Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File:                     941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier:          NcISaZFb8z8SO4ItGD4ni9ECaTc4ki4evmLkpp/Q3yI=
Subject key identifier:   8F:B8:9B:4C:88:BD:26:C9:20:06:22:AC:41:F1:DA:E9:90:23:9B:1C
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer:       /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial:       48B6D6C04225675828F5E605A1D8C147C04F89C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number:          60
Signing time:             Mon 16 Sep 2024 07:05:45 +0000
Manifest this update:     Mon 16 Sep 2024 07:00:45 +0000
Manifest next update:     Tue 17 Sep 2024 08:57:45 +0000
Files and hashes:         1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: Wz9a8v7Tqtrmjk7E99f0YooIkneXUsQnxvH6Qp0wJCo=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b6:d6:c0:42:25:67:58:28:f5:e6:05:a1:d8:c1:47:c0:4f:89:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
        Validity
            Not Before: Sep 16 07:00:45 2024 GMT
            Not After : Sep 17 08:57:45 2024 GMT
        Subject: CN=8FB89B4C88BD26C9200622AC41F1DAE990239B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:6a:63:87:78:a9:17:96:26:64:a9:54:9c:
                    8b:de:84:dc:61:99:68:f2:94:22:d3:cc:b6:57:9f:
                    fe:13:b7:cf:e7:fa:0b:39:ed:5a:23:bd:a7:1c:9a:
                    ad:6e:b4:08:36:77:f1:93:ac:5e:fd:38:71:ac:68:
                    91:d4:12:d0:72:a1:10:b9:28:22:e5:77:ad:9d:35:
                    e6:b1:93:b3:ce:7d:f3:14:a5:47:0f:8a:b6:f5:aa:
                    89:04:5a:8a:d0:0c:68:de:df:20:b7:5c:96:a7:5b:
                    9a:d5:4f:76:d3:39:d5:7d:74:9f:b2:b7:d3:84:71:
                    22:fe:2e:c8:ac:80:71:28:de:60:fe:2d:b7:a3:37:
                    e5:2e:c7:41:b0:33:f4:b2:06:0d:02:54:5d:67:b1:
                    5e:42:4a:b9:b8:1a:79:e6:65:e2:d8:93:42:5e:ab:
                    c5:f6:ad:d4:91:cf:36:73:f3:8c:8a:fc:bb:ff:b4:
                    a5:1e:d5:21:ed:d1:d1:8f:52:a8:7d:63:85:30:11:
                    20:1c:6a:64:dd:91:10:c7:95:2f:a2:fc:0e:ff:44:
                    2a:5e:11:58:41:ed:d7:39:b9:b6:7b:27:22:97:fc:
                    44:59:0b:3a:1c:6f:d9:5d:74:1d:7d:99:db:89:35:
                    b2:ac:27:06:6f:c8:62:a8:f8:f8:1c:11:4e:b3:6a:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B8:9B:4C:88:BD:26:C9:20:06:22:AC:41:F1:DA:E9:90:23:9B:1C
            X509v3 Authority Key Identifier:
                keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:7d:e8:cd:4d:50:04:8c:6f:c0:98:88:b6:df:1d:54:07:
