Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
File:                     IOsM1NM69OKLeobbIS2VkaC-YuM.mft (raw, json)
Hash identifier:          zY5lVL+ov3lJkopLv8NSk/Geh39ShDDJ3VOCHOV1LcY=
Subject key identifier:   37:68:D1:E3:55:8C:C9:A1:72:38:6D:0A:AB:92:46:95:7C:5A:D7:ED
Authority key identifier: 20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3
Certificate issuer:       /CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
Certificate serial:       0193568A4EA20AFB67012F8393CCEFCF1FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
Manifest number:          0F95
Signing time:             Sat 23 Nov 2024 01:02:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:04 +0000
Files and hashes:         1: IOsM1NM69OKLeobbIS2VkaC-YuM.crl (hash: 9fwBVAiUjgnTJHHKJYrH9gz+5/rcpJLqYX4FfwEEsGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:4e:a2:0a:fb:67:01:2f:83:93:cc:ef:cf:1f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20eb0cd4d33af4e28b7a86db212d9591a0be62e3
        Validity
            Not Before: Nov 23 01:02:04 2024 GMT
            Not After : Nov 24 01:02:04 2024 GMT
        Subject: CN=3768d1e3558cc9a172386d0aab9246957c5ad7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:d6:40:86:a3:0b:73:33:30:57:3a:d2:95:
                    04:3f:b5:5c:ac:db:4d:5b:1f:77:87:33:06:ad:a8:
                    bc:46:3f:f7:7e:08:18:11:17:c2:5f:0a:a1:d5:11:
                    a5:41:d9:0a:b8:b8:6e:e4:02:a1:34:b7:05:dc:fb:
                    20:19:43:3f:5b:2a:f5:a1:0a:04:36:b5:35:c0:5e:
                    b5:19:90:c3:a0:28:51:1f:dc:46:ac:64:b4:10:7a:
                    cd:4f:ea:6b:3c:98:be:07:87:cf:0b:56:b2:e2:5d:
                    e0:d1:e3:c2:ae:a2:0b:a9:09:5f:0c:97:3d:ac:fd:
                    99:3a:4f:22:a7:00:2b:4d:ed:9e:43:cc:1f:83:4c:
                    83:1b:df:5d:17:7f:f2:a6:cd:5f:30:da:9f:af:fc:
                    9a:27:90:b8:7e:cd:ad:70:f6:8c:46:b5:e0:b2:2e:
                    1c:5a:64:3a:82:b7:6a:7b:45:c0:96:dd:5c:52:1b:
                    6c:81:a9:9e:1e:71:de:35:b6:53:57:99:45:ee:10:
                    d9:31:5b:92:73:c3:5a:74:01:fa:3c:10:5a:b2:46:
                    3c:e7:12:22:f2:4d:5d:39:0e:8d:8f:ca:0e:47:36:
                    58:2b:83:42:a2:22:3e:2e:ae:68:37:fe:c4:bb:f8:
                    0f:2c:d7:1b:d4:6b:1f:17:43:e6:2f:74:64:9e:44:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:D1:E3:55:8C:C9:A1:72:38:6D:0A:AB:92:46:95:7C:5A:D7:ED
            X509v3 Authority Key Identifier:
