Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          Y5pWoV08eOHEvSyPD/3a+GPlh6Tt2XGfgSJPTJZG3x8=
Subject key identifier:   3B:39:DE:1E:79:78:0B:08:C3:BE:92:E9:C9:A5:8A:F8:74:E7:DA:EC
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       019357650BE77B27C03B731C0DB1A86685DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          039D
Signing time:             Sat 23 Nov 2024 05:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 05:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 05:01:00 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: wxYfhFzEW9fb2R/ztMWekjZ4D7SQ7kgLO2XhKTbGa0I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:65:0b:e7:7b:27:c0:3b:73:1c:0d:b1:a8:66:85:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Nov 23 05:01:00 2024 GMT
            Not After : Nov 24 05:01:00 2024 GMT
        Subject: CN=3b39de1e79780b08c3be92e9c9a58af874e7daec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:60:ca:c9:05:8b:f0:29:f7:67:81:d0:92:
                    ff:55:89:3c:86:34:a2:5a:c9:5c:c4:ff:01:8e:e4:
                    bd:6d:a2:0e:42:c7:36:a2:e4:26:ba:30:da:98:e8:
                    43:0c:0c:90:eb:78:e1:87:d9:31:7b:4c:90:8f:ea:
                    8f:12:7c:9e:c3:6e:25:1d:c9:00:76:46:6c:5f:94:
                    50:4a:78:75:ba:3e:a6:53:e9:a7:f1:f2:e8:b5:01:
                    54:4c:4b:50:9a:5d:ce:6d:7a:cb:bb:30:0d:cf:d3:
                    01:21:ef:a1:19:a8:3d:05:1b:1e:21:9c:7f:79:97:
                    51:f7:c5:7f:91:f0:95:d6:42:5c:60:42:ad:1b:97:
                    0b:05:4c:df:5f:6e:3e:ea:92:26:2b:7a:53:2c:71:
                    bf:12:10:4a:33:3e:3a:2f:6d:4d:67:d0:99:ba:93:
                    48:2a:fd:be:05:8c:d4:d2:34:a7:d0:19:7c:41:97:
                    33:a0:a5:25:c8:b5:57:10:2a:d4:21:4d:61:d6:c4:
                    34:39:7e:34:09:9c:84:7f:5a:f2:5e:1b:60:ba:2e:
                    56:2b:79:a2:10:44:80:48:f0:c9:fc:fb:84:56:16:
                    37:9f:8f:bd:40:8f:57:fc:17:e2:5b:af:95:0d:62:
                    c1:66:4a:5c:0f:17:fd:18:13:2e:32:e3:54:ca:83:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:39:DE:1E:79:78:0B:08:C3:BE:92:E9:C9:A5:8A:F8:74:E7:DA:EC
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:dd:7f:22:05:fd:28:57:56:4b:00:44:6d:f2:04:df:cc:
         fc:0d:94:9d:2d:44:62:78:a4:ea:7e:d0:b8:e9:4b:45:d9:db:
         cc:af:6f:36:0a:a6:09:c5:20:9e:09:a5:fb:64:30:09:e8:b4:
         b8:21:b4:04:d9:ba:fe:90:89:7c:70:c4:2b:a9:42:58:aa:78:
         66:58:ff:c5:80:cc:75:0d:22:7d:7c:29:0b:c7:4b:8b:6e:ee:
         e0:9a:c4:6d:6d:40:1d:5f:55:46:f2:6d:b6:a6:61:c2:47:31:
         b9:26:ee:7e:a8:07:47:79:6a:01:77:8e:68:39:eb:d0:2e:fa:
         2d:45:84:32:f8:ca:95:0e:98:26:4f:72:f1:5d:47:5c:96:ab:
         7e:1f:07:5f:e0:ec:9f:75:20:c5:7c:33:a1:3c:82:17:34:04:
         c6:85:73:6c:9f:f7:43:53:68:22:ce:8f:ec:91:83:fa:28:2a:
         64:02:cd:3b:66:bf:fd:f0:41:03:0c:2c:b5:02:fd:27:d3:b4:
         ce:ac:2f:67:17:c6:eb:06:2a:29:af:e5:16:94:a6:f1:93:28:
         ee:4a:c9:f0:d5:87:66:74:fb:28:73:10:95:8d:7b:f8:f9:21:
         b7:bb:ea:a1:a7:ab:3f:be:05:37:88:06:91:87:2f:9f:81:64:
         88:1f:8b:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZQvneyfAO3McDbGoZoXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjc5Mzk2OWE2Yzg0ODNjYzM2Njc5MzQ0NTBmNjY3OGZk
MTk3NTgwHhcNMjQxMTIzMDUwMTAwWhcNMjQxMTI0MDUwMTAwWjAzMTEwLwYDVQQD
EygzYjM5ZGUxZTc5NzgwYjA4YzNiZTkyZTljOWE1OGFmODc0ZTdkYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj5gyskFi/Ap92eB0JL/VYk8hjSi
WslcxP8BjuS9baIOQsc2ouQmujDamOhDDAyQ63jhh9kxe0yQj+qPEnyew24lHckA
dkZsX5RQSnh1uj6mU+mn8fLotQFUTEtQml3ObXrLuzANz9MBIe+hGag9BRseIZx/
eZdR98V/kfCV1kJcYEKtG5cLBUzfX24+6pImK3pTLHG/EhBKMz46L21NZ9CZupNI
Kv2+BYzU0jSn0Bl8QZczoKUlyLVXECrUIU1h1sQ0OX40CZyEf1ryXhtgui5WK3mi
EESASPDJ/PuEVhY3n4+9QI9X/BfiW6+VDWLBZkpcDxf9GBMuMuNUyoPN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs53h55eAsIw76S6cmlivh059rsMB8GA1UdIwQY
MBaAFND3k5aabISDzDZnk0RQ9meP0ZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2Et
MGE3NTc0OWY3MTQ4LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2EtMGE3NTc0OWY3MTQ4
LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXHdfyIF
/ShXVksARG3yBN/M/A2UnS1EYnik6n7QuOlLRdnbzK9vNgqmCcUgngml+2QwCei0
uCG0BNm6/pCJfHDEK6lCWKp4Zlj/xYDMdQ0ifXwpC8dLi27u4JrEbW1AHV9VRvJt
tqZhwkcxuSbufqgHR3lqAXeOaDnr0C76LUWEMvjKlQ6YJk9y8V1HXJarfh8HX+Ds
n3UgxXwzoTyCFzQExoVzbJ/3Q1NoIs6P7JGD+igqZALNO2a//fBBAwwstQL9J9O0
zqwvZxfG6wYqKa/lFpSm8ZMo7krJ8NWHZnT7KHMQlY17+Pkht7vqoaerP74FN4gG
kYcvn4FkiB+LBg==
-----END CERTIFICATE-----