Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File:                     XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier:          vXyL1Z2xWxZop+nDKXoQuLp4neYTSEXEiBDVkYriBHk=
Subject key identifier:   F8:F0:52:C5:13:19:8E:63:EC:B9:9E:66:85:49:E1:1D:48:25:10:31
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer:       /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial:       019235EE77F86A8922E37741F7076275AFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number:          12D9
Signing time:             Sat 28 Sep 2024 00:01:13 +0000
Manifest this update:     Sat 28 Sep 2024 00:01:13 +0000
Manifest next update:     Sun 29 Sep 2024 00:01:13 +0000
Files and hashes:         1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: ah48xaiX+QCTdBYiagNgN/QBmMB/78pFaGGliCbTuB4=)
                          2: Y0P0BVJXL37i11M3aKxN6PIsM54.roa (hash: JuujgTYxIPTPfGweijgkD18oQCxRj/XIVWt476iBRCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:ee:77:f8:6a:89:22:e3:77:41:f7:07:62:75:af:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
        Validity
            Not Before: Sep 28 00:01:13 2024 GMT
            Not After : Sep 29 00:01:13 2024 GMT
        Subject: CN=f8f052c513198e63ecb99e668549e11d48251031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:a3:c3:91:a2:c7:2a:65:17:95:f9:4a:25:
                    4e:9e:c5:07:f7:83:f4:14:c6:09:a9:93:e1:fc:ef:
                    ba:a0:65:92:d7:0b:8b:d7:c6:d2:eb:27:57:45:d0:
                    4c:8a:0c:d1:89:8d:09:1c:87:e6:be:4e:7c:fe:67:
                    ac:34:6c:93:e2:c9:46:95:16:d1:10:91:75:ec:9e:
                    e5:29:0d:0c:cc:be:cb:bf:5f:7e:c2:7d:36:13:10:
                    1e:24:dc:32:02:12:41:72:8f:e2:e6:72:d2:5f:cb:
                    23:46:27:66:03:cd:4c:44:e8:9b:d9:21:07:0c:0e:
                    12:d0:de:80:5a:19:8d:15:46:fe:cb:97:78:e7:85:
                    70:c2:c4:7b:c6:0d:f3:32:2c:69:51:0e:b9:a9:90:
                    f5:0c:a7:16:dd:9c:43:17:8e:5f:7f:85:f8:0f:ba:
                    b0:01:19:e9:97:9b:1e:c7:c2:91:c2:09:7b:67:aa:
                    af:38:63:e1:7e:ef:3c:dd:1b:63:c3:b2:08:75:99:
                    c6:a6:24:84:b7:31:00:cf:5f:f1:b5:8a:3f:41:fd:
                    a9:ca:ad:8a:3f:12:f0:cc:16:49:ff:1c:f8:cd:10:
                    4f:92:c1:d6:09:4b:58:7c:a8:3c:26:b4:ed:7d:0d:
                    20:2d:b9:fe:1c:60:67:d9:c3:09:d5:f3:6b:d0:af:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:52:C5:13:19:8E:63:EC:B9:9E:66:85:49:E1:1D:48:25:10:31
            X509v3 Authority Key Identifier:
                keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:be:c3:77:29:e9:18:e5:75:ea:db:27:d8:fc:b4:42:14:
         fd:30:bf:24:14:6c:59:83:6a:cc:db:9b:2e:48:4e:5f:33:a2:
         a2:90:60:00:d6:cf:7c:9a:01:31:06:fd:7a:f5:af:42:e3:9a:
         ae:98:67:35:e1:53:d3:3e:8b:0f:cd:3b:cc:09:bd:21:62:c1:
         27:b7:e5:f2:7f:64:3d:fb:a2:ed:56:bf:b3:04:c2:ee:fd:c0:
         46:60:66:0b:99:5f:ca:a6:e1:57:e2:e8:52:67:6e:dc:17:5b:
         87:91:ad:ad:59:d7:1f:e8:de:9e:f0:49:37:fc:dc:8c:ec:2a:
         a7:d7:0a:a2:f9:36:0f:0c:75:4a:f4:02:58:8d:d9:d6:bf:66:
         68:e9:b5:55:95:5c:02:5d:91:28:1c:46:ba:da:d8:7b:51:75:
         3f:f3:aa:9b:a6:af:f5:53:f8:4b:99:73:62:df:3f:ac:ff:aa:
         3e:da:3a:ad:bc:d7:fa:51:fc:9f:1d:52:24:c5:8f:c4:ba:cb:
         1f:bc:e8:0f:af:15:27:bd:d5:3e:ae:be:44:93:51:8c:32:c0:
         6e:74:36:fd:19:ed:8a:ef:ba:da:a3:f7:ee:ae:67:c8:da:a0:
         15:5a:69:41:48:f2:97:e3:bb:0a:c2:ff:d4:f8:70:fe:81:2d:
         cc:a3:15:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI17nf4aoki43dB9wdida+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDk5ZjQ5OTc4Yjk2MGZhMzFmODFhY2Y1NDY3MTI3M2Rj
N2ZmNjEwHhcNMjQwOTI4MDAwMTEzWhcNMjQwOTI5MDAwMTEzWjAzMTEwLwYDVQQD
EyhmOGYwNTJjNTEzMTk4ZTYzZWNiOTllNjY4NTQ5ZTExZDQ4MjUxMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu+jw5GixyplF5X5SiVOnsUH94P0
FMYJqZPh/O+6oGWS1wuL18bS6ydXRdBMigzRiY0JHIfmvk58/mesNGyT4slGlRbR
EJF17J7lKQ0MzL7Lv19+wn02ExAeJNwyAhJBco/i5nLSX8sjRidmA81MROib2SEH
DA4S0N6AWhmNFUb+y5d454VwwsR7xg3zMixpUQ65qZD1DKcW3ZxDF45ff4X4D7qw
ARnpl5sex8KRwgl7Z6qvOGPhfu883Rtjw7IIdZnGpiSEtzEAz1/xtYo/Qf2pyq2K
PxLwzBZJ/xz4zRBPksHWCUtYfKg8JrTtfQ0gLbn+HGBn2cMJ1fNr0K80mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjwUsUTGY5j7LmeZoVJ4R1IJRAxMB8GA1UdIwQY
MBaAFF8Jn0mXi5YPox+BrPVGcSc9x/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2Mt
ZjVkMmNiNzk0NTZkLzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hZDViZmQtODVjNy00N2I3LTk5N2MtZjVkMmNiNzk0NTZk
LzEvWHdtZlNaZUxsZy1qSDRHczlVWnhKejNIXzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI2+w3cp
6RjlderbJ9j8tEIU/TC/JBRsWYNqzNubLkhOXzOiopBgANbPfJoBMQb9evWvQuOa
rphnNeFT0z6LD807zAm9IWLBJ7fl8n9kPfui7Va/swTC7v3ARmBmC5lfyqbhV+Lo
Umdu3Bdbh5GtrVnXH+jenvBJN/zcjOwqp9cKovk2Dwx1SvQCWI3Z1r9maOm1VZVc
Al2RKBxGutrYe1F1P/Oqm6av9VP4S5lzYt8/rP+qPto6rbzX+lH8nx1SJMWPxLrL
H7zoD68VJ73VPq6+RJNRjDLAbnQ2/Rntiu+62qP37q5nyNqgFVppQUjyl+O7CsL/
1Phw/oEtzKMVKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 01:03:38 2024 by rpki-client on console-fra.rpki-client.org