                keyid:20:EB:0C:D4:D3:3A:F4:E2:8B:7A:86:DB:21:2D:95:91:A0:BE:62:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOsM1NM69OKLeobbIS2VkaC-YuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/144494-9b46-40ac-9fe5-459d1e6d0ee9/1/IOsM1NM69OKLeobbIS2VkaC-YuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:67:fa:db:d5:0b:7f:61:a3:c2:48:15:27:f3:25:9a:b9:
         6c:b2:7c:9b:ee:be:8e:46:33:2c:30:f2:69:a8:2f:b6:9b:5a:
         81:ff:15:6c:81:bb:4b:5c:fb:4f:ef:68:8c:15:d3:3d:2d:11:
         e6:20:c9:b6:eb:74:c7:29:f4:51:1f:0c:9b:b7:3e:2b:22:74:
         78:13:ab:72:8b:4b:93:6f:f5:f8:88:a7:c3:25:44:38:32:74:
         23:8a:c4:64:49:65:ad:8b:dc:a9:8f:73:39:fd:86:99:75:c9:
         04:e0:c3:e1:8a:3d:1a:0d:9f:37:7c:9d:b4:59:87:9c:8a:9d:
         cf:83:42:12:64:89:e4:46:26:7e:3c:ae:40:df:09:39:76:f4:
         49:21:e9:02:b5:ec:8d:71:84:af:bb:47:88:a2:43:d9:53:ac:
         31:ec:94:34:28:86:22:bf:93:e4:8c:48:9e:37:49:ea:f4:ec:
         be:dc:54:36:a7:36:99:1c:a3:de:33:87:77:02:11:2f:29:e7:
         48:91:41:bc:44:52:6a:b2:48:37:37:65:0f:f1:0e:6f:d9:c9:
         b0:5d:80:3e:9d:6f:1b:7b:41:d8:b9:4c:39:4d:c4:b9:2c:ff:
         19:63:59:ad:e5:6b:7b:a3:55:6a:32:e0:11:94:79:11:65:86:
         a4:0b:39:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWik6iCvtnAS+Dk8zvzx+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZWIwY2Q0ZDMzYWY0ZTI4YjdhODZkYjIxMmQ5NTkxYTBi
ZTYyZTMwHhcNMjQxMTIzMDEwMjA0WhcNMjQxMTI0MDEwMjA0WjAzMTEwLwYDVQQD
EygzNzY4ZDFlMzU1OGNjOWExNzIzODZkMGFhYjkyNDY5NTdjNWFkN2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS3WQIajC3MzMFc60pUEP7VcrNtN
Wx93hzMGrai8Rj/3fggYERfCXwqh1RGlQdkKuLhu5AKhNLcF3PsgGUM/Wyr1oQoE
NrU1wF61GZDDoChRH9xGrGS0EHrNT+prPJi+B4fPC1ay4l3g0ePCrqILqQlfDJc9
rP2ZOk8ipwArTe2eQ8wfg0yDG99dF3/yps1fMNqfr/yaJ5C4fs2tcPaMRrXgsi4c
WmQ6grdqe0XAlt1cUhtsgameHnHeNbZTV5lF7hDZMVuSc8NadAH6PBBaskY85xIi
8k1dOQ6Nj8oORzZYK4NCoiI+Lq5oN/7Eu/gPLNcb1GsfF0PmL3RknkTcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdo0eNVjMmhcjhtCquSRpV8WtftMB8GA1UdIwQY
MBaAFCDrDNTTOvTii3qG2yEtlZGgvmLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNDQ0OTQtOWI0Ni00MGFjLTlmZTUt
NDU5ZDFlNmQwZWU5LzEvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xNDQ0OTQtOWI0Ni00MGFjLTlmZTUtNDU5ZDFlNmQwZWU5
LzEvSU9zTTFOTTY5T0tMZW9iYklTMlZrYUMtWXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGndn+tvV
C39ho8JIFSfzJZq5bLJ8m+6+jkYzLDDyaagvtptagf8VbIG7S1z7T+9ojBXTPS0R
5iDJtut0xyn0UR8Mm7c+KyJ0eBOrcotLk2/1+IinwyVEODJ0I4rEZEllrYvcqY9z
Of2GmXXJBODD4Yo9Gg2fN3ydtFmHnIqdz4NCEmSJ5EYmfjyuQN8JOXb0SSHpArXs
jXGEr7tHiKJD2VOsMeyUNCiGIr+T5IxInjdJ6vTsvtxUNqc2mRyj3jOHdwIRLynn
SJFBvERSarJINzdlD/EOb9nJsF2APp1vG3tB2LlMOU3EuSz/GWNZreVre6NVajLg
EZR5EWWGpAs5UA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:20 2024 by rpki-client on console-fra.rpki-client.org