Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File:                     DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier:          nWF+E+7jUwYyNATL9By0/m0h/KvjmRQCEnFtXCJl5hE=
Subject key identifier:   1A:87:C0:8D:46:19:EE:35:3A:6F:86:6D:56:0D:40:8F:D8:E6:0C:90
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer:       /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial:       019358780B0B50DBAFDE840179207962F6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:01:22 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:22 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:22 +0000
Files and hashes:         1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: 8rV+9cxR0bZrNTrffwxKL6m+lMrOZg/12cdc8lQxfs0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:0b:0b:50:db:af:de:84:01:79:20:79:62:f6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
        Validity
            Not Before: Nov 23 10:01:22 2024 GMT
            Not After : Nov 24 10:01:22 2024 GMT
        Subject: CN=1a87c08d4619ee353a6f866d560d408fd8e60c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:27:12:02:2a:94:2a:c8:db:9a:5b:e0:e2:
                    97:9e:47:f6:df:86:33:57:81:99:80:64:07:bf:58:
                    34:a0:00:93:18:0b:85:35:d9:62:81:04:fc:9f:b2:
                    d3:cf:95:25:51:40:14:d4:67:f2:67:e1:68:07:f2:
                    61:b3:2b:65:7c:83:9f:cd:44:67:cb:c2:d7:d0:64:
                    1f:af:ee:cd:b3:78:88:72:ca:2c:80:e7:1e:dc:50:
                    82:64:ff:76:df:d2:13:d6:a8:eb:ce:c7:d2:64:ac:
                    cf:2d:2f:b2:02:84:9f:ee:9b:fe:70:1e:04:6a:99:
                    f8:0f:06:92:b8:0f:da:38:59:5c:5b:fc:43:9b:7d:
                    4b:75:be:b0:ac:60:f7:e5:05:d4:b3:c0:3b:2c:94:
                    29:e0:ba:68:3e:50:25:e0:1e:e8:6f:f7:39:5e:7a:
                    08:be:72:53:72:d7:c3:a3:c5:a0:1c:d8:13:58:9f:
                    1f:89:20:e1:b7:dc:83:fb:1b:ad:ff:03:f9:56:32:
                    05:e0:cc:ff:d6:3b:28:3b:a4:87:cf:d6:86:f4:5d:
                    a6:e5:8b:15:8b:69:29:95:68:f4:a8:d4:5a:57:94:
                    70:55:f3:f4:f1:57:10:89:9e:ff:86:d3:6f:f3:aa:
                    b8:b0:63:da:49:61:88:39:22:ac:1c:21:30:5a:e4:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:C0:8D:46:19:EE:35:3A:6F:86:6D:56:0D:40:8F:D8:E6:0C:90
            X509v3 Authority Key Identifier:
                keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:87:1f:ad:f5:b8:97:df:bb:27:65:5d:40:86:98:fc:fb:d4:
         6f:1b:97:ae:7b:2f:af:f8:63:67:df:52:d7:3b:e7:fc:d8:44:
         27:52:ba:dc:08:ba:d4:5e:3b:ec:fe:97:cb:d8:5f:74:a4:01:
         e1:d8:21:6b:42:60:8f:ee:1e:d8:3b:69:e8:20:6e:32:7e:ae:
         26:08:53:c3:16:21:22:be:aa:87:b5:24:9b:db:f0:5b:0d:10:
         80:b0:1d:ee:84:b0:f0:f3:30:8b:46:2e:ca:33:96:92:8a:90:
         5f:3e:9b:10:7f:a7:50:08:f5:34:fa:0d:a5:cb:45:eb:8e:b2:
         70:ab:96:44:3b:04:5b:95:3a:b1:61:c5:77:92:5c:48:f9:fb:
         fa:55:d3:fe:49:80:d9:90:02:8c:b2:df:77:27:38:b1:72:39:
         14:c7:7d:0c:83:ad:61:c9:2b:e1:1c:d7:f5:ce:1c:32:3f:92:
         aa:af:fa:64:19:8c:33:80:be:5e:a0:67:93:94:a4:d2:a5:40:
         29:d3:a8:64:e9:01:a0:af:ae:3d:ed:0a:44:7c:95:48:f2:82:
         9b:09:4b:0a:ca:90:08:a5:6f:db:53:bd:c6:06:28:3c:33:4f:
         94:d9:13:ba:d5:25:2c:61:01:6d:fa:5f:35:d6:6a:e1:25:67:
         c5:bd:e6:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeAsLUNuv3oQBeSB5YvbSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZmYzNWY4ZDVhZDNkZWVhNTUxMDY1YjI0MDJiYjBkM2M4
ZDk1MTkwHhcNMjQxMTIzMTAwMTIyWhcNMjQxMTI0MTAwMTIyWjAzMTEwLwYDVQQD
EygxYTg3YzA4ZDQ2MTllZTM1M2E2Zjg2NmQ1NjBkNDA4ZmQ4ZTYwYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol0nEgIqlCrI25pb4OKXnkf234Yz
V4GZgGQHv1g0oACTGAuFNdligQT8n7LTz5UlUUAU1GfyZ+FoB/JhsytlfIOfzURn
y8LX0GQfr+7Ns3iIcsosgOce3FCCZP9239IT1qjrzsfSZKzPLS+yAoSf7pv+cB4E
apn4DwaSuA/aOFlcW/xDm31Ldb6wrGD35QXUs8A7LJQp4LpoPlAl4B7ob/c5XnoI
vnJTctfDo8WgHNgTWJ8fiSDht9yD+xut/wP5VjIF4Mz/1jsoO6SHz9aG9F2m5YsV
i2kplWj0qNRaV5RwVfP08VcQiZ7/htNv86q4sGPaSWGIOSKsHCEwWuRFEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqHwI1GGe41Om+GbVYNQI/Y5gyQMB8GA1UdIwQY
MBaAFAz/NfjVrT3upVEGWyQCuw08jZUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUt
ZTMzZjJiYWFiYzYwLzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUtZTMzZjJiYWFiYzYw
LzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYcfrfW4
l9+7J2VdQIaY/PvUbxuXrnsvr/hjZ99S1zvn/NhEJ1K63Ai61F477P6Xy9hfdKQB
4dgha0Jgj+4e2Dtp6CBuMn6uJghTwxYhIr6qh7Ukm9vwWw0QgLAd7oSw8PMwi0Yu
yjOWkoqQXz6bEH+nUAj1NPoNpctF646ycKuWRDsEW5U6sWHFd5JcSPn7+lXT/kmA
2ZACjLLfdyc4sXI5FMd9DIOtYckr4RzX9c4cMj+Sqq/6ZBmMM4C+XqBnk5Sk0qVA
KdOoZOkBoK+uPe0KRHyVSPKCmwlLCsqQCKVv21O9xgYoPDNPlNkTutUlLGEBbfpf
NdZq4SVnxb3mkg==
-----END CERTIFICATE-----