Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
File:                     CH9Zw24i0fkDhPQdpgcFrHTXec4.mft (raw, json)
Hash identifier:          YtnFwt7YFKTEGEBfqNUQg3bYajk/kchF2KtK+83aSVU=
Subject key identifier:   20:34:06:15:85:D6:57:8D:48:E6:EF:55:3B:66:98:D7:2A:23:82:14
Authority key identifier: 08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE
Certificate issuer:       /CN=087f59c36e22d1f90384f41da60705ac74d779ce
Certificate serial:       01936A46FBEFF185E4E0F538A4BFCD3CD05D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
Manifest number:          0B79
Signing time:             Tue 26 Nov 2024 21:00:57 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:57 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:57 +0000
Files and hashes:         1: CH9Zw24i0fkDhPQdpgcFrHTXec4.crl (hash: ykh2aFYi2aewAShxb6tvXfGj3e1HkzCjm5A4x02gGho=)
                          2: zO_UDxdd4onsakhed3cUzRP98oc.roa (hash: M26c/Ljzv38wpoHR8kbmB1xtyFLThWviw9kdZU6Jvtw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:fb:ef:f1:85:e4:e0:f5:38:a4:bf:cd:3c:d0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087f59c36e22d1f90384f41da60705ac74d779ce
        Validity
            Not Before: Nov 26 21:00:57 2024 GMT
            Not After : Nov 27 21:00:57 2024 GMT
        Subject: CN=2034061585d6578d48e6ef553b6698d72a238214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:64:bd:ed:b1:68:1b:38:e2:fd:c7:09:44:
                    c2:8f:77:89:3e:37:17:29:74:b5:c3:e4:08:08:15:
                    ad:af:1e:b8:03:26:67:16:37:13:38:8b:61:99:78:
                    c2:e4:45:6d:5d:a0:68:37:8f:95:57:4d:a7:f3:62:
                    ea:b1:bf:92:6f:38:3c:2c:93:ce:00:b6:f8:fe:03:
                    94:2d:fb:fe:c4:eb:5d:d8:f1:5f:24:b8:62:99:cc:
                    df:88:cf:f1:b1:f6:c2:48:30:8f:2c:55:8c:ed:87:
                    78:91:60:4d:f8:8b:09:6f:33:61:4d:cf:93:a3:be:
                    9b:6a:de:12:aa:15:3f:f9:d3:7f:aa:06:a4:0d:6d:
                    70:bc:ec:83:40:ba:c3:0f:d0:3b:20:e4:e5:e2:9b:
                    5d:2c:23:d0:ec:dc:3e:33:c1:dd:fb:e4:5f:2b:4f:
                    bc:eb:52:db:1b:d8:db:e3:06:bc:48:8e:e9:3e:57:
                    3b:11:5a:9e:6a:33:04:b0:e9:25:59:7a:63:10:36:
                    08:ff:0d:14:71:d8:04:67:0e:44:9d:52:ca:c8:9b:
                    78:94:ff:ee:d4:1f:e9:3d:8a:61:14:60:e0:d7:73:
                    d1:89:0c:25:ac:91:3a:1b:48:e4:a6:2c:4d:33:bb:
                    8c:8f:5d:d0:dd:70:ba:4b:f1:cb:c7:e7:cf:74:ad:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:34:06:15:85:D6:57:8D:48:E6:EF:55:3B:66:98:D7:2A:23:82:14
            X509v3 Authority Key Identifier:
