Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File:                     4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier:          YeTaYwJ5Tuum7oHXDJ9fftTKjNocQlwwHnIpOCU6x9E=
Subject key identifier:   4E:16:4B:52:4F:FA:4A:8F:24:02:C9:3E:33:3C:16:FA:F8:A5:6C:27
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer:       /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial:       019239CAEC90EFDD19A45DBD3F6A87439F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number:          0260
Signing time:             Sat 28 Sep 2024 18:00:53 +0000
Manifest this update:     Sat 28 Sep 2024 18:00:53 +0000
Manifest next update:     Sun 29 Sep 2024 18:00:53 +0000
Files and hashes:         1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: hM7D2xy0cWOOn+iutvW0ITr/YqhLo7wWig7SqaBTm98=)
                          2: 8Bq2gQA2LC6Cy0kiavDC2AzsANM.roa (hash: gLOG+/p8VMAVo3cAKYSSZB1t16fmxveccUzOG8D7Lno=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:ca:ec:90:ef:dd:19:a4:5d:bd:3f:6a:87:43:9f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
        Validity
            Not Before: Sep 28 18:00:53 2024 GMT
            Not After : Sep 29 18:00:53 2024 GMT
        Subject: CN=4e164b524ffa4a8f2402c93e333c16faf8a56c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:8f:c0:51:42:f8:5d:52:0d:67:ce:83:c7:
                    d8:5a:24:fb:fd:06:d0:f1:bd:c4:71:8f:27:ce:39:
                    75:4e:e9:94:b7:68:19:ec:22:9e:d7:7a:79:89:30:
                    67:55:af:da:58:c1:5c:d0:ed:dd:a1:33:44:6f:47:
                    34:58:08:19:cc:bb:8b:cd:bd:77:65:ae:05:1a:d1:
                    83:b9:6e:ac:77:97:40:f8:6e:3a:52:7b:4e:14:27:
                    ee:74:8c:6d:b8:76:bf:b3:c1:9b:d9:42:cb:44:81:
                    36:c1:6e:27:08:89:53:bd:76:d4:bf:34:fe:94:3b:
                    dc:45:95:d7:cc:26:42:61:3e:10:35:db:49:ae:b7:
                    24:c8:c4:3e:5c:37:f3:53:16:bd:01:e8:d3:27:b8:
                    07:69:e2:a3:97:2c:78:41:e4:7c:bc:7e:a7:4e:fa:
                    ef:50:51:d6:30:aa:a6:d1:de:b0:4c:f8:73:64:d5:
                    84:19:dc:96:c7:59:76:20:0f:55:91:76:31:5f:77:
                    2e:52:20:e7:b4:bf:5d:fd:38:b7:8b:9b:cf:77:7a:
                    65:29:46:c0:6c:ce:82:07:fa:c7:ff:ed:36:d8:ad:
                    c8:df:f8:27:79:12:d4:36:85:8d:6e:ff:35:1d:d3:
                    04:60:01:93:9f:9b:4f:37:c4:ac:b9:0f:28:18:ea:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:16:4B:52:4F:FA:4A:8F:24:02:C9:3E:33:3C:16:FA:F8:A5:6C:27
            X509v3 Authority Key Identifier:
                keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:f7:1a:00:39:24:32:12:85:36:8a:31:ab:66:45:1e:e4:
         73:af:2b:9d:b6:b2:ed:f2:74:39:18:eb:fc:ef:6c:82:9d:82:
         62:9a:72:8a:99:f5:e1:b0:e8:41:a5:8b:3b:39:79:45:9d:1f:
         2b:b6:f5:5c:88:1a:5f:8b:5a:58:98:82:89:26:78:9e:a0:a9:
         04:4e:73:10:64:eb:cf:27:bc:37:9c:7f:3f:f8:02:f2:b5:2a:
         6e:80:ec:f5:15:c2:e3:e5:3d:a1:c7:41:13:c5:93:ea:74:3e:
         41:bb:73:79:2c:7c:e7:45:6a:61:2d:61:38:65:18:23:6f:41:
         36:d5:ba:67:bc:6c:e5:76:a6:3f:4e:43:5d:7d:ad:51:f2:b5:
         9c:2b:85:88:4f:e8:66:17:80:17:30:a5:8a:0a:1f:8b:b5:81:
         02:b0:40:3e:36:d9:54:76:74:9d:9f:2f:ef:6c:2c:35:3f:2a:
         38:a6:c1:96:45:8a:c9:c5:d8:ce:f5:a3:7a:c3:ce:56:ae:91:
         8d:1a:61:54:a6:06:09:fa:e7:30:d8:9a:3c:b5:0f:ea:7a:7c:
         52:76:7c:36:9a:ba:85:8d:60:62:56:58:5b:ef:16:42:05:e9:
         20:3f:6d:02:73:87:1a:ed:1c:e7:be:6e:14:a4:1d:72:b0:47:
         86:00:91:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI5yuyQ790ZpF29P2qHQ58xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1
Nzc5MTAwHhcNMjQwOTI4MTgwMDUzWhcNMjQwOTI5MTgwMDUzWjAzMTEwLwYDVQQD
Eyg0ZTE2NGI1MjRmZmE0YThmMjQwMmM5M2UzMzNjMTZmYWY4YTU2YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mOPwFFC+F1SDWfOg8fYWiT7/QbQ
8b3EcY8nzjl1TumUt2gZ7CKe13p5iTBnVa/aWMFc0O3doTNEb0c0WAgZzLuLzb13
Za4FGtGDuW6sd5dA+G46UntOFCfudIxtuHa/s8Gb2ULLRIE2wW4nCIlTvXbUvzT+
lDvcRZXXzCZCYT4QNdtJrrckyMQ+XDfzUxa9AejTJ7gHaeKjlyx4QeR8vH6nTvrv
UFHWMKqm0d6wTPhzZNWEGdyWx1l2IA9VkXYxX3cuUiDntL9d/Ti3i5vPd3plKUbA
bM6CB/rH/+022K3I3/gneRLUNoWNbv81HdMEYAGTn5tPN8SsuQ8oGOpc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4WS1JP+kqPJALJPjM8Fvr4pWwnMB8GA1UdIwQY
MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt
NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx
LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf33GgA5
JDIShTaKMatmRR7kc68rnbay7fJ0ORjr/O9sgp2CYppyipn14bDoQaWLOzl5RZ0f
K7b1XIgaX4taWJiCiSZ4nqCpBE5zEGTrzye8N5x/P/gC8rUqboDs9RXC4+U9ocdB
E8WT6nQ+QbtzeSx850VqYS1hOGUYI29BNtW6Z7xs5XamP05DXX2tUfK1nCuFiE/o
ZheAFzCligofi7WBArBAPjbZVHZ0nZ8v72wsNT8qOKbBlkWKycXYzvWjesPOVq6R
jRphVKYGCfrnMNiaPLUP6np8UnZ8Npq6hY1gYlZYW+8WQgXpID9tAnOHGu0c575u
FKQdcrBHhgCRCQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:22:37 2024 by rpki-client on console-ams.rpki-client.org