMTEwLwYDVQQD
Eyg0OTJmNThiOTZhZjYyOTg2MjNlNTA0YTQ1NGIxOWIyYzVhMGE3YmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPmu+5XicOqahDfNKbtdXV5TN0U
amo5bUikz7uu1K25M8pd4lXRZAxhqG8ypcGhurWvotm7lWCsuDhqnozU49jjsref
XxeXr9ndbJSlUaRVMEhOj2D/4ka3xE21tQWE2iKS0C+Rp4s3PwtpcaBDswW4Xsxd
ce4PqAIaVNqjEmnXAvF3nwHk1ki5peom+OBxs+fQsTGLMQosBpAz73OAEtQ7o3z2
at67EuAuEyQvaZwlhksAvEZtBh0FMdwPDILafRfQgNmIUzJwynthqXl5aSgDZzjI
G+qIHT7ep58BKGL2igo4HLpwjO4NSv+QQ2TWTFH7iAqRc4i+XPJWuItU+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkvWLlq9imGI+UEpFSxmyxaCnvLMB8GA1UdIwQY
MBaAFNgcrXqfCgmz1U2mzc3nQxL6zG13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZmVmMmYtYTc0OC00Nzk2LTk2YTAt
ZDNlYTcwN2M4ZjE4LzEvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZmVmMmYtYTc0OC00Nzk2LTk2YTAtZDNlYTcwN2M4ZjE4
LzEvMkJ5dGVwOEtDYlBWVGFiTnplZERFdnJNYlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxd8GjX+
btdd9EIXxi9sDmgdt7zfcb/vSveKt4MW86fTeUKqLCZKMGQMMosZz0a3srfkn9sR
lep6vyRvv/1wV/E5dE8aYHu4jjktwDKLTZFtUUoLy9KAK2lku52qCAsQrzaau3vs
SXdg70JNbaKGG5fZRoeG1CxdctKlpF6Pr5O73lluc3LDuOGExgJrN2iWM4PLNCKH
IIcyb47mew4cMnLbdINHiWwapG37ga/TV9ClaHy0S0FFUNsZOXJaQcxx+H5biugU
iLUea9w1zdyE48M0xPBWoUnuSWz9mkx70/8NpSb5ZWM4qOS1FphvA6UT/9I/kh0a
8bJoFSYeCF8CeQ==
-----END CERTIFICATE-----
Generated at Sat Nov 16 01:34:49 2024 by rpki-client on console-ams.rpki-client.org