                keyid:08:7F:59:C3:6E:22:D1:F9:03:84:F4:1D:A6:07:05:AC:74:D7:79:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CH9Zw24i0fkDhPQdpgcFrHTXec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e59302-16c7-4927-bca8-c04be02037e8/1/CH9Zw24i0fkDhPQdpgcFrHTXec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:12:8d:89:36:45:8b:45:0b:2b:68:d7:26:5b:fe:bf:5f:
         94:99:90:e9:a7:42:35:e1:16:db:04:3f:96:40:43:1a:1c:9b:
         fa:b3:88:9f:7d:23:c5:57:00:4c:17:d7:5a:a0:54:69:c2:36:
         35:d4:79:8b:ee:fb:a7:6c:96:88:59:3f:ca:92:ad:fb:3c:e4:
         5a:68:9b:8b:bc:07:ea:d9:c9:8e:2f:5a:9c:49:1d:77:bd:4c:
         7a:1e:02:92:01:96:c5:a0:63:50:c7:05:f7:e5:32:c3:32:9a:
         f6:cc:5c:8d:94:83:34:e9:74:77:b6:92:da:7d:38:33:11:3d:
         c1:aa:9a:35:35:f6:94:34:97:c2:c7:ee:a6:ad:08:96:7c:70:
         ae:7f:4d:fc:4d:13:b6:32:0a:0e:d8:7e:08:49:7c:1f:b2:bf:
         9e:70:05:b2:04:be:6e:84:cc:49:3e:e5:bc:b7:ea:91:2a:b3:
         0f:4e:06:74:6c:3b:f8:3d:15:d2:be:6f:0b:37:fb:9b:8f:45:
         c0:f7:a5:ef:94:79:83:4d:eb:78:84:65:01:19:fe:14:cc:b1:
         2b:ad:cc:c6:42:5c:48:65:3c:7c:cc:63:a4:a2:9b:80:cb:07:
         40:20:fb:fb:9e:eb:01:36:cb:e9:6e:7a:3c:23:2c:1f:df:1d:
         14:ad:cf:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRvvv8YXk4PU4pL/NPNBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2Y1OWMzNmUyMmQxZjkwMzg0ZjQxZGE2MDcwNWFjNzRk
Nzc5Y2UwHhcNMjQxMTI2MjEwMDU3WhcNMjQxMTI3MjEwMDU3WjAzMTEwLwYDVQQD
EygyMDM0MDYxNTg1ZDY1NzhkNDhlNmVmNTUzYjY2OThkNzJhMjM4MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoktkve2xaBs44v3HCUTCj3eJPjcX
KXS1w+QICBWtrx64AyZnFjcTOIthmXjC5EVtXaBoN4+VV02n82Lqsb+Sbzg8LJPO
ALb4/gOULfv+xOtd2PFfJLhimczfiM/xsfbCSDCPLFWM7Yd4kWBN+IsJbzNhTc+T
o76bat4SqhU/+dN/qgakDW1wvOyDQLrDD9A7IOTl4ptdLCPQ7Nw+M8Hd++RfK0+8
61LbG9jb4wa8SI7pPlc7EVqeajMEsOklWXpjEDYI/w0UcdgEZw5EnVLKyJt4lP/u
1B/pPYphFGDg13PRiQwlrJE6G0jkpixNM7uMj13Q3XC6S/HLx+fPdK0rWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA0BhWF1leNSObvVTtmmNcqI4IUMB8GA1UdIwQY
MBaAFAh/WcNuItH5A4T0HaYHBax013nOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgt
YzA0YmUwMjAzN2U4LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTkzMDItMTZjNy00OTI3LWJjYTgtYzA0YmUwMjAzN2U4
LzEvQ0g5WncyNGkwZmtEaFBRZHBnY0ZySFRYZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+MSjYk2
RYtFCyto1yZb/r9flJmQ6adCNeEW2wQ/lkBDGhyb+rOIn30jxVcATBfXWqBUacI2
NdR5i+77p2yWiFk/ypKt+zzkWmibi7wH6tnJji9anEkdd71Meh4CkgGWxaBjUMcF
9+UywzKa9sxcjZSDNOl0d7aS2n04MxE9waqaNTX2lDSXwsfupq0Ilnxwrn9N/E0T
tjIKDth+CEl8H7K/nnAFsgS+boTMST7lvLfqkSqzD04GdGw7+D0V0r5vCzf7m49F
wPel75R5g03reIRlARn+FMyxK63MxkJcSGU8fMxjpKKbgMsHQCD7+57rATbL6W56
PCMsH98dFK3Pig==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:32 2024 by rpki-client on console-fra.rpki-client.org