Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File:                     q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier:          VqY9oiBPy5DzM6Vo4e5UIp71352ut+GwtXsLQbeHAC8=
Subject key identifier:   26:00:85:29:84:99:83:69:14:4F:EB:A1:CB:43:9C:B0:6A:62:43:E3
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer:       /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial:       019358784579F015443026C8BFA86E6A3F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number:          060E
Signing time:             Sat 23 Nov 2024 10:01:37 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:37 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:37 +0000
Files and hashes:         1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: yQbSNnWX2cK6AlheiBX1qhga3yjPL7bpKh8UQbFeUX0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:45:79:f0:15:44:30:26:c8:bf:a8:6e:6a:3f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
        Validity
            Not Before: Nov 23 10:01:37 2024 GMT
            Not After : Nov 24 10:01:37 2024 GMT
        Subject: CN=2600852984998369144feba1cb439cb06a6243e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:c9:a5:dc:69:49:39:2b:a9:d7:bd:e1:15:
                    11:45:76:12:e8:60:ae:53:9b:2e:79:c3:52:a5:37:
                    c5:c1:d9:e3:2d:75:77:68:5f:66:96:66:69:67:a1:
                    4b:78:7f:d4:44:cb:3a:ff:3d:b7:e7:b7:13:9c:5d:
                    24:68:61:92:a9:0a:4b:9f:ba:0e:5c:19:74:43:e9:
                    8a:7d:1e:e8:55:3a:c0:bb:be:84:d2:83:05:fe:73:
                    fc:17:73:23:98:71:1b:bf:34:69:1e:72:ea:14:3e:
                    7c:5b:d3:10:de:e5:94:62:af:99:03:05:fd:f6:09:
                    2d:48:ee:7e:61:82:09:42:50:d4:14:0f:58:70:c3:
                    a5:9f:89:82:a0:24:b8:33:ec:5f:66:f4:d9:cb:8d:
                    04:3c:fc:b5:68:6a:56:b9:f6:7d:67:55:a1:0e:3d:
                    db:27:5c:06:9c:62:6d:98:ab:9d:10:ff:15:69:26:
                    72:52:24:3c:cf:ca:84:e0:55:96:f9:0d:07:3f:14:
                    0a:73:98:a7:23:45:ea:53:0a:71:ac:7d:9f:13:19:
                    7f:aa:1a:d5:40:51:43:89:05:42:95:72:64:8f:72:
                    4d:86:d1:d2:da:70:d6:cd:27:4f:af:f5:dd:50:82:
                    5b:91:d9:be:27:97:c2:b8:91:86:07:de:44:85:82:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:00:85:29:84:99:83:69:14:4F:EB:A1:CB:43:9C:B0:6A:62:43:E3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4a:59:3a:f0:e9:6f:dd:d6:84:06:aa:3f:a4:c4:6d:33:88:
         a5:08:d1:f9:82:69:ae:71:43:6a:2c:d4:f7:9f:9d:a5:31:72:
         44:62:48:05:31:00:dd:14:2d:ed:36:a4:e3:70:74:28:a5:c0:
         49:87:42:fe:42:c6:72:14:e4:35:cf:b2:b7:a4:23:e5:70:6e:
         4f:2d:cf:4e:73:90:5b:d7:14:32:33:c4:12:e7:d4:61:b3:b6:
         97:c9:5f:21:75:cd:eb:3e:41:3d:09:18:fc:52:95:f3:04:b8:
         4b:4e:77:91:e3:93:3c:ee:5d:fa:53:4f:27:70:c6:9a:d2:2d:
         ac:e6:7f:65:57:d6:46:4f:f3:64:df:bd:7b:41:eb:2b:76:0e:
         ae:05:63:b3:0f:46:63:01:6d:fc:9f:f8:08:9c:c5:ae:7a:66:
         d5:20:c3:df:55:1b:27:03:69:38:2f:52:79:fe:7a:6e:67:1c:
         73:47:32:27:38:51:1e:aa:7d:8e:68:e0:5b:41:2b:dc:ce:7b:
         98:59:62:77:0e:20:f0:55:7f:db:9b:2a:df:fe:81:56:55:29:
         77:84:e6:91:56:a4:18:3f:27:24:a0:bf:be:03:98:68:6a:65:
         53:ba:fb:c6:10:3f:bd:7a:1a:60:8d:2c:21:88:e3:f9:4e:71:
         c8:00:d8:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeEV58BVEMCbIv6huaj+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNWMxYWQ4ZGQ3OTIyYTQ1YTJjYzc0ODFlZmUwMWRkNDMz
MDA2YzIwHhcNMjQxMTIzMTAwMTM3WhcNMjQxMTI0MTAwMTM3WjAzMTEwLwYDVQQD
EygyNjAwODUyOTg0OTk4MzY5MTQ0ZmViYTFjYjQzOWNiMDZhNjI0M2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGTJpdxpSTkrqde94RURRXYS6GCu
U5suecNSpTfFwdnjLXV3aF9mlmZpZ6FLeH/URMs6/z2357cTnF0kaGGSqQpLn7oO
XBl0Q+mKfR7oVTrAu76E0oMF/nP8F3MjmHEbvzRpHnLqFD58W9MQ3uWUYq+ZAwX9
9gktSO5+YYIJQlDUFA9YcMOln4mCoCS4M+xfZvTZy40EPPy1aGpWufZ9Z1WhDj3b
J1wGnGJtmKudEP8VaSZyUiQ8z8qE4FWW+Q0HPxQKc5inI0XqUwpxrH2fExl/qhrV
QFFDiQVClXJkj3JNhtHS2nDWzSdPr/XdUIJbkdm+J5fCuJGGB95EhYIBBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYAhSmEmYNpFE/roctDnLBqYkPjMB8GA1UdIwQY
MBaAFKtcGtjdeSKkWizHSB7+Ad1DMAbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYt
Y2JhOGM4YTU0NTNlLzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYtY2JhOGM4YTU0NTNl
LzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUpZOvDp
b93WhAaqP6TEbTOIpQjR+YJprnFDaizU95+dpTFyRGJIBTEA3RQt7Tak43B0KKXA
SYdC/kLGchTkNc+yt6Qj5XBuTy3PTnOQW9cUMjPEEufUYbO2l8lfIXXN6z5BPQkY
/FKV8wS4S053keOTPO5d+lNPJ3DGmtItrOZ/ZVfWRk/zZN+9e0HrK3YOrgVjsw9G
YwFt/J/4CJzFrnpm1SDD31UbJwNpOC9Sef56bmccc0cyJzhRHqp9jmjgW0Er3M57
mFlidw4g8FV/25sq3/6BVlUpd4TmkVakGD8nJKC/vgOYaGplU7r7xhA/vXoaYI0s
IYjj+U5xyADYqA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:30 2024 by rpki-client on console-ams.rpki-client.org