         12:e8:09:ed:4c:85:63:a7:55:74:f9:16:29:8c:8f:b3:fd:26:
         98:b3:19:79:c2:17:f4:04:df:d0:be:0e:bd:88:76:c0:dd:52:
         83:48:0f:7b:d3:f4:b0:2a:ac:5f:f6:3c:88:5d:a9:f9:f9:e5:
         be:80:17:17:4d:d5:16:25:ba:3a:82:d2:37:8d:3a:a9:71:33:
         41:77:09:73:66:12:2a:6c:06:d3:ba:c5:a9:b9:82:27:e3:34:
         0a:6a:3c:94:b9:a8:07:63:92:c3:7a:12:db:68:6c:6f:a5:5a:
         18:2e:b5:a5:e7:fd:5f:f2:eb:28:b7:d1:ae:a6:38:3c:8b:82:
         68:0c:53:89:2e:98:4a:b1:29:47:96:9e:62:f2:7e:4a:a5:a1:
         a9:76:dc:22:28:fb:5a:b7:1e:64:12:19:50:02:fb:55:41:0c:
         bf:ba:6c:10:b1:56:b5:4b:44:56:c8:53:6b:77:cc:63:38:20:
         ec:4e:69:38:bb:d6:7f:e2:81:b9:80:f5:bd:d0:c0:7f:7f:1f:
         03:3b:5f:70:73:07:71:38:1d:91:43:a4:85:f2:48:87:8d:28:
         e3:69:83:bb:d4:f1:e4:de:37:a7:ea:0c:b1:79:e6:4e:e0:50:
         5c:b5:23:ed
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSLbWwEIlZ1go9eYFodjBR8BPickwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQxNjA0MDQwMDM4Y2RjNzdmOTBhNDBmZTI3N2M0YTBl
YjllOGRmODAeFw0yNDA5MTYwNzAwNDVaFw0yNDA5MTcwODU3NDVaMDMxMTAvBgNV
BAMTKDhGQjg5QjRDODhCRDI2QzkyMDA2MjJBQzQxRjFEQUU5OTAyMzlCMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+Wpjh3ipF5YmZKlUnIvehNxh
mWjylCLTzLZXn/4Tt8/n+gs57Vojvaccmq1utAg2d/GTrF79OHGsaJHUEtByoRC5
KCLld62dNeaxk7POffMUpUcPirb1qokEWorQDGje3yC3XJanW5rVT3bTOdV9dJ+y
t9OEcSL+LsisgHEo3mD+LbejN+Uux0GwM/SyBg0CVF1nsV5CSrm4GnnmZeLYk0Je
q8X2rdSRzzZz84yK/Lv/tKUe1SHt0dGPUqh9Y4UwESAcamTdkRDHlS+i/A7/RCpe
EVhB7dc5ubZ7JyKX/ERZCzocb9lddB19mduJNbKsJwZvyGKo+PgcEU6zamQZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUj7ibTIi9JskgBiKsQfHa6ZAjmxwwHwYDVR0j
BBgwFoAUlBYEBAA4zcd/kKQP4nfEoOuejfgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzEzNjA5ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzEv
OTQxNjA0MDQwMDM4Q0RDNzdGOTBBNDBGRTI3N0M0QTBFQjlFOERGOC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2xCWUVCQUE0emNkX2tLUVA0bmZFb091ZWpmZy5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xMzYwOWVkYjYzMDM0YmUw
YmNmNTM5ZjJkZWVmYmYyOS8xLzk0MTYwNDA0MDAzOENEQzc3RjkwQTQwRkUyNzdD
NEEwRUI5RThERjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs933ozU1QBIxvwJiItt8dVAcS6AntTIVj
p1V0+RYpjI+z/SaYsxl5whf0BN/Qvg69iHbA3VKDSA970/SwKqxf9jyIXan5+eW+
gBcXTdUWJbo6gtI3jTqpcTNBdwlzZhIqbAbTusWpuYIn4zQKajyUuagHY5LDehLb
aGxvpVoYLrWl5/1f8usot9Gupjg8i4JoDFOJLphKsSlHlp5i8n5KpaGpdtwiKPta
tx5kEhlQAvtVQQy/umwQsVa1S0RWyFNrd8xjOCDsTmk4u9Z/4oG5gPW90MB/fx8D
O19wcwdxOB2RQ6SF8kiHjSjjaYO71PHk3jen6gyxeeZO4FBctSPt
-----END CERTIFICATE-----
Generated at Mon Sep 16 08:12:54 2024 by rpki-client on console-ams.rpki-client.org