Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File:                     zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier:          pwUAkiAV4aNgiqNuvUdFQ7uP8zk3FQONecJTV5xuPi4=
Subject key identifier:   6C:6C:32:41:87:7D:65:80:31:02:36:1E:A5:52:EB:DF:52:98:EA:0D
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer:       /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial:       019369D975960D59C067D01F4309324538B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number:          0976
Signing time:             Tue 26 Nov 2024 19:01:19 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:19 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:19 +0000
Files and hashes:         1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: jMsov2PmtUHdB0enaRHtRsLbLLWUuFU7gLfU0Xiko1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:75:96:0d:59:c0:67:d0:1f:43:09:32:45:38:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
        Validity
            Not Before: Nov 26 19:01:19 2024 GMT
            Not After : Nov 27 19:01:19 2024 GMT
        Subject: CN=6c6c3241877d65803102361ea552ebdf5298ea0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:7c:ee:30:52:40:c0:7a:03:07:eb:76:96:
                    65:28:fb:8f:ec:ba:06:05:6c:30:31:e2:75:b9:d5:
                    48:bb:a8:f2:61:40:d2:f9:ce:4b:de:4b:3c:bb:64:
                    59:00:47:bc:47:ef:45:f4:54:6a:d9:48:50:17:63:
                    a4:a2:21:a9:60:e6:01:97:98:cd:35:ae:93:8e:f6:
                    4d:40:8f:66:2b:ec:48:12:7f:41:39:b8:45:4c:e3:
                    74:ba:79:e6:06:ee:2d:f4:b7:70:0d:18:07:bc:b1:
                    03:43:35:fe:82:11:d6:3f:fd:50:53:73:57:10:55:
                    9b:b1:5b:03:ca:82:f5:1c:11:d2:2c:00:ff:5d:53:
                    9c:b2:5f:4c:4c:85:3b:68:c4:2c:e1:13:c9:15:41:
                    d9:fd:3c:69:b5:59:84:b0:4f:90:b5:2b:3b:a8:2a:
                    c1:3a:ab:f9:bc:d5:1e:12:a5:e4:1a:37:dc:74:0e:
                    3c:dd:a8:c0:69:8b:96:21:f8:8a:6d:40:32:38:07:
                    3c:de:9d:4e:ad:ff:cb:2b:32:3f:52:4e:1c:c8:c3:
                    c5:6e:71:c7:c8:c6:0d:22:07:d9:d0:c7:ec:ea:2e:
                    8e:c3:7d:28:b0:10:57:e4:3c:7c:5d:1d:8a:e7:69:
                    6c:0a:8d:58:ef:41:ab:d4:dc:b1:3d:d0:0f:7d:a7:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6C:32:41:87:7D:65:80:31:02:36:1E:A5:52:EB:DF:52:98:EA:0D
            X509v3 Authority Key Identifier:
                keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ce:f6:2f:3f:0e:f3:e7:8c:49:67:59:27:fb:a5:d5:1e:5f:
         43:ec:68:21:1b:03:f2:fa:f7:62:11:fd:fd:87:49:46:85:45:
         e2:2c:7b:ab:44:c9:1f:5a:e1:b9:a2:ff:d2:78:1a:81:e9:d8:
         c2:0b:8c:d9:3d:4b:ab:65:29:55:64:bd:11:2d:5e:66:c5:61:
         05:64:80:42:b9:27:6d:e4:2e:1e:38:99:9b:bb:88:24:a3:f3:
         85:50:60:03:22:70:5a:c9:5f:62:75:57:c8:9d:69:8f:d2:54:
         f9:2c:d0:52:53:cf:ce:3b:bb:bb:81:80:0b:00:3a:20:49:c9:
         21:8e:bd:f5:f6:ad:3a:f4:f3:c0:e1:d2:ab:62:d1:f6:7b:b6:
         a5:c7:3b:3e:10:78:b5:7d:40:92:93:e1:ad:bf:94:74:53:c0:
         07:0e:b1:c0:46:75:33:71:b4:2a:31:ad:51:ad:c8:51:cd:d2:
         5a:1b:1c:fe:f1:76:8f:f5:63:87:98:4e:2b:5c:5c:89:0a:81:
         10:ce:50:ce:97:94:9c:0b:2e:06:61:9b:18:8b:70:ae:82:32:
         fb:c3:60:6d:11:da:6c:ca:a8:0b:f5:9c:3c:ac:e8:e5:49:79:
         f0:3d:a6:60:c1:d9:fd:2f:56:c7:83:ce:3b:e7:06:61:0e:06:
         cd:18:49:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2XWWDVnAZ9AfQwkyRTi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRkYjM3MzA4NWUyOGMwZDliNzRiZTdiOGU4OTc0MGI5
NWY5ZmEwHhcNMjQxMTI2MTkwMTE5WhcNMjQxMTI3MTkwMTE5WjAzMTEwLwYDVQQD
Eyg2YzZjMzI0MTg3N2Q2NTgwMzEwMjM2MWVhNTUyZWJkZjUyOThlYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp987jBSQMB6AwfrdpZlKPuP7LoG
BWwwMeJ1udVIu6jyYUDS+c5L3ks8u2RZAEe8R+9F9FRq2UhQF2OkoiGpYOYBl5jN
Na6TjvZNQI9mK+xIEn9BObhFTON0unnmBu4t9LdwDRgHvLEDQzX+ghHWP/1QU3NX
EFWbsVsDyoL1HBHSLAD/XVOcsl9MTIU7aMQs4RPJFUHZ/TxptVmEsE+QtSs7qCrB
Oqv5vNUeEqXkGjfcdA483ajAaYuWIfiKbUAyOAc83p1Orf/LKzI/Uk4cyMPFbnHH
yMYNIgfZ0Mfs6i6Ow30osBBX5Dx8XR2K52lsCo1Y70Gr1NyxPdAPfafE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxsMkGHfWWAMQI2HqVS699SmOoNMB8GA1UdIwQY
MBaAFM8U2zcwheKMDZt0vnuOiXQLlfn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgt
MGExMzFmNjVjOTY4LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgtMGExMzFmNjVjOTY4
LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM72Lz8O
8+eMSWdZJ/ul1R5fQ+xoIRsD8vr3YhH9/YdJRoVF4ix7q0TJH1rhuaL/0ngagenY
wguM2T1Lq2UpVWS9ES1eZsVhBWSAQrknbeQuHjiZm7uIJKPzhVBgAyJwWslfYnVX
yJ1pj9JU+SzQUlPPzju7u4GACwA6IEnJIY699fatOvTzwOHSq2LR9nu2pcc7PhB4
tX1AkpPhrb+UdFPABw6xwEZ1M3G0KjGtUa3IUc3SWhsc/vF2j/Vjh5hOK1xciQqB
EM5QzpeUnAsuBmGbGItwroIy+8NgbRHabMqoC/WcPKzo5Ul58D2mYMHZ/S9Wx4PO
O+cGYQ4GzRhJ8Q==
-----END CERTIFICATE-----