Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          EZkQe/QTG0LforFoUtwhaJwyWdfhEOIy6m8cFNxRv8M=
Subject key identifier:   EC:CF:28:65:E3:E4:63:CC:E8:45:AD:31:8B:10:BA:E1:A0:A7:D9:9D
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       019369D9F6F60DA256FA02075D863BDAE509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          044A
Signing time:             Tue 26 Nov 2024 19:01:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:52 +0000
Files and hashes:         1: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: aGwGIJZIfhmPQc/GkgIbf3CAvxP03/tikqGLt6iCA1Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:f6:f6:0d:a2:56:fa:02:07:5d:86:3b:da:e5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Nov 26 19:01:52 2024 GMT
            Not After : Nov 27 19:01:52 2024 GMT
        Subject: CN=eccf2865e3e463cce845ad318b10bae1a0a7d99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:d9:74:40:66:b7:57:c2:83:69:c8:fa:94:
                    36:55:03:9b:7c:a8:a8:f4:86:60:e5:17:48:47:1e:
                    ce:b0:30:3b:ac:fb:de:79:8c:37:03:b8:09:09:b6:
                    6f:65:30:6d:df:99:f6:16:08:c8:7a:62:72:d4:0d:
                    62:dd:d2:71:0a:89:02:63:5e:bb:c7:16:cf:a6:54:
                    04:3e:f6:15:77:df:79:01:b3:3e:d6:a1:ab:43:42:
                    01:26:a1:09:97:f3:cd:2c:b8:2e:41:eb:79:a4:03:
                    1d:58:ce:0b:53:df:9f:88:fd:ed:4c:cd:30:8c:3e:
                    d8:51:3e:c3:d7:0a:33:8f:ed:52:aa:57:da:a9:04:
                    39:48:b4:8f:c1:bd:a3:e2:86:38:b6:28:52:bc:f0:
                    f7:b2:a9:b6:8d:9d:4b:84:e8:22:23:d4:f8:a5:cb:
                    42:9a:e8:11:03:24:8f:98:de:68:19:b8:ff:f5:67:
                    28:7c:d0:4d:59:9b:b2:81:67:c8:35:fe:b2:24:86:
                    70:63:fc:10:7f:28:ec:93:9d:58:fb:43:24:39:1f:
                    f7:40:fc:43:21:f4:4d:16:da:f4:6c:20:14:d2:7a:
                    89:2f:4d:21:04:dc:de:77:7e:b2:68:e2:f3:2f:a3:
                    48:3b:8a:f8:ba:85:c9:df:d1:25:3f:a1:e0:07:73:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:28:65:E3:E4:63:CC:E8:45:AD:31:8B:10:BA:E1:A0:A7:D9:9D
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ec:1e:2c:89:91:e5:96:c4:98:10:0e:46:c3:4e:24:56:9b:
         8c:fd:33:39:d3:a6:d5:d3:20:94:fb:bf:db:b1:4b:ea:9b:0b:
         e7:61:69:83:a8:0d:ab:c1:46:37:d5:57:e0:b9:0d:f5:63:7a:
         aa:fc:90:5c:5a:8d:8a:9f:0e:49:99:66:34:ab:60:05:d1:89:
         59:0b:a5:bb:b9:1a:48:b1:e7:c3:07:59:74:f8:1f:b9:31:69:
         15:c4:7d:f8:03:d0:de:da:33:88:66:17:09:61:fc:77:4f:8f:
         76:62:76:48:43:89:db:1a:81:cd:79:de:c4:3e:77:b5:50:53:
         b5:36:56:b9:f8:30:b9:3d:f0:5a:d3:fc:fa:01:71:23:4f:70:
         30:c6:7f:9c:ad:85:2c:44:04:b6:5e:c3:88:6e:84:b3:4d:50:
         c0:1a:83:50:35:78:22:3f:10:ad:a9:db:3a:e7:92:65:5d:a5:
         f5:84:a0:1c:09:17:f5:6e:db:1c:c1:13:3b:5a:4b:5b:8c:ea:
         5b:6a:ba:17:de:57:f5:76:f9:41:ec:ca:df:12:2d:43:f4:6b:
         07:c6:dc:98:db:6f:49:14:71:f6:fb:16:c5:df:f8:4c:e2:68:
         75:7d:e3:ef:d0:69:ac:a2:76:df:68:3f:19:4b:53:73:b9:4e:
         59:31:0b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2fb2DaJW+gIHXYY72uUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl
ZWQ2OGIwHhcNMjQxMTI2MTkwMTUyWhcNMjQxMTI3MTkwMTUyWjAzMTEwLwYDVQQD
EyhlY2NmMjg2NWUzZTQ2M2NjZTg0NWFkMzE4YjEwYmFlMWEwYTdkOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkzZdEBmt1fCg2nI+pQ2VQObfKio
9IZg5RdIRx7OsDA7rPveeYw3A7gJCbZvZTBt35n2FgjIemJy1A1i3dJxCokCY167
xxbPplQEPvYVd995AbM+1qGrQ0IBJqEJl/PNLLguQet5pAMdWM4LU9+fiP3tTM0w
jD7YUT7D1wozj+1SqlfaqQQ5SLSPwb2j4oY4tihSvPD3sqm2jZ1LhOgiI9T4pctC
mugRAySPmN5oGbj/9WcofNBNWZuygWfINf6yJIZwY/wQfyjsk51Y+0MkOR/3QPxD
IfRNFtr0bCAU0nqJL00hBNzed36yaOLzL6NIO4r4uoXJ39ElP6HgB3PkrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzPKGXj5GPM6EWtMYsQuuGgp9mdMB8GA1UdIwQY
MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt
MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni
LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOweLImR
5ZbEmBAORsNOJFabjP0zOdOm1dMglPu/27FL6psL52Fpg6gNq8FGN9VX4LkN9WN6
qvyQXFqNip8OSZlmNKtgBdGJWQulu7kaSLHnwwdZdPgfuTFpFcR9+APQ3toziGYX
CWH8d0+PdmJ2SEOJ2xqBzXnexD53tVBTtTZWufgwuT3wWtP8+gFxI09wMMZ/nK2F
LEQEtl7DiG6Es01QwBqDUDV4Ij8QranbOueSZV2l9YSgHAkX9W7bHMETO1pLW4zq
W2q6F95X9Xb5QezK3xItQ/RrB8bcmNtvSRRx9vsWxd/4TOJodX3j79BprKJ232g/
GUtTc7lOWTELLQ==
-----END CERTIFICATE-----