Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File:                     2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier:          x3RhlGiHbf3wQZIqPJKRRvNfkhgseT/CQuoN2c4bz9E=
Subject key identifier:   A5:05:40:79:63:32:17:D1:F9:10:4E:B2:97:CA:3D:05:F0:87:0F:AE
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer:       /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial:       01935688E264E0467D55E730C9897C2709B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number:          0818
Signing time:             Sat 23 Nov 2024 01:00:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:31 +0000
Files and hashes:         1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 8fsRuRCXw3RLCiAk30Y8DsGkaIvIi+2j9IgDM51XLvc=)
                          2: BMZLcKlE7OFgvQpCBzy_hqoCoUA.roa (hash: AiVAexPb4014uO2N7XNmtVUnBy+2Rblg9wSsUJE7mTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:e2:64:e0:46:7d:55:e7:30:c9:89:7c:27:09:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
        Validity
            Not Before: Nov 23 01:00:31 2024 GMT
            Not After : Nov 24 01:00:31 2024 GMT
        Subject: CN=a5054079633217d1f9104eb297ca3d05f0870fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:7f:10:c4:02:5c:6a:3a:96:2c:5b:72:81:
                    db:18:55:04:2e:9f:91:a3:62:d2:3f:ab:5a:01:d0:
                    d2:cd:f1:b1:2b:94:93:f5:92:28:b0:e6:7f:1d:90:
                    f4:fa:55:05:e2:5c:16:32:97:3a:1a:c8:f8:0f:d8:
                    8c:fa:69:5b:bf:05:ee:e4:f2:48:e8:dd:7b:1a:dc:
                    81:a4:97:c3:69:c7:74:60:cb:03:32:c6:d8:43:d3:
                    af:2b:c1:75:bf:34:9a:53:52:58:a2:89:c3:0d:58:
                    d7:97:ac:74:63:74:9d:e6:84:f5:16:b6:3f:80:6e:
                    6d:aa:ab:77:75:1e:4d:de:01:1c:14:d5:59:b5:69:
                    80:9b:25:58:ec:5d:e5:64:99:80:ca:9f:d1:e0:a7:
                    99:96:de:85:16:55:1a:82:4d:bd:ac:33:de:d4:1a:
                    7a:6a:55:b1:64:84:77:61:2c:98:93:92:16:3f:65:
                    4d:55:7f:b6:49:1b:67:f8:15:52:ef:de:32:8b:dd:
                    24:7f:20:e3:f6:4c:e0:40:0c:23:72:92:d2:7b:2a:
                    f4:87:39:e3:79:52:92:aa:d0:a3:90:32:61:19:e3:
                    37:8f:cf:8a:a9:82:65:fe:c9:c4:51:e6:8a:36:f8:
                    6d:3e:47:72:a6:4a:7c:8a:f1:9b:9e:27:5a:3f:11:
                    a2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:40:79:63:32:17:D1:F9:10:4E:B2:97:CA:3D:05:F0:87:0F:AE
            X509v3 Authority Key Identifier:
                keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:49:d8:6f:f1:04:70:5f:29:22:3b:19:b8:5f:ae:99:4b:c0:
         95:ea:96:df:5e:1b:cf:8d:d6:36:14:1d:e3:ef:27:f5:fa:55:
         23:0b:4b:aa:f0:c3:c6:d0:c3:18:a4:65:bd:af:f4:31:7c:cf:
         3e:97:ed:41:79:75:db:9e:7e:b7:45:b7:81:43:98:de:c7:98:
         04:cd:e3:07:34:c0:ea:1b:a6:83:fe:e8:73:a2:17:80:f8:91:
         92:6d:33:92:c2:51:df:a2:a5:91:3d:07:29:a1:c8:b1:4a:53:
         f7:23:2a:40:11:4d:de:63:d3:05:42:6f:3d:51:97:cd:ee:8f:
         5e:ca:cc:ed:17:b3:01:64:4f:65:86:61:55:79:4a:e0:60:15:
         0b:7f:87:a1:3f:c5:92:f7:79:11:69:5d:13:9c:c8:2e:10:c7:
         4e:7c:2b:8c:ee:62:00:88:73:1e:a4:c4:75:d0:cd:87:c2:ac:
         6c:fb:88:13:33:2f:18:d3:4e:48:8e:eb:5a:7f:88:7e:4d:3d:
         98:78:c9:61:11:fb:0d:49:8c:08:c3:80:1f:7a:db:36:40:80:
         7b:54:ba:ed:f5:95:38:00:95:57:fe:e9:ad:30:10:75:62:fa:
         f9:f3:99:d4:40:13:38:fb:e8:5e:5f:77:85:62:48:be:65:81:
         a0:24:1c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiOJk4EZ9VecwyYl8Jwm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmY5ZTE3YjliNDE5ODhhOTI1OTljYmNhYmEwMzkxZmZi
NjFhMjAwHhcNMjQxMTIzMDEwMDMxWhcNMjQxMTI0MDEwMDMxWjAzMTEwLwYDVQQD
EyhhNTA1NDA3OTYzMzIxN2QxZjkxMDRlYjI5N2NhM2QwNWYwODcwZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0J/EMQCXGo6lixbcoHbGFUELp+R
o2LSP6taAdDSzfGxK5ST9ZIosOZ/HZD0+lUF4lwWMpc6Gsj4D9iM+mlbvwXu5PJI
6N17GtyBpJfDacd0YMsDMsbYQ9OvK8F1vzSaU1JYoonDDVjXl6x0Y3Sd5oT1FrY/
gG5tqqt3dR5N3gEcFNVZtWmAmyVY7F3lZJmAyp/R4KeZlt6FFlUagk29rDPe1Bp6
alWxZIR3YSyYk5IWP2VNVX+2SRtn+BVS794yi90kfyDj9kzgQAwjcpLSeyr0hznj
eVKSqtCjkDJhGeM3j8+KqYJl/snEUeaKNvhtPkdypkp8ivGbnidaPxGiVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUFQHljMhfR+RBOspfKPQXwhw+uMB8GA1UdIwQY
MBaAFNn/nhe5tBmIqSWZy8q6A5H/thogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYt
MzdhMGU0NzRhYjE1LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80OWQ4NTktNjEwYS00MjQyLThkZGYtMzdhMGU0NzRhYjE1
LzEvMmYtZUY3bTBHWWlwSlpuTHlyb0RrZi0yR2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0nYb/EE
cF8pIjsZuF+umUvAleqW314bz43WNhQd4+8n9fpVIwtLqvDDxtDDGKRlva/0MXzP
PpftQXl1255+t0W3gUOY3seYBM3jBzTA6humg/7oc6IXgPiRkm0zksJR36KlkT0H
KaHIsUpT9yMqQBFN3mPTBUJvPVGXze6PXsrM7RezAWRPZYZhVXlK4GAVC3+HoT/F
kvd5EWldE5zILhDHTnwrjO5iAIhzHqTEddDNh8KsbPuIEzMvGNNOSI7rWn+Ifk09
mHjJYRH7DUmMCMOAH3rbNkCAe1S67fWVOACVV/7prTAQdWL6+fOZ1EATOPvoXl93
hWJIvmWBoCQcvQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:54 2024 by rpki-client on console-ams.rpki-client.org