Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File:                     y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier:          0JBCX/Yz0WMzL5mDn/ZC7ThByfQcSubkge0BpOvdEtk=
Subject key identifier:   0C:F7:AC:5B:44:A3:8D:77:4B:04:CA:45:56:49:B4:E6:39:60:95:87
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer:       /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial:       01936AEB2B7BDD0A96A0869220546AF57BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number:          0E18
Signing time:             Wed 27 Nov 2024 00:00:17 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:17 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:17 +0000
Files and hashes:         1: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: KlC0ieswLqksB1RlOKgSSjHp0ONYs/mAQvden6gjr7c=)
                          2: y7I4kDuEZNartQMmgQUNwHdMZS0.roa (hash: Y3sYx47OQZHpKnidaD5TUvmSJxtOwliJj3xu5Bwjuok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:2b:7b:dd:0a:96:a0:86:92:20:54:6a:f5:7b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
        Validity
            Not Before: Nov 27 00:00:17 2024 GMT
            Not After : Nov 28 00:00:17 2024 GMT
        Subject: CN=0cf7ac5b44a38d774b04ca455649b4e639609587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:ef:e9:1f:61:43:3a:7e:4b:8c:95:b1:ad:
                    7b:f7:0c:25:a5:d1:9c:f3:ba:9a:51:b8:4c:be:5c:
                    fe:31:34:bb:86:07:68:b3:ef:6d:75:92:21:31:9e:
                    1b:0e:5f:53:12:19:a3:d2:3a:f1:68:87:16:17:8c:
                    d4:7e:76:70:85:52:98:e6:a6:5a:3a:c1:c1:61:43:
                    98:39:2f:c0:f4:79:45:14:71:01:3c:f8:36:f6:2c:
                    72:e0:a6:c4:0e:22:6a:3a:f3:96:63:d0:19:10:00:
                    a2:47:26:53:35:c6:ea:51:2a:b7:f5:eb:20:c7:35:
                    2c:7c:59:41:82:0d:fa:36:12:c4:e0:9b:0e:46:eb:
                    b8:26:7d:e1:40:1d:53:62:ae:8b:ed:f0:83:cf:5b:
                    53:b8:39:f5:51:4d:fd:cf:9b:00:2f:d7:52:b5:d0:
                    5c:c1:ad:a3:04:ea:1b:77:d5:41:a8:62:fb:2d:50:
                    36:b0:f8:2d:9d:00:a5:27:19:c8:89:9d:bb:4d:39:
                    f7:30:d9:0d:f9:ec:d0:b2:e2:4c:80:bf:a8:cd:ed:
                    3f:c8:2e:d3:81:d4:36:c5:d2:75:10:11:1f:a6:75:
                    e9:34:b8:dc:47:56:80:d6:af:5d:ad:5d:a1:4c:25:
                    f0:f8:aa:e5:01:73:d4:b2:ee:e8:7f:0c:3d:ca:8d:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:AC:5B:44:A3:8D:77:4B:04:CA:45:56:49:B4:E6:39:60:95:87
            X509v3 Authority Key Identifier:
                keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:53:62:14:4d:23:b3:fc:92:f6:07:3e:05:5d:b6:9c:31:b3:
         23:db:97:c4:3e:16:5a:a0:30:f9:98:bc:28:f9:4e:be:15:f8:
         3e:67:e1:80:f5:66:c7:7d:25:6c:40:45:bb:f2:4a:9f:40:b9:
         49:ae:44:b7:38:6a:4d:ec:bf:8c:ee:32:4a:93:dc:da:6c:4b:
         e5:93:1a:71:50:70:ce:fd:eb:18:96:c6:20:26:5b:60:34:78:
         ab:79:46:17:c6:9a:d7:55:f3:7f:3b:6f:61:66:4e:24:1a:cf:
         ba:70:f1:ff:1d:71:45:d6:8b:0b:a2:62:ed:b4:7c:cc:24:42:
         c3:19:5b:2d:d5:91:53:e9:a7:61:2d:47:6b:b0:58:c4:e1:2f:
         98:5f:dc:8e:87:8c:ae:94:15:a2:f1:97:4f:b4:1d:44:c9:1e:
         d5:9b:9d:24:a7:ca:db:f8:3e:23:5f:17:78:20:6b:ea:e8:2e:
         9c:70:93:7a:08:6d:05:5e:69:2e:b9:04:55:33:c1:6f:c5:24:
         dd:5a:06:90:da:a2:50:95:53:a9:13:ec:e3:d8:9c:36:84:04:
         a1:d8:6e:2a:1b:fe:53:45:66:2e:9d:3f:18:2f:4b:1b:d9:e1:
         61:c1:86:1c:bf:f0:b4:ae:54:d5:22:af:42:13:f4:0d:7d:11:
         af:8e:ea:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq6yt73QqWoIaSIFRq9XvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3
ZDE0MTEwHhcNMjQxMTI3MDAwMDE3WhcNMjQxMTI4MDAwMDE3WjAzMTEwLwYDVQQD
EygwY2Y3YWM1YjQ0YTM4ZDc3NGIwNGNhNDU1NjQ5YjRlNjM5NjA5NTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f7v6R9hQzp+S4yVsa179wwlpdGc
87qaUbhMvlz+MTS7hgdos+9tdZIhMZ4bDl9TEhmj0jrxaIcWF4zUfnZwhVKY5qZa
OsHBYUOYOS/A9HlFFHEBPPg29ixy4KbEDiJqOvOWY9AZEACiRyZTNcbqUSq39esg
xzUsfFlBgg36NhLE4JsORuu4Jn3hQB1TYq6L7fCDz1tTuDn1UU39z5sAL9dStdBc
wa2jBOobd9VBqGL7LVA2sPgtnQClJxnIiZ27TTn3MNkN+ezQsuJMgL+oze0/yC7T
gdQ2xdJ1EBEfpnXpNLjcR1aA1q9drV2hTCXw+KrlAXPUsu7ofww9yo1eiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz3rFtEo413SwTKRVZJtOY5YJWHMB8GA1UdIwQY
MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt
YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk
LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1NiFE0j
s/yS9gc+BV22nDGzI9uXxD4WWqAw+Zi8KPlOvhX4PmfhgPVmx30lbEBFu/JKn0C5
Sa5EtzhqTey/jO4ySpPc2mxL5ZMacVBwzv3rGJbGICZbYDR4q3lGF8aa11Xzfztv
YWZOJBrPunDx/x1xRdaLC6Ji7bR8zCRCwxlbLdWRU+mnYS1Ha7BYxOEvmF/cjoeM
rpQVovGXT7QdRMke1ZudJKfK2/g+I18XeCBr6ugunHCTeghtBV5pLrkEVTPBb8Uk
3VoGkNqiUJVTqRPs49icNoQEodhuKhv+U0VmLp0/GC9LG9nhYcGGHL/wtK5U1SKv
QhP0DX0Rr47qLw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:30 2024 by rpki-client on console-fra.rpki-client.org