Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
File:                     889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft (raw, json)
Hash identifier:          fV5V+xfvjCSitgGSw8h+uIPSAmqehDQ/pzEwCzcm4P0=
Subject key identifier:   68:65:18:03:2D:7D:BE:49:54:EC:2A:6B:0E:F5:2E:7E:94:48:66:0A
Authority key identifier: 88:96:65:EF:0F:74:EB:E6:9A:BB:09:07:CC:94:71:C5:E1:3C:07:6A
Certificate issuer:       /CN=889665ef0f74ebe69abb0907cc9471c5e13c076a
Certificate serial:       24B960532B1C6B6E984F0F7645015FDA4F63B8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJZl7w906-aauwkHzJRxxeE8B2o.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
Manifest number:          61
Signing time:             Mon 16 Sep 2024 13:55:45 +0000
Manifest this update:     Mon 16 Sep 2024 13:50:45 +0000
Manifest next update:     Tue 17 Sep 2024 14:08:45 +0000
Files and hashes:         1: 889665EF0F74EBE69ABB0907CC9471C5E13C076A.crl (hash: V2W/hfPiWp0ZVK4YYOJD3cUY2aIyP44Za+PdpUmkKtI=)

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJZl7w906-aauwkHzJRxxeE8B2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b9:60:53:2b:1c:6b:6e:98:4f:0f:76:45:01:5f:da:4f:63:b8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889665ef0f74ebe69abb0907cc9471c5e13c076a
        Validity
            Not Before: Sep 16 13:50:45 2024 GMT
            Not After : Sep 17 14:08:45 2024 GMT
        Subject: CN=686518032D7DBE4954EC2A6B0EF52E7E9448660A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:68:4f:35:6b:4d:21:61:80:73:bc:e4:1c:
                    63:8e:1a:7f:b9:26:8b:11:e9:00:d7:9b:87:0d:b0:
                    d8:ca:ee:67:00:2b:4f:30:35:19:63:56:cb:a5:12:
                    88:db:18:97:f1:0d:69:0e:11:21:e7:16:fe:48:ea:
                    18:b5:ef:3e:a2:fd:91:18:7e:53:13:99:e9:aa:bf:
                    43:07:57:a3:56:40:86:09:e2:3d:b9:27:eb:6e:88:
                    6b:04:05:58:66:79:04:e1:bf:0e:ae:21:45:8c:f7:
                    9c:b7:a4:56:f6:4f:32:4e:14:f7:b0:74:09:9c:42:
                    e1:19:42:e1:f8:71:a5:ce:c9:5f:ae:cd:48:71:dd:
                    73:bf:eb:a4:ac:ef:29:0e:75:1f:ba:7e:21:90:86:
                    a4:10:00:0a:4b:a7:6c:a4:26:27:22:99:68:d5:ce:
                    b2:af:62:4c:0e:d1:32:84:6d:0e:6f:c0:80:9c:b2:
                    ca:0d:ef:ff:f5:41:db:30:bd:cc:1a:a0:72:f2:53:
                    71:01:3b:6c:6f:bc:67:da:4a:29:83:2e:dc:37:97:
                    ea:ab:b5:26:77:a0:68:78:73:d6:57:41:3c:e3:1d:
                    34:9c:ca:cf:60:18:1b:8e:57:82:16:fb:1d:af:df:
                    b1:ad:c8:cf:eb:3a:2e:9a:cd:85:c1:e1:ee:4b:84:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:18:03:2D:7D:BE:49:54:EC:2A:6B:0E:F5:2E:7E:94:48:66:0A
            X509v3 Authority Key Identifier:
