Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File:                     A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier:          1u3Q3Nvv1hjw0TJoZgsWp9fen1+LUd4lPKsZpmiUREE=
Subject key identifier:   6F:50:64:88:A8:33:EB:A0:66:1D:EA:47:12:5E:C2:4C:92:34:93:27
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer:       /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial:       019406EA9E04489D7898211BF69FEC9C96A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number:          0E54
Signing time:             Fri 27 Dec 2024 07:00:26 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:26 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:26 +0000
Files and hashes:         1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: 3j3FxwB6z7QnAVVtvZGEhzMFl2FrcHST05ofx8IgHdc=)
                          2: Da5X95W7pkQcTBIOacD9YeenVO8.roa (hash: eB29wDhKAM03UphqqDxmE/9pR7YtUET0iInvSbPvlZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:9e:04:48:9d:78:98:21:1b:f6:9f:ec:9c:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
        Validity
            Not Before: Dec 27 07:00:26 2024 GMT
            Not After : Dec 28 07:00:26 2024 GMT
        Subject: CN=6f506488a833eba0661dea47125ec24c92349327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:85:7d:2c:25:37:de:04:60:0a:45:fd:89:
                    d2:66:8e:83:61:ab:3b:8a:7f:80:53:10:8b:06:11:
                    cc:50:f7:01:a9:06:96:15:b4:5e:ab:d3:23:c8:92:
                    20:bf:39:f3:ed:8f:0f:ba:65:f6:46:f8:ae:9f:35:
                    76:a8:d5:14:34:c6:45:80:c2:58:03:fe:9a:8d:c7:
                    a9:98:6e:20:9f:d3:07:f8:8f:b3:ee:8d:79:bc:18:
                    d1:85:cd:72:ff:48:71:15:75:16:e6:68:0f:61:d9:
                    2a:9d:4d:ae:dd:42:fe:33:23:96:28:5d:49:03:4f:
                    95:1d:b9:17:d5:7f:ab:39:55:d6:e0:66:18:42:4d:
                    df:ca:cf:d0:f6:2f:f8:cc:3c:52:39:3e:04:b4:53:
                    b1:c5:71:9c:7a:a4:76:43:c2:32:d4:95:61:9b:fc:
                    ca:9a:47:8c:9d:f4:30:19:12:0b:52:cd:75:17:cf:
                    16:b6:69:b9:19:49:35:8d:0a:0a:b9:1c:3a:ec:ad:
                    44:9e:21:1e:3f:25:2b:fb:27:21:3d:73:46:82:14:
                    4a:7c:c6:a9:06:1d:a4:7c:00:3a:74:7c:9b:d1:57:
                    e9:9d:7b:47:68:44:3c:b7:4e:84:af:f0:17:4d:e3:
                    78:5e:b0:46:c5:8a:7e:4e:70:95:f3:28:2b:f3:6f:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:50:64:88:A8:33:EB:A0:66:1D:EA:47:12:5E:C2:4C:92:34:93:27
            X509v3 Authority Key Identifier:
                keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:a4:78:55:6e:1f:4c:d9:65:57:aa:bf:ae:e6:4f:24:d0:
         13:3a:a7:60:5a:f4:1b:38:13:53:9d:d8:32:2b:65:2a:01:4c:
         97:81:30:cd:68:38:d7:0f:81:02:a9:ee:f5:6e:1c:e7:5c:26:
         5f:98:e4:fc:ba:f8:1b:62:ab:d4:d7:84:7d:82:0a:82:1a:24:
         a8:b4:f5:f1:3e:7e:c0:eb:36:83:8d:77:19:07:65:c1:93:b8:
         b2:db:34:27:d9:21:3d:0e:30:c4:49:6b:f0:0a:6f:14:05:c0:
         17:12:86:ef:14:d0:11:9d:92:ce:e0:b5:15:2e:07:a7:fd:3f:
         06:ea:8c:28:d8:b8:44:42:ec:36:ef:c2:e1:10:09:09:3a:dc:
         1d:a1:43:a8:fc:5a:9e:ee:31:b3:e8:03:52:1e:fc:95:f6:f6:
         ef:82:2e:8c:9a:03:df:31:ec:3c:ff:1a:ea:ec:cb:a3:a7:f0:
         46:98:77:43:30:b6:61:d8:0b:e0:c0:03:73:5a:61:dc:00:23:
         14:96:a2:65:e5:a8:1d:c4:de:94:8d:b1:63:3b:ca:9b:00:a5:
         31:24:c7:5a:fa:3f:77:c2:19:2b:3e:45:2f:c9:67:27:83:2f:
         8c:c4:c9:a2:eb:16:b5:85:b9:f7:0e:dc:76:20:c3:c3:0b:bc:
         cd:68:14:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQG6p4ESJ14mCEb9p/snJaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjQxMjI3MDcwMDI2WhcNMjQxMjI4MDcwMDI2WjAzMTEwLwYDVQQD
Eyg2ZjUwNjQ4OGE4MzNlYmEwNjYxZGVhNDcxMjVlYzI0YzkyMzQ5MzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVWFfSwlN94EYApF/YnSZo6DYas7
in+AUxCLBhHMUPcBqQaWFbReq9MjyJIgvznz7Y8PumX2RviunzV2qNUUNMZFgMJY
A/6ajcepmG4gn9MH+I+z7o15vBjRhc1y/0hxFXUW5mgPYdkqnU2u3UL+MyOWKF1J
A0+VHbkX1X+rOVXW4GYYQk3fys/Q9i/4zDxSOT4EtFOxxXGceqR2Q8Iy1JVhm/zK
mkeMnfQwGRILUs11F88Wtmm5GUk1jQoKuRw67K1EniEePyUr+ychPXNGghRKfMap
Bh2kfAA6dHyb0VfpnXtHaEQ8t06Er/AXTeN4XrBGxYp+TnCV8ygr82/0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9QZIioM+ugZh3qRxJewkySNJMnMB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg2keFVu
H0zZZVeqv67mTyTQEzqnYFr0GzgTU53YMitlKgFMl4EwzWg41w+BAqnu9W4c51wm
X5jk/Lr4G2Kr1NeEfYIKghokqLT18T5+wOs2g413GQdlwZO4sts0J9khPQ4wxElr
8ApvFAXAFxKG7xTQEZ2SzuC1FS4Hp/0/BuqMKNi4RELsNu/C4RAJCTrcHaFDqPxa
nu4xs+gDUh78lfb274IujJoD3zHsPP8a6uzLo6fwRph3QzC2YdgL4MADc1ph3AAj
FJaiZeWoHcTelI2xYzvKmwClMSTHWvo/d8IZKz5FL8lnJ4MvjMTJousWtYW59w7c
diDDwwu8zWgUIQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:46:22 2024 by rpki-client on console-fra.rpki-client.org