Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
File:                     1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft (raw, json)
Hash identifier:          S9qs8zR4epNUQ4T/qxUwKsLyz/9GTGp56EK6UHTvON0=
Subject key identifier:   53:2D:DC:8E:AF:9E:C3:BB:BD:FB:A4:48:34:3F:7C:86:E3:AB:E7:DC
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Certificate issuer:       /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial:       019406B4091A8F972696D5C97F218EDBB75D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
Manifest number:          0EF8
Signing time:             Fri 27 Dec 2024 06:00:49 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:49 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:49 +0000
Files and hashes:         1: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl (hash: QNkR0gFahA00DiqfJWJ3V21yGmdEcHHt6TRMqIzAoQA=)
                          2: KXezRoFRDaACEhVG5e99QdkFVUE.roa (hash: 97l6XF0A33u/hw3FO9QqEgbIu6uz1LD2DRE+NF2pHVI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b4:09:1a:8f:97:26:96:d5:c9:7f:21:8e:db:b7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
        Validity
            Not Before: Dec 27 06:00:49 2024 GMT
            Not After : Dec 28 06:00:49 2024 GMT
        Subject: CN=532ddc8eaf9ec3bbbdfba448343f7c86e3abe7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:fd:2c:86:3c:a4:ec:e8:f0:06:a9:db:37:
                    c6:53:ff:09:29:0e:95:61:6a:a0:1d:59:b4:69:b6:
                    ee:f5:4a:b6:49:8a:2e:34:f5:23:df:fe:9d:17:f5:
                    b3:1e:4c:52:ef:88:9c:57:04:cb:8b:86:56:52:68:
                    91:cf:3c:a4:67:04:ec:b3:74:d3:ec:4a:62:e8:14:
                    b6:e5:ac:7e:cd:d5:c3:5f:6f:e6:3c:b1:f5:d4:19:
                    3f:83:14:73:0a:6f:91:2f:8a:80:22:7c:73:a0:4b:
                    09:89:83:96:a4:dd:7a:d0:3c:8c:cd:b7:c6:64:df:
                    66:0e:5c:6e:39:87:14:45:f1:20:6d:65:5c:38:9a:
                    70:b3:3b:90:dc:3b:09:8f:4f:54:d9:0f:d7:ed:a6:
                    65:4e:28:ff:c3:87:08:7d:23:27:7e:5a:79:35:3d:
                    e7:35:07:44:c9:7e:5f:5b:64:72:f0:55:30:ca:30:
                    96:8c:3b:18:aa:9f:eb:d6:34:26:d5:47:93:29:a8:
                    35:0c:ef:43:1a:ba:25:7d:6c:fb:11:fd:65:fc:c1:
                    c4:79:66:f5:2e:a8:8d:a7:d2:f4:d9:da:d5:cd:5b:
                    52:2e:ff:5c:e6:ed:1c:79:7d:43:10:e4:97:d4:e1:
                    1a:0c:03:8b:4d:00:0d:df:f5:d9:1b:d2:c6:18:35:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:DC:8E:AF:9E:C3:BB:BD:FB:A4:48:34:3F:7C:86:E3:AB:E7:DC
            X509v3 Authority Key Identifier:
                keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6b:f8:60:d3:5e:f6:39:de:e6:e9:ca:64:86:da:fc:aa:cb:
         e8:69:21:72:68:6f:fe:1a:bd:ae:f6:fd:fa:e4:0e:25:dc:4a:
         c5:22:14:6c:92:d6:ff:2f:4c:6e:85:f7:92:f3:c8:ca:23:df:
         61:24:86:35:23:5e:dd:da:c3:cf:bd:62:24:dc:12:a8:fe:69:
         f8:4b:a0:5e:ca:34:bf:2f:2c:a4:d8:93:82:7f:4e:9e:36:e1:
         11:ab:01:f8:a2:b0:e3:66:a0:72:35:93:75:22:1a:8e:1e:70:
         ef:67:a3:3b:80:3f:33:b5:3d:66:81:d5:01:c2:72:b2:42:65:
         3b:a2:ed:ee:df:11:54:8e:7a:db:d6:47:e7:65:3d:bb:64:de:
         f9:ec:6b:01:71:de:01:83:aa:e9:08:9f:11:70:be:0a:b0:bc:
         c2:6a:3c:1a:76:64:c0:3d:7b:05:0d:c1:60:94:54:6f:bc:38:
         ad:85:74:fa:5b:57:04:30:1a:90:32:4b:22:40:f2:91:4e:7e:
         26:ad:06:4a:18:ae:3f:cc:64:59:3c:8b:af:a7:4f:71:da:f3:
         94:36:36:9d:f8:1f:f1:ae:96:b9:d4:04:12:72:d5:dd:a0:89:
         f1:81:0c:0e:e6:e5:c8:74:85:cc:f2:06:3b:f5:01:38:08:bb:
         00:3f:bd:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQGtAkaj5cmltXJfyGO27ddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2ZkYzBlNWVkYjFjYzMyM2Y5MzQ0ZmUyODI3Yzc5M2U5
NWFjNmYwHhcNMjQxMjI3MDYwMDQ5WhcNMjQxMjI4MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg1MzJkZGM4ZWFmOWVjM2JiYmRmYmE0NDgzNDNmN2M4NmUzYWJlN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8z9LIY8pOzo8Aap2zfGU/8JKQ6V
YWqgHVm0abbu9Uq2SYouNPUj3/6dF/WzHkxS74icVwTLi4ZWUmiRzzykZwTss3TT
7Epi6BS25ax+zdXDX2/mPLH11Bk/gxRzCm+RL4qAInxzoEsJiYOWpN160DyMzbfG
ZN9mDlxuOYcURfEgbWVcOJpwszuQ3DsJj09U2Q/X7aZlTij/w4cIfSMnflp5NT3n
NQdEyX5fW2Ry8FUwyjCWjDsYqp/r1jQm1UeTKag1DO9DGrolfWz7Ef1l/MHEeWb1
LqiNp9L02drVzVtSLv9c5u0ceX1DEOSX1OEaDAOLTQAN3/XZG9LGGDUiRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFMt3I6vnsO7vfukSDQ/fIbjq+fcMB8GA1UdIwQY
MBaAFPjP3A5e2xzDI/k0T+KCfHk+laxvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NX2NEbDdiSE1Nai1UUlA0b0o4ZVQ2VnJHOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZWRhOGVmLTM2ZDMtNDVkNC05MTFl
LTVmYTkwYzEzZTFiNy8xLzEtTV9jRGw3YkhNTWotVFJQNG9KOGVUNlZyRzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE3L2VkYThlZi0zNmQzLTQ1ZDQtOTExZS01ZmE5MGMxM2Ux
YjcvMS8xLU1fY0RsN2JITU1qLVRSUDRvSjhlVDZWckc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGv4
YNNe9jne5unKZIba/KrL6Gkhcmhv/hq9rvb9+uQOJdxKxSIUbJLW/y9MboX3kvPI
yiPfYSSGNSNe3drDz71iJNwSqP5p+EugXso0vy8spNiTgn9OnjbhEasB+KKw42ag
cjWTdSIajh5w72ejO4A/M7U9ZoHVAcJyskJlO6Lt7t8RVI5629ZH52U9u2Te+exr
AXHeAYOq6QifEXC+CrC8wmo8GnZkwD17BQ3BYJRUb7w4rYV0+ltXBDAakDJLIkDy
kU5+Jq0GShiuP8xkWTyLr6dPcdrzlDY2nfgf8a6WudQEEnLV3aCJ8YEMDublyHSF
zPIGO/UBOAi7AD+9Sw==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:46:41 2024 by rpki-client on console-fra.rpki-client.org