                keyid:88:96:65:EF:0F:74:EB:E6:9A:BB:09:07:CC:94:71:C5:E1:3C:07:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJZl7w906-aauwkHzJRxxeE8B2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/1/889665EF0F74EBE69ABB0907CC9471C5E13C076A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:d9:e3:be:e5:c9:bb:bc:3a:52:1c:c7:ac:5b:5c:2a:23:
         d1:43:bd:a2:c9:80:08:20:32:fe:03:8e:68:e3:1e:49:ba:88:
         4b:68:2f:5e:3f:3a:a9:e3:e4:9b:f2:4a:a1:87:93:26:16:c2:
         d8:08:1a:74:e4:e2:6e:f1:bc:de:69:0f:22:da:1e:7c:bd:71:
         19:6f:f9:13:45:4e:6d:5d:c4:74:f1:bf:88:93:20:c5:d6:47:
         00:2d:65:8c:6c:f8:87:9f:3c:9a:18:7b:83:9d:4b:af:fe:4a:
         9d:3d:e1:08:2a:f3:ce:c0:4a:74:85:79:c4:3b:12:9a:9d:f7:
         11:a4:8f:5a:b1:b0:2d:31:58:b6:3f:8f:0b:e4:11:e1:f0:fa:
         56:20:b0:d7:9d:f2:3b:24:79:40:dc:3c:10:47:48:1c:69:a7:
         29:20:64:4e:5e:39:8e:24:3f:06:b5:20:78:d3:9a:12:b0:39:
         68:d1:15:d0:aa:1a:a1:32:50:36:b1:5a:4b:fe:31:c7:c4:e9:
         53:d3:4a:2f:84:27:ed:c9:08:a3:1f:e4:47:74:7a:cb:81:a4:
         07:6b:6e:78:1c:53:ec:18:a2:4a:d6:cb:da:d5:fc:93:59:55:
         94:42:98:bb:0e:63:67:10:83:8c:b6:4a:9e:2d:36:4f:ba:d4:
         96:65:c1:3d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUJLlgUysca26YTw92RQFf2k9juLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg5NjY1ZWYwZjc0ZWJlNjlhYmIwOTA3Y2M5NDcxYzVl
MTNjMDc2YTAeFw0yNDA5MTYxMzUwNDVaFw0yNDA5MTcxNDA4NDVaMDMxMTAvBgNV
BAMTKDY4NjUxODAzMkQ3REJFNDk1NEVDMkE2QjBFRjUyRTdFOTQ0ODY2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRGhPNWtNIWGAc7zkHGOOGn+5
JosR6QDXm4cNsNjK7mcAK08wNRljVsulEojbGJfxDWkOESHnFv5I6hi17z6i/ZEY
flMTmemqv0MHV6NWQIYJ4j25J+tuiGsEBVhmeQThvw6uIUWM95y3pFb2TzJOFPew
dAmcQuEZQuH4caXOyV+uzUhx3XO/66Ss7ykOdR+6fiGQhqQQAApLp2ykJicimWjV
zrKvYkwO0TKEbQ5vwICcssoN7//1QdswvcwaoHLyU3EBO2xvvGfaSimDLtw3l+qr
tSZ3oGh4c9ZXQTzjHTScys9gGBuOV4IW+x2v37GtyM/rOi6azYXB4e5LhClFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUaGUYAy19vklU7CprDvUufpRIZgowHwYDVR0j
BBgwFoAUiJZl7w906+aauwkHzJRxxeE8B2owDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzEv
ODg5NjY1RUYwRjc0RUJFNjlBQkIwOTA3Q0M5NDcxQzVFMTNDMDc2QS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2lKWmw3dzkwNi1hYXV3a0h6SlJ4eGVFOEIyby5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9lY2IzNGIwNDY5MWU0OTk1
YTYwNjk1MmU4MzZiNGVjYy8xLzg4OTY2NUVGMEY3NEVCRTY5QUJCMDkwN0NDOTQ3
MUM1RTEzQzA3NkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdodnjvuXJu7w6UhzHrFtcKiPRQ72iyYAI
IDL+A45o4x5JuohLaC9ePzqp4+Sb8kqhh5MmFsLYCBp05OJu8bzeaQ8i2h58vXEZ
b/kTRU5tXcR08b+IkyDF1kcALWWMbPiHnzyaGHuDnUuv/kqdPeEIKvPOwEp0hXnE
OxKanfcRpI9asbAtMVi2P48L5BHh8PpWILDXnfI7JHlA3DwQR0gcaacpIGROXjmO
JD8GtSB405oSsDlo0RXQqhqhMlA2sVpL/jHHxOlT00ovhCftyQijH+RHdHrLgaQH
a254HFPsGKJK1sva1fyTWVWUQpi7DmNnEIOMtkqeLTZPutSWZcE9
-----END CERTIFICATE-----