Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
File:                     qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft (raw, json)
Hash identifier:          TphXntis7PVXYHKyT+3CYiOZDaiOBnKIcEQMH4fE5WI=
Subject key identifier:   43:B4:4B:77:16:AD:2C:84:20:30:55:FB:CB:4C:8C:BC:7D:F8:FF:48
Authority key identifier: A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
Certificate issuer:       /CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Certificate serial:       019358405C2556843B041C8700B97899566F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
Manifest number:          0268
Signing time:             Sat 23 Nov 2024 09:00:33 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:33 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:33 +0000
Files and hashes:         1: qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl (hash: VXesnS0vMcyNLOiGbqJR8lOa0HCg8r4KC6+QDdzdNp8=)
                          2: zoKwYfpT8_eZS1q4g_KuE1FMSbs.roa (hash: WDneb93RXm/T2fUdTvHHpiPOHoUh1djxm53VpPJwN34=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:5c:25:56:84:3b:04:1c:87:00:b9:78:99:56:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
        Validity
            Not Before: Nov 23 09:00:33 2024 GMT
            Not After : Nov 24 09:00:33 2024 GMT
        Subject: CN=43b44b7716ad2c84203055fbcb4c8cbc7df8ff48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:6d:63:d2:a8:d7:ac:d1:55:76:0c:c3:0d:
                    13:e4:36:5f:27:e6:6c:6c:ec:01:84:df:1f:dd:43:
                    08:45:ad:db:df:ef:01:19:9e:ac:05:6f:5c:07:0f:
                    ff:58:4f:1f:43:a3:db:b1:ec:8f:db:9c:23:16:98:
                    f5:22:3a:5d:6e:4e:ae:82:b8:fa:5d:6e:6a:c2:f2:
                    aa:bd:e7:00:5d:14:2d:fd:e5:af:3c:65:39:83:3d:
                    33:4c:a4:0e:72:58:30:11:b4:19:d2:18:05:71:13:
                    f0:46:3d:36:89:74:36:b8:f6:29:dc:f8:1d:f2:18:
                    b1:c5:57:86:85:f1:b8:3e:bd:2c:75:fa:5e:64:15:
                    68:d1:20:b1:4b:3d:20:32:b1:70:b9:7f:1e:18:0f:
                    37:c3:ab:93:0c:f2:47:77:ed:5e:06:04:0c:24:b7:
                    46:b7:64:3d:93:cc:df:4e:ff:bc:ec:b0:84:8f:60:
                    29:e5:f4:93:c3:8a:e1:91:bc:cc:6e:05:2b:00:ba:
                    e3:47:36:ca:61:63:ef:94:06:a5:9e:d9:81:65:16:
                    9f:04:50:1a:db:f0:aa:78:70:57:6e:f6:8c:89:bc:
                    57:de:92:79:ed:40:f9:33:07:10:de:53:9c:36:69:
                    c3:f7:0c:a3:90:80:01:d6:bd:07:31:2a:ee:cc:bd:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:4B:77:16:AD:2C:84:20:30:55:FB:CB:4C:8C:BC:7D:F8:FF:48
            X509v3 Authority Key Identifier:
                keyid:A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b3:b5:37:b3:24:12:ea:08:89:d2:03:f3:34:15:b9:cc:01:
         26:2d:07:1c:f8:e6:33:6b:ae:ed:1f:de:5f:3e:62:f6:0c:3a:
         51:07:67:f0:4f:f5:5f:3b:77:e7:a5:0a:04:78:2b:58:2e:a6:
         47:28:48:73:7b:c6:af:41:fe:85:02:f4:0a:cc:b6:b4:7b:58:
         07:3d:12:8b:48:24:de:c9:c8:02:88:7d:88:74:6d:c9:62:96:
         84:ca:11:4b:00:f7:b7:36:34:06:04:44:31:e0:2b:a4:63:c6:
         4f:e8:b7:16:08:d8:6f:15:cf:5c:ae:b0:16:1d:b0:82:18:05:
         15:09:8f:10:5f:a6:c7:12:a7:03:82:6b:64:22:23:0b:07:25:
         50:00:f5:51:8d:15:49:c3:70:4a:8d:7b:48:6e:86:c8:3f:6d:
         6b:68:74:00:f9:8d:15:28:9e:98:76:9e:4f:2e:65:4e:3b:8a:
         c9:6c:fa:dc:ba:ad:1d:46:59:27:ca:00:1f:e2:b4:81:16:fb:
         6f:7f:51:53:71:7c:ef:49:73:91:84:ce:ae:42:74:11:97:da:
         e7:34:6e:45:10:44:c7:c9:b2:e7:df:19:11:0a:75:33:c4:29:
         52:fd:29:ad:57:d4:c7:66:d7:33:a1:36:a7:66:8c:65:85:aa:
         44:13:1c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYQFwlVoQ7BByHALl4mVZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTJhNTBjODhjYzBiZWIwYjc0N2JlZjRiMDU5MGJmOTc3
MGU5MzUwHhcNMjQxMTIzMDkwMDMzWhcNMjQxMTI0MDkwMDMzWjAzMTEwLwYDVQQD
Eyg0M2I0NGI3NzE2YWQyYzg0MjAzMDU1ZmJjYjRjOGNiYzdkZjhmZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TdtY9Ko16zRVXYMww0T5DZfJ+Zs
bOwBhN8f3UMIRa3b3+8BGZ6sBW9cBw//WE8fQ6PbseyP25wjFpj1Ijpdbk6ugrj6
XW5qwvKqvecAXRQt/eWvPGU5gz0zTKQOclgwEbQZ0hgFcRPwRj02iXQ2uPYp3Pgd
8hixxVeGhfG4Pr0sdfpeZBVo0SCxSz0gMrFwuX8eGA83w6uTDPJHd+1eBgQMJLdG
t2Q9k8zfTv+87LCEj2Ap5fSTw4rhkbzMbgUrALrjRzbKYWPvlAalntmBZRafBFAa
2/CqeHBXbvaMibxX3pJ57UD5MwcQ3lOcNmnD9wyjkIAB1r0HMSruzL2WjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO0S3cWrSyEIDBV+8tMjLx9+P9IMB8GA1UdIwQY
MBaAFKiSpQyIzAvrC3R770sFkL+XcOk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpLbERJak1DLXNMZEh2dlN3V1F2NWR3NlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kN2EzY2ItNWZlNS00NjM4LWEwZGIt
ZjA2NmE1Yzk2NTgwLzEvcUpLbERJak1DLXNMZEh2dlN3V1F2NWR3NlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kN2EzY2ItNWZlNS00NjM4LWEwZGItZjA2NmE1Yzk2NTgw
LzEvcUpLbERJak1DLXNMZEh2dlN3V1F2NWR3NlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7O1N7Mk
EuoIidID8zQVucwBJi0HHPjmM2uu7R/eXz5i9gw6UQdn8E/1Xzt356UKBHgrWC6m
RyhIc3vGr0H+hQL0Csy2tHtYBz0Si0gk3snIAoh9iHRtyWKWhMoRSwD3tzY0BgRE
MeArpGPGT+i3FgjYbxXPXK6wFh2wghgFFQmPEF+mxxKnA4JrZCIjCwclUAD1UY0V
ScNwSo17SG6GyD9ta2h0APmNFSiemHaeTy5lTjuKyWz63LqtHUZZJ8oAH+K0gRb7
b39RU3F870lzkYTOrkJ0EZfa5zRuRRBEx8my598ZEQp1M8QpUv0prVfUx2bXM6E2
p2aMZYWqRBMc9g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:46 2024 by rpki-client on console-fra.rpki-client.org