Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          tVbpKOTBKFXeIstigpObK6U5fH19gEmvxbDAb2+ja4c=
Subject key identifier:   4F:11:05:57:64:53:82:03:21:0A:0E:80:46:F5:33:C0:90:AD:BB:AE
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       0194064756C78E1A6A05AC30E97B91AB4D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          12FB
Signing time:             Fri 27 Dec 2024 04:02:06 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:06 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:06 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: Phibo7Fa+w3a5vfmwKylbRewtOGi8D/uBSaiED4j2Ms=)
                          2: qB68wWlAfVE0WZem12ITO9mNfz8.roa (hash: RtR4J4LXdNwVG9AdzOsE/UeU6RzRxSIe/MZPPfyjL18=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:47:56:c7:8e:1a:6a:05:ac:30:e9:7b:91:ab:4d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Dec 27 04:02:06 2024 GMT
            Not After : Dec 28 04:02:06 2024 GMT
        Subject: CN=4f11055764538203210a0e8046f533c090adbbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:ed:a0:8f:c9:be:60:f5:e7:87:28:a3:86:
                    1a:5d:c2:ed:49:1d:96:b6:7a:d5:d9:c3:c0:60:35:
                    7b:11:d1:9a:6b:fd:5b:b1:28:1a:09:c4:7a:f3:37:
                    e1:ff:18:dd:33:24:fd:3c:43:1a:b2:db:56:75:63:
                    ba:7c:5b:8b:64:ec:3c:4e:7b:08:13:fe:c3:f4:c6:
                    59:02:0b:fd:2e:28:b9:6d:32:50:26:e4:3f:5e:b3:
                    92:0f:15:9b:88:73:c0:59:2c:93:bc:79:5e:b7:66:
                    61:3a:6b:32:f0:87:56:cd:23:84:0b:8b:c6:6a:97:
                    f0:ca:70:c7:f1:40:61:d0:ab:12:71:4a:2f:69:69:
                    71:c1:da:48:bf:79:26:be:b2:d1:6a:2f:8f:ab:79:
                    41:8e:6d:66:b4:c0:29:df:b9:6e:c5:5c:64:64:7e:
                    f2:83:7c:76:70:86:1c:22:93:c7:cb:a5:f0:4c:5b:
                    91:16:f7:9d:0e:0b:53:4d:dc:18:da:89:0c:94:49:
                    33:9c:36:d4:1a:08:2e:79:c5:2f:53:02:ff:a9:fa:
                    7c:9c:e6:26:e3:d7:b6:1b:a9:60:fc:66:78:7d:c5:
                    32:61:9e:fe:ff:c5:57:30:7c:54:4e:c2:4b:50:e9:
                    c6:dd:ea:c0:9b:bc:a5:75:92:dd:ce:ad:7e:00:02:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:05:57:64:53:82:03:21:0A:0E:80:46:F5:33:C0:90:AD:BB:AE
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:39:47:3d:7e:8e:ef:5c:b0:c7:23:62:8e:7d:6b:5f:ff:5e:
         b7:91:f4:6f:10:6c:25:b4:e5:22:4e:08:6d:12:1b:ba:b7:5d:
         5b:c3:d0:b9:9b:53:1a:7b:bb:62:9f:5b:ac:74:f3:02:bf:cb:
         fa:5e:49:24:0f:fb:9a:34:00:01:da:08:a3:8d:fe:44:c6:09:
         31:1e:15:73:86:e2:cb:c7:51:41:a8:e5:5b:5b:fd:67:12:a2:
         17:23:6b:5e:20:86:a4:be:c1:ee:55:64:8f:30:78:1a:c4:68:
         7c:0e:bd:96:c6:74:5f:6f:64:dd:f1:bb:9a:23:3c:d2:31:5e:
         54:c6:fd:0d:69:b6:40:ca:e5:43:a0:e8:67:eb:20:7d:16:05:
         9e:ae:48:27:e5:08:9d:a7:b7:cb:1a:87:0c:67:e9:9a:dd:8d:
         9b:0f:75:2d:2f:d9:a4:87:42:28:ee:fb:5c:a6:18:ce:14:56:
         07:c2:a7:6a:07:9a:18:55:2e:ef:2c:83:aa:b3:70:84:61:f0:
         8b:23:c3:fd:aa:82:21:5c:0d:76:de:1f:7e:8d:3b:25:87:a0:
         39:9a:0c:95:d9:fb:9e:f1:e5:5e:7d:f0:39:cd:e1:c6:09:7e:
         80:94:f6:71:5a:ae:0e:db:5e:67:b9:c1:39:27:5a:14:2f:d6:
         80:28:10:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGR1bHjhpqBaww6XuRq01VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz
NjY3NzMwHhcNMjQxMjI3MDQwMjA2WhcNMjQxMjI4MDQwMjA2WjAzMTEwLwYDVQQD
Eyg0ZjExMDU1NzY0NTM4MjAzMjEwYTBlODA0NmY1MzNjMDkwYWRiYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLDtoI/JvmD154coo4YaXcLtSR2W
tnrV2cPAYDV7EdGaa/1bsSgaCcR68zfh/xjdMyT9PEMasttWdWO6fFuLZOw8TnsI
E/7D9MZZAgv9Lii5bTJQJuQ/XrOSDxWbiHPAWSyTvHlet2ZhOmsy8IdWzSOEC4vG
apfwynDH8UBh0KsScUovaWlxwdpIv3kmvrLRai+Pq3lBjm1mtMAp37luxVxkZH7y
g3x2cIYcIpPHy6XwTFuRFvedDgtTTdwY2okMlEkznDbUGgguecUvUwL/qfp8nOYm
49e2G6lg/GZ4fcUyYZ7+/8VXMHxUTsJLUOnG3erAm7yldZLdzq1+AAIbNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8RBVdkU4IDIQoOgEb1M8CQrbuuMB8GA1UdIwQY
MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt
MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh
LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTlHPX6O
71ywxyNijn1rX/9et5H0bxBsJbTlIk4IbRIburddW8PQuZtTGnu7Yp9brHTzAr/L
+l5JJA/7mjQAAdoIo43+RMYJMR4Vc4biy8dRQajlW1v9ZxKiFyNrXiCGpL7B7lVk
jzB4GsRofA69lsZ0X29k3fG7miM80jFeVMb9DWm2QMrlQ6DoZ+sgfRYFnq5IJ+UI
nae3yxqHDGfpmt2Nmw91LS/ZpIdCKO77XKYYzhRWB8KnageaGFUu7yyDqrNwhGHw
iyPD/aqCIVwNdt4ffo07JYegOZoMldn7nvHlXn3wOc3hxgl+gJT2cVquDtteZ7nB
OSdaFC/WgCgQaA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:46:39 2024 by rpki-client on console-fra.rpki-client.org