Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
File:                     9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json)
Hash identifier:          6yN3QrGQVGLzNKkRiEBj60EmOluBiCamtFdZlYnLo2s=
Subject key identifier:   78:C8:A3:C8:69:AB:CF:CB:66:C3:BE:EE:DE:CA:50:E6:24:FA:52:85
Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24
Certificate issuer:       /CN=f57331288d908dd762e4b56f003b448f01881d24
Certificate serial:       019356F727313AAF7D544CAD493472FB542D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
Manifest number:          07A8
Signing time:             Sat 23 Nov 2024 03:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:58 +0000
Files and hashes:         1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: yoCueveUbp/vR9q7HB22tUEbqumKtKjFUVwR0a0QN9U=)
                          2: gu8BgqfW0cxWsNgZxX9LYK2fydA.roa (hash: KQ2QYOvbI4Bv9zKDyuthHD7d/J7rloVHkaNOqC0kViw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:27:31:3a:af:7d:54:4c:ad:49:34:72:fb:54:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24
        Validity
            Not Before: Nov 23 03:00:58 2024 GMT
            Not After : Nov 24 03:00:58 2024 GMT
        Subject: CN=78c8a3c869abcfcb66c3beeedeca50e624fa5285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:73:69:4c:84:5e:e5:ae:53:81:24:4e:f4:
                    a2:aa:ba:bf:ad:7f:48:61:b0:6f:61:5d:29:9e:b2:
                    02:c1:c0:14:58:28:5b:98:b8:d6:cc:cb:9f:e5:f9:
                    be:53:ec:f2:b2:83:96:12:8b:c8:15:1b:ba:62:57:
                    c5:25:a5:42:0d:bc:6a:41:3b:52:51:48:f1:65:0e:
                    a8:d3:70:8f:2a:dc:d2:2b:1f:95:b6:ae:d7:93:2b:
                    8b:f6:17:be:f3:c6:0b:00:09:47:66:ad:1f:df:7c:
                    3b:a5:ef:b1:7a:2f:e8:b0:49:c6:7c:40:82:e0:70:
                    d0:15:a6:f1:09:42:a8:8d:5e:b4:b1:93:7e:18:12:
                    37:81:af:ce:a5:26:8d:25:91:34:61:d8:a3:d7:3f:
                    97:d2:cb:98:80:fe:71:1c:6f:3d:19:70:5b:48:eb:
                    22:88:69:fd:b1:55:b5:dc:10:35:16:f6:b2:a4:07:
                    70:6f:5b:22:c7:ab:a6:2c:80:a4:13:56:ad:1e:ca:
                    05:bb:7e:b9:ab:98:5f:cf:32:f3:14:d8:3b:aa:61:
                    70:7a:79:f6:05:bb:65:2f:34:f4:da:9d:c8:cc:e2:
                    b3:0f:65:c6:28:63:1a:04:18:b7:af:fc:53:85:36:
                    ee:1c:3c:0e:3c:54:bc:98:2a:ee:14:2b:da:13:36:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:A3:C8:69:AB:CF:CB:66:C3:BE:EE:DE:CA:50:E6:24:FA:52:85
            X509v3 Authority Key Identifier:
                keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:02:47:33:b4:ac:84:e7:6e:64:90:75:91:f1:46:02:6b:9b:
         db:83:e7:fc:3c:77:8b:37:7c:be:92:2e:ec:01:57:d2:7b:fb:
         79:ad:54:1c:1a:10:e7:4e:a7:32:81:29:57:ab:de:0b:6f:c7:
         08:74:1c:e6:42:bd:d4:cd:8e:c9:2d:97:e5:6c:11:df:9c:71:
         26:3c:78:44:0d:31:a1:6a:28:21:fd:0c:c7:71:2d:0a:33:24:
         e9:2b:b5:a3:2c:db:ce:44:01:7c:54:d8:cf:ca:2a:23:64:43:
         06:2b:c8:ca:87:da:a0:c1:02:2e:ae:dc:16:a0:97:7b:e8:89:
         b3:05:d6:6f:d6:81:a8:f5:6c:e3:bc:6d:20:78:2b:a8:b8:3f:
         a0:49:d2:d9:bd:21:ba:04:0d:09:5a:b8:5f:27:db:bd:d5:95:
         2e:19:29:3e:4f:ec:70:7c:41:a0:1c:b3:5a:7b:7a:ea:96:31:
         b2:15:44:3e:d6:38:2c:a8:0d:dd:23:ac:4b:f0:9c:33:e7:01:
         3f:f2:8c:b3:0e:49:a0:2e:6c:c9:a2:11:a3:ef:81:a6:cd:7c:
         49:fa:be:f8:51:97:36:b8:eb:8d:d1:a2:ed:57:cc:88:a0:f0:
         e3:b5:b5:5f:e3:08:00:50:d3:aa:89:5c:62:0f:b9:0d:9c:ef:
         a3:b6:24:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9ycxOq99VEytSTRy+1QtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4
ODFkMjQwHhcNMjQxMTIzMDMwMDU4WhcNMjQxMTI0MDMwMDU4WjAzMTEwLwYDVQQD
Eyg3OGM4YTNjODY5YWJjZmNiNjZjM2JlZWVkZWNhNTBlNjI0ZmE1Mjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/1zaUyEXuWuU4EkTvSiqrq/rX9I
YbBvYV0pnrICwcAUWChbmLjWzMuf5fm+U+zysoOWEovIFRu6YlfFJaVCDbxqQTtS
UUjxZQ6o03CPKtzSKx+Vtq7XkyuL9he+88YLAAlHZq0f33w7pe+xei/osEnGfECC
4HDQFabxCUKojV60sZN+GBI3ga/OpSaNJZE0Ydij1z+X0suYgP5xHG89GXBbSOsi
iGn9sVW13BA1FvaypAdwb1six6umLICkE1atHsoFu365q5hfzzLzFNg7qmFwenn2
BbtlLzT02p3IzOKzD2XGKGMaBBi3r/xThTbuHDwOPFS8mCruFCvaEzYEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjIo8hpq8/LZsO+7t7KUOYk+lKFMB8GA1UdIwQY
MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt
OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli
LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAJHM7Ss
hOduZJB1kfFGAmub24Pn/Dx3izd8vpIu7AFX0nv7ea1UHBoQ506nMoEpV6veC2/H
CHQc5kK91M2OyS2X5WwR35xxJjx4RA0xoWooIf0Mx3EtCjMk6Su1oyzbzkQBfFTY
z8oqI2RDBivIyofaoMECLq7cFqCXe+iJswXWb9aBqPVs47xtIHgrqLg/oEnS2b0h
ugQNCVq4XyfbvdWVLhkpPk/scHxBoByzWnt66pYxshVEPtY4LKgN3SOsS/CcM+cB
P/KMsw5JoC5syaIRo++Bps18Sfq++FGXNrjrjdGi7VfMiKDw47W1X+MIAFDTqolc
Yg+5DZzvo7YkWQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:11 2024 by rpki-client on console-fra.rpki-client.org