Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
File:                     Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft (raw, json)
Hash identifier:          gmRzWNv2Mf0Hei5K8fiTnOpG1db36uHIcQb9QrVAkts=
Subject key identifier:   45:4F:B0:81:8F:53:55:D6:EF:89:4D:C4:83:22:E0:6F:4C:10:47:B7
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Certificate issuer:       /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial:       01935764E9FD07EA0FAD00C18F9B49466AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
Manifest number:          0805
Signing time:             Sat 23 Nov 2024 05:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:51 +0000
Files and hashes:         1: Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl (hash: nuCxEEtQWTHVBxOYXEqQsoIEfVVE/rmT13pMff5yex4=)
                          2: Nou2v65yKwZmGWmAI2ONLFJ-kXY.roa (hash: 2SF5ZuTx0XWoiUlz1Xvuzp0dqQx1rPJI5GYLE0yvi7Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:e9:fd:07:ea:0f:ad:00:c1:8f:9b:49:46:6a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
        Validity
            Not Before: Nov 23 05:00:51 2024 GMT
            Not After : Nov 24 05:00:51 2024 GMT
        Subject: CN=454fb0818f5355d6ef894dc48322e06f4c1047b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:a7:20:14:41:f8:16:c7:88:74:18:92:84:
                    0c:c5:d0:12:e0:3c:cb:e5:95:96:cf:80:78:44:68:
                    1f:d3:42:43:26:0a:f4:d8:36:c5:eb:63:5e:43:8e:
                    f4:d0:08:41:8a:51:75:4c:c2:5a:8b:93:49:9f:b2:
                    b7:7d:b3:20:89:37:f9:d9:e5:71:2b:54:c8:de:8f:
                    9c:d3:a3:1e:ac:37:64:67:3b:5b:cc:bf:00:8a:ee:
                    69:9c:5d:d0:07:41:3b:15:65:18:3d:99:e1:83:10:
                    4b:26:2f:83:65:93:98:50:ca:aa:94:5f:ef:20:4c:
                    ad:b6:fb:af:89:19:b4:61:78:93:0e:39:07:31:40:
                    ca:d9:cf:c7:35:b1:0c:99:c7:89:dd:44:55:3b:02:
                    b9:6a:79:a9:ca:2a:58:5e:aa:88:00:b1:bf:44:4a:
                    dc:3d:74:25:e0:dd:cd:20:fd:c8:39:d0:bf:e5:33:
                    fe:85:a5:4f:4f:d3:df:29:37:ba:6a:1d:ab:eb:a1:
                    b7:11:9c:2e:f2:36:8b:a9:21:cd:8a:a3:01:f4:67:
                    21:58:21:3f:98:c2:f2:39:8d:5a:cc:cf:50:02:1f:
                    8c:28:be:b8:55:b5:eb:d4:18:3e:46:e1:e2:8e:b0:
                    90:3c:24:8f:27:76:5d:39:42:33:b6:13:65:a4:17:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4F:B0:81:8F:53:55:D6:EF:89:4D:C4:83:22:E0:6F:4C:10:47:B7
            X509v3 Authority Key Identifier:
                keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ec:7a:f6:53:7e:23:ef:94:a4:d9:24:26:ca:41:a1:86:02:
         2a:f6:8e:de:11:42:92:f2:f0:6e:ce:66:7e:2f:3a:bd:aa:99:
         5d:a3:22:19:3f:87:e2:19:4c:4e:62:17:72:8e:20:22:04:69:
         e4:7d:24:e8:8d:31:8c:c6:bc:c2:6d:7d:c7:df:61:1a:90:c3:
         71:34:e8:10:8f:9e:8f:d8:5c:1c:d8:60:ce:b2:66:c7:dc:d7:
         f1:a1:9b:87:c4:48:59:32:c9:4c:a4:76:4d:cc:33:f2:04:bb:
         ab:f6:58:d2:8a:ac:07:ab:8d:22:fc:ba:95:b9:23:a6:dc:86:
         6d:36:e1:b2:30:29:52:e1:3f:94:9e:f6:a4:c2:da:d9:00:15:
         73:fe:fa:27:ef:53:cb:65:ff:dd:97:b7:63:60:5f:09:b4:93:
         1d:de:d0:0d:52:6f:88:6d:dc:08:ef:97:47:bc:6d:ec:f1:af:
         c5:26:8b:21:ec:69:28:a2:d3:25:d4:fa:e9:ca:e2:f5:69:12:
         69:a5:78:39:1d:bf:46:78:44:6f:09:27:aa:db:b9:26:64:85:
         fe:d7:51:dc:9a:05:b8:d1:22:fd:57:cc:64:f3:82:ac:46:c6:
         59:3a:96:89:db:bf:da:02:31:49:fa:19:a6:c8:65:3a:bc:c6:
         4a:c9:fb:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZOn9B+oPrQDBj5tJRmqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZmU5ZDY2NjU1YjVmZDI3YjJjMTdjYTk2ODU2NTBkNTNm
M2JiMGEwHhcNMjQxMTIzMDUwMDUxWhcNMjQxMTI0MDUwMDUxWjAzMTEwLwYDVQQD
Eyg0NTRmYjA4MThmNTM1NWQ2ZWY4OTRkYzQ4MzIyZTA2ZjRjMTA0N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxenIBRB+BbHiHQYkoQMxdAS4DzL
5ZWWz4B4RGgf00JDJgr02DbF62NeQ4700AhBilF1TMJai5NJn7K3fbMgiTf52eVx
K1TI3o+c06MerDdkZztbzL8Aiu5pnF3QB0E7FWUYPZnhgxBLJi+DZZOYUMqqlF/v
IEyttvuviRm0YXiTDjkHMUDK2c/HNbEMmceJ3URVOwK5anmpyipYXqqIALG/RErc
PXQl4N3NIP3IOdC/5TP+haVPT9PfKTe6ah2r66G3EZwu8jaLqSHNiqMB9GchWCE/
mMLyOY1azM9QAh+MKL64VbXr1Bg+RuHijrCQPCSPJ3ZdOUIzthNlpBdXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVPsIGPU1XW74lNxIMi4G9MEEe3MB8GA1UdIwQY
MBaAFAr+nWZlW1/SeywXypaFZQ1T87sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWIt
YmRjMjQ4YTZmNTY1LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MWVmMmQtYWU2Ni00NzM5LThkZWItYmRjMjQ4YTZmNTY1
LzEvQ3Y2ZFptVmJYOUo3TEJmS2xvVmxEVlB6dXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOx69lN+
I++UpNkkJspBoYYCKvaO3hFCkvLwbs5mfi86vaqZXaMiGT+H4hlMTmIXco4gIgRp
5H0k6I0xjMa8wm19x99hGpDDcTToEI+ej9hcHNhgzrJmx9zX8aGbh8RIWTLJTKR2
Tcwz8gS7q/ZY0oqsB6uNIvy6lbkjptyGbTbhsjApUuE/lJ72pMLa2QAVc/76J+9T
y2X/3Ze3Y2BfCbSTHd7QDVJviG3cCO+XR7xt7PGvxSaLIexpKKLTJdT66cri9WkS
aaV4OR2/RnhEbwknqtu5JmSF/tdR3JoFuNEi/VfMZPOCrEbGWTqWidu/2gIxSfoZ
pshlOrzGSsn7BQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:00 2024 by rpki-client on console-fra.rpki-client.org