Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File:                     bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier:          xKgu6zRGfWqi/7bOmUVwBqvhcUcflIFkY1tp0VvCbUY=
Subject key identifier:   2F:E6:91:B6:47:99:68:8C:7A:23:AC:D8:0B:3F:C5:9E:63:53:C7:FC
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer:       /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial:       01935764BE2BCE415C607ED0322AB5DB6545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number:          107F
Signing time:             Sat 23 Nov 2024 05:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:40 +0000
Files and hashes:         1: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: WlGs2s+1NqD/kiAHNmqhwlahjR+odGKN+d/DYZZwI0M=)
                          2: m3yYaT-crvkasFnHS9hXwjRYX8M.roa (hash: XCPA6PCZpMdu7Fc634qKWq+ATc8ml9C/CIlkC61LfGU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:be:2b:ce:41:5c:60:7e:d0:32:2a:b5:db:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
        Validity
            Not Before: Nov 23 05:00:40 2024 GMT
            Not After : Nov 24 05:00:40 2024 GMT
        Subject: CN=2fe691b64799688c7a23acd80b3fc59e6353c7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:a4:60:15:f9:b8:62:8e:fd:38:e2:de:e4:
                    99:f8:c2:9b:40:d0:13:39:f3:1c:1f:c7:24:18:19:
                    da:82:0b:47:0f:f5:04:c2:9d:3e:ee:18:a8:5a:78:
                    66:9a:33:69:99:d9:30:c2:c5:0b:28:6b:7b:75:93:
                    c5:d6:49:1e:da:62:27:96:fc:a4:21:c0:b0:d2:c0:
                    ea:fa:19:65:04:ad:3a:57:43:32:97:23:d4:24:fa:
                    7c:72:58:67:31:8e:38:fb:bd:e8:89:1d:f8:76:f0:
                    c4:48:0f:39:4d:84:05:d3:0f:3c:87:3d:53:35:80:
                    46:29:7c:89:e9:33:dd:e4:b2:78:a4:d6:92:d6:fd:
                    c1:58:a6:da:a9:6b:a1:45:73:7d:37:cf:53:8c:de:
                    a3:83:cd:75:1a:92:88:d9:ad:de:f7:d9:5d:f5:dc:
                    78:cd:39:39:ba:a4:27:e7:cd:5b:c4:28:0c:29:ad:
                    23:cc:dd:c1:a1:f3:5c:a8:0f:56:cc:dd:e7:dd:66:
                    39:53:cb:01:28:9a:4a:2e:b7:6c:c2:86:50:89:f1:
                    3d:ca:5b:8b:90:78:ec:40:d4:05:d0:1d:39:7c:af:
                    60:2f:4e:8a:30:8a:64:54:76:87:31:6c:e1:4c:0b:
                    07:f8:e7:85:dd:2b:11:3b:a3:e4:90:89:bc:70:fd:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:91:B6:47:99:68:8C:7A:23:AC:D8:0B:3F:C5:9E:63:53:C7:FC
            X509v3 Authority Key Identifier:
                keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:21:78:ba:47:af:c8:b9:43:39:00:f9:0a:98:07:dc:3a:c8:
         47:90:7d:bf:2f:42:f7:be:e6:16:2b:1c:ec:53:81:6b:77:fd:
         c0:51:b4:10:2e:6b:05:d6:f1:93:2c:36:11:4c:7f:6c:ee:ff:
         67:5d:84:0b:2e:17:8e:3f:67:0f:7b:84:f5:97:8d:2f:22:74:
         c1:e9:13:ae:fd:ba:a5:bf:a7:60:8b:7f:f0:d9:2d:4d:d2:d8:
         6b:d4:d6:9d:ff:13:79:25:df:e3:a7:d7:b3:81:3b:e6:e0:7f:
         f5:a8:fb:62:90:7c:43:df:3e:a2:41:32:17:06:b2:12:59:63:
         de:dd:d3:4a:bc:31:a1:4f:6a:3e:16:3c:4d:3e:b2:13:4d:11:
         c4:41:2f:be:66:01:86:cc:0a:a6:2e:a8:60:de:05:46:0c:c5:
         d9:53:b7:d8:a4:d0:97:2d:44:52:0d:28:c7:d2:29:85:af:6e:
         86:b5:8f:39:4c:cf:fa:f9:af:66:8d:1b:6c:f8:9d:09:41:bc:
         e8:89:0d:69:42:da:b5:5f:77:8b:56:7b:0d:f4:3f:49:71:b1:
         51:23:10:3f:6a:87:2f:b9:fb:87:a4:75:bb:85:03:7f:6e:83:
         63:ad:7e:f5:2a:f0:f8:a8:bd:aa:f7:ec:e5:20:0d:ef:74:77:
         6f:6e:a1:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZL4rzkFcYH7QMiq122VFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm
NzdjZDcwHhcNMjQxMTIzMDUwMDQwWhcNMjQxMTI0MDUwMDQwWjAzMTEwLwYDVQQD
EygyZmU2OTFiNjQ3OTk2ODhjN2EyM2FjZDgwYjNmYzU5ZTYzNTNjN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzKkYBX5uGKO/Tji3uSZ+MKbQNAT
OfMcH8ckGBnaggtHD/UEwp0+7hioWnhmmjNpmdkwwsULKGt7dZPF1kke2mInlvyk
IcCw0sDq+hllBK06V0MylyPUJPp8clhnMY44+73oiR34dvDESA85TYQF0w88hz1T
NYBGKXyJ6TPd5LJ4pNaS1v3BWKbaqWuhRXN9N89TjN6jg811GpKI2a3e99ld9dx4
zTk5uqQn581bxCgMKa0jzN3BofNcqA9WzN3n3WY5U8sBKJpKLrdswoZQifE9yluL
kHjsQNQF0B05fK9gL06KMIpkVHaHMWzhTAsH+OeF3SsRO6PkkIm8cP1yvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/mkbZHmWiMeiOs2As/xZ5jU8f8MB8GA1UdIwQY
MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt
NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2
LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiF4ukev
yLlDOQD5CpgH3DrIR5B9vy9C977mFisc7FOBa3f9wFG0EC5rBdbxkyw2EUx/bO7/
Z12ECy4Xjj9nD3uE9ZeNLyJ0wekTrv26pb+nYIt/8NktTdLYa9TWnf8TeSXf46fX
s4E75uB/9aj7YpB8Q98+okEyFwayEllj3t3TSrwxoU9qPhY8TT6yE00RxEEvvmYB
hswKpi6oYN4FRgzF2VO32KTQly1EUg0ox9Ipha9uhrWPOUzP+vmvZo0bbPidCUG8
6IkNaULatV93i1Z7DfQ/SXGxUSMQP2qHL7n7h6R1u4UDf26DY61+9Srw+Ki9qvfs
5SAN73R3b26hDA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:17 2024 by rpki-client on console-fra.rpki-client.org