Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
File:                     PbZurh7_N8XOflhyiwFuSR2sJqo.mft (raw, json)
Hash identifier:          fKKfwV1Z5muV2Oggi0XoWOTgTrWS4lxprlps/gAUZYs=
Subject key identifier:   ED:7B:D2:9E:FE:63:1C:13:4B:F2:83:22:90:BA:C6:FC:B4:0F:8D:7B
Authority key identifier: 3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
Certificate issuer:       /CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Certificate serial:       01935689FED372C045F4E015AE71480F50C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
Manifest number:          07B4
Signing time:             Sat 23 Nov 2024 01:01:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:44 +0000
Files and hashes:         1: PbZurh7_N8XOflhyiwFuSR2sJqo.crl (hash: Km4U4EDTjHsWEr7SgCFwJEI+m1YKeVzi/IlyMmMJ2GE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:fe:d3:72:c0:45:f4:e0:15:ae:71:48:0f:50:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
        Validity
            Not Before: Nov 23 01:01:44 2024 GMT
            Not After : Nov 24 01:01:44 2024 GMT
        Subject: CN=ed7bd29efe631c134bf2832290bac6fcb40f8d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:c8:af:4e:34:46:d1:ec:ea:b3:62:67:13:
                    60:1e:46:49:66:b9:94:fb:79:31:b2:1c:8b:dc:0a:
                    13:cf:8a:a9:ad:23:4d:c9:67:bc:ae:23:30:a3:5b:
                    24:c5:90:b8:76:d7:97:13:97:6f:f3:50:da:a8:5d:
                    90:0c:b5:0e:8f:fe:fd:4b:74:eb:c0:aa:20:0b:f5:
                    3b:f6:8b:d6:95:25:a2:72:fc:4a:cc:66:05:31:c5:
                    70:13:c1:9d:3c:48:db:85:c5:2f:bb:b3:56:98:2b:
                    b7:a6:26:9c:51:11:3e:ef:ab:f5:dd:31:a4:a1:b8:
                    f6:ff:23:4e:c1:d3:2e:01:d3:9c:26:e7:62:00:a7:
                    04:47:19:64:1b:43:42:e8:0a:59:09:de:7b:d5:8f:
                    99:d9:fb:29:3c:f6:17:c0:4e:03:8f:e3:07:00:d5:
                    58:ae:ae:7e:3a:bf:bf:85:2c:e5:70:2b:40:d0:b1:
                    e7:2d:eb:17:00:08:60:8a:9b:89:f2:19:01:21:a3:
                    85:55:98:be:c4:ff:1b:ac:14:f4:9f:6e:da:84:ca:
                    4e:ce:17:b5:2d:6a:af:4e:c3:49:dd:44:43:75:0e:
                    0e:a6:55:b3:a8:c5:9b:d6:d5:13:eb:bc:22:7b:65:
                    42:7e:3a:6b:e7:eb:61:da:a2:04:28:f9:78:50:54:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7B:D2:9E:FE:63:1C:13:4B:F2:83:22:90:BA:C6:FC:B4:0F:8D:7B
            X509v3 Authority Key Identifier:
                keyid:3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:0f:05:b4:0b:ae:51:7f:c4:a4:3e:c0:1b:e3:71:51:a5:
         cc:eb:3e:9c:94:1f:24:f0:14:18:41:60:bf:9d:bc:d2:15:52:
         88:27:cf:79:fa:28:c0:a1:31:d4:8c:34:2a:b1:c8:1e:21:8c:
         00:54:d8:a6:20:a2:f1:00:af:6e:94:29:9f:f1:11:79:37:58:
         36:1b:ea:0e:ed:87:71:54:46:9f:33:57:d4:b9:98:68:cf:8a:
         be:e5:30:24:4f:d0:da:54:4c:93:3d:07:45:3d:40:7b:ed:cb:
         99:21:68:b9:4b:1f:28:cc:14:62:b7:e9:aa:28:e8:39:82:0c:
         63:3b:c1:aa:92:ac:ce:a6:c6:11:e9:66:19:dd:85:b8:0f:17:
         37:90:df:0e:11:36:97:ff:3a:f1:87:d5:13:47:2e:49:cc:eb:
         a2:8d:b6:66:e1:18:2c:53:e1:0e:8b:48:24:55:5c:78:05:99:
         43:27:5b:35:9a:80:bc:c9:26:f2:77:9b:90:96:6a:0d:a5:57:
         da:57:51:a1:f0:23:6b:13:cf:65:05:31:d9:89:a7:82:5c:7e:
         34:cd:30:71:7d:c4:e9:41:f4:4c:8c:1a:63:ec:1e:de:ca:d9:
         e3:18:e9:c9:34:e1:d0:34:6d:9e:67:85:7d:65:82:8c:ad:c7:
         5d:64:33:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWif7TcsBF9OAVrnFID1DJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjY2ZWFlMWVmZjM3YzVjZTdlNTg3MjhiMDE2ZTQ5MWRh
YzI2YWEwHhcNMjQxMTIzMDEwMTQ0WhcNMjQxMTI0MDEwMTQ0WjAzMTEwLwYDVQQD
EyhlZDdiZDI5ZWZlNjMxYzEzNGJmMjgzMjI5MGJhYzZmY2I0MGY4ZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0HIr040RtHs6rNiZxNgHkZJZrmU
+3kxshyL3AoTz4qprSNNyWe8riMwo1skxZC4dteXE5dv81DaqF2QDLUOj/79S3Tr
wKogC/U79ovWlSWicvxKzGYFMcVwE8GdPEjbhcUvu7NWmCu3piacURE+76v13TGk
obj2/yNOwdMuAdOcJudiAKcERxlkG0NC6ApZCd571Y+Z2fspPPYXwE4Dj+MHANVY
rq5+Or+/hSzlcCtA0LHnLesXAAhgipuJ8hkBIaOFVZi+xP8brBT0n27ahMpOzhe1
LWqvTsNJ3URDdQ4OplWzqMWb1tUT67wie2VCfjpr5+th2qIEKPl4UFREdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO170p7+YxwTS/KDIpC6xvy0D417MB8GA1UdIwQY
MBaAFD22bq4e/zfFzn5YcosBbkkdrCaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85YzUwZTUtYjFkMC00Yzc4LThkZTYt
ZTcxNmM5OGNhNWY3LzEvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85YzUwZTUtYjFkMC00Yzc4LThkZTYtZTcxNmM5OGNhNWY3
LzEvUGJadXJoN19OOFhPZmxoeWl3RnVTUjJzSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD8PBbQL
rlF/xKQ+wBvjcVGlzOs+nJQfJPAUGEFgv5280hVSiCfPefoowKEx1Iw0KrHIHiGM
AFTYpiCi8QCvbpQpn/EReTdYNhvqDu2HcVRGnzNX1LmYaM+KvuUwJE/Q2lRMkz0H
RT1Ae+3LmSFouUsfKMwUYrfpqijoOYIMYzvBqpKszqbGEelmGd2FuA8XN5DfDhE2
l/868YfVE0cuSczroo22ZuEYLFPhDotIJFVceAWZQydbNZqAvMkm8nebkJZqDaVX
2ldRofAjaxPPZQUx2Ymnglx+NM0wcX3E6UH0TIwaY+we3srZ4xjpyTTh0DRtnmeF
fWWCjK3HXWQzxA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:04 2024 by rpki-client on console-fra.rpki-client.org