Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File:                     IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier:          Cu8mZzKTKiGGSP2rn4XGAIt7kjNo9x0OlhUPWKLnPDc=
Subject key identifier:   6A:93:B5:B2:3D:97:9E:7F:A6:4B:48:81:82:A7:FF:0D:B8:51:27:DF
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer:       /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial:       019355AD630BFB42B1142C7EE5202A2624A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number:          0B0F
Signing time:             Fri 22 Nov 2024 21:00:46 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:46 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:46 +0000
Files and hashes:         1: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: XXwolcW6j3a9g6cIJB/NctBMZUw2I/at14JerIJZofk=)
                          2: aWkpn__qwgt76ysgyf9e9i-TgiY.roa (hash: sdUduSGHIMoNfKCdNQmiWzAcgeDpJ8w0y/tgDZGVrgQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:63:0b:fb:42:b1:14:2c:7e:e5:20:2a:26:24:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
        Validity
            Not Before: Nov 22 21:00:46 2024 GMT
            Not After : Nov 23 21:00:46 2024 GMT
        Subject: CN=6a93b5b23d979e7fa64b488182a7ff0db85127df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:6b:71:3c:a4:c7:94:bf:26:c2:69:40:fe:
                    61:f0:e7:75:c1:7d:97:b7:b3:af:94:fe:b7:85:df:
                    fc:9f:6d:08:4f:d4:6f:1f:47:56:ef:57:47:8b:9e:
                    34:b5:c7:b8:9a:c8:8b:79:d1:2f:93:5f:59:d3:9d:
                    ed:ea:b2:a6:5b:67:cd:17:33:ad:28:89:2b:94:d9:
                    4c:bc:03:99:f0:ad:4e:c4:55:7f:7f:78:77:9c:66:
                    3e:a5:0c:aa:ce:0a:70:d5:d2:7a:46:85:b6:c4:bd:
                    6a:1e:31:ea:c0:b9:87:69:fb:b2:94:a4:78:d9:e5:
                    86:67:8b:7f:85:99:98:c4:de:45:45:b1:c7:c3:b6:
                    0c:82:b1:08:c2:34:39:2f:65:ec:7b:d6:ea:fb:42:
                    8e:bd:64:f1:63:e1:ee:8d:df:21:e9:5d:f1:ca:16:
                    29:af:f0:74:77:a6:11:4d:46:a4:fd:be:da:0f:68:
                    20:97:63:cc:f4:76:c8:0e:ff:4c:59:fa:d9:5c:5c:
                    31:3c:10:e6:78:ca:e0:bc:dd:4f:38:12:33:ef:9f:
                    9a:df:0f:c7:61:a7:6a:04:4c:30:52:42:a8:c4:d7:
                    f8:33:81:80:c6:aa:80:df:a9:e7:4a:9e:b4:dc:e0:
                    60:60:94:9a:97:2a:b6:f6:7f:0f:c0:bc:4b:c5:47:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:B5:B2:3D:97:9E:7F:A6:4B:48:81:82:A7:FF:0D:B8:51:27:DF
            X509v3 Authority Key Identifier:
                keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:f0:59:60:4a:5c:2d:58:70:5c:cd:ba:44:b0:b8:b9:34:
         6b:48:97:78:26:43:01:f6:86:64:ff:cc:85:1f:bf:5e:0d:0d:
         b8:30:08:da:ae:90:2e:00:87:d0:bb:af:d7:cf:cf:33:8d:66:
         bd:64:0c:11:b2:a1:bd:bb:74:1c:44:ff:45:94:7c:a7:66:eb:
         19:a5:a6:73:0d:16:48:93:f7:1a:1f:ef:8e:7a:42:e4:83:67:
         50:ce:a9:f4:40:1c:e3:e9:d5:2f:b9:5a:ce:08:fb:4c:e9:3d:
         61:09:e7:bb:99:67:d8:2c:4e:aa:04:ae:33:8b:ea:71:88:ea:
         90:2b:3c:de:cb:67:5f:ca:50:38:63:56:f4:a6:41:e8:4b:4b:
         6d:dd:32:c2:68:15:3f:85:8d:8c:f0:16:5f:c7:56:8d:95:f9:
         f6:a3:24:8c:25:2e:b7:57:d5:af:a8:6c:d8:3f:7a:1e:ff:ac:
         6a:a3:e6:e0:68:a5:bc:54:e1:60:15:7b:12:5b:18:1c:c3:38:
         72:4f:fa:35:8c:80:3c:c0:25:66:db:13:40:8e:4a:f9:f1:1b:
         85:b5:11:82:66:c5:ec:b5:4d:10:74:15:97:f5:ee:78:80:08:
         ca:2b:a1:ef:b1:44:83:6c:c9:1b:59:d1:34:1d:f1:eb:4e:e7:
         4d:2c:75:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVrWML+0KxFCx+5SAqJiSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw
NTczOTEwHhcNMjQxMTIyMjEwMDQ2WhcNMjQxMTIzMjEwMDQ2WjAzMTEwLwYDVQQD
Eyg2YTkzYjViMjNkOTc5ZTdmYTY0YjQ4ODE4MmE3ZmYwZGI4NTEyN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xrcTykx5S/JsJpQP5h8Od1wX2X
t7OvlP63hd/8n20IT9RvH0dW71dHi540tce4msiLedEvk19Z053t6rKmW2fNFzOt
KIkrlNlMvAOZ8K1OxFV/f3h3nGY+pQyqzgpw1dJ6RoW2xL1qHjHqwLmHafuylKR4
2eWGZ4t/hZmYxN5FRbHHw7YMgrEIwjQ5L2Xse9bq+0KOvWTxY+Hujd8h6V3xyhYp
r/B0d6YRTUak/b7aD2ggl2PM9HbIDv9MWfrZXFwxPBDmeMrgvN1POBIz75+a3w/H
YadqBEwwUkKoxNf4M4GAxqqA36nnSp603OBgYJSalyq29n8PwLxLxUfnuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqTtbI9l55/pktIgYKn/w24USffMB8GA1UdIwQY
MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt
YTlhZWI0ODVkNTkyLzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky
LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPPwWWBK
XC1YcFzNukSwuLk0a0iXeCZDAfaGZP/MhR+/Xg0NuDAI2q6QLgCH0Luv18/PM41m
vWQMEbKhvbt0HET/RZR8p2brGaWmcw0WSJP3Gh/vjnpC5INnUM6p9EAc4+nVL7la
zgj7TOk9YQnnu5ln2CxOqgSuM4vqcYjqkCs83stnX8pQOGNW9KZB6EtLbd0ywmgV
P4WNjPAWX8dWjZX59qMkjCUut1fVr6hs2D96Hv+saqPm4GilvFThYBV7ElsYHMM4
ck/6NYyAPMAlZtsTQI5K+fEbhbURgmbF7LVNEHQVl/XueIAIyiuh77FEg2zJG1nR
NB3x607nTSx1hQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:19 2024 by rpki-client on console-fra.rpki-client.org