Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
File:                     IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft (raw, json)
Hash identifier:          Cu5rL7fbQvKPvvRI0Fpaw4uoHnkUotgDdHx/49SxP3U=
Subject key identifier:   1A:EF:2D:49:F9:18:EE:6A:4A:C9:13:90:E6:D6:F1:B5:A1:97:AB:28
Authority key identifier: 20:7E:DF:9A:4D:3E:EB:47:3E:E9:8F:2F:3B:2C:34:3E:C3:AC:1E:AC
Certificate issuer:       /CN=207edf9a4d3eeb473ee98f2f3b2c343ec3ac1eac
Certificate serial:       019356F71BB19624C6EA8E848CC2F239119F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
Manifest number:          0699
Signing time:             Sat 23 Nov 2024 03:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:55 +0000
Files and hashes:         1: IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl (hash: L+xTGUUvEIGpoFb4wXWlGlAUOZhAKJn0WGtwtCvMYZM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:1b:b1:96:24:c6:ea:8e:84:8c:c2:f2:39:11:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207edf9a4d3eeb473ee98f2f3b2c343ec3ac1eac
        Validity
            Not Before: Nov 23 03:00:55 2024 GMT
            Not After : Nov 24 03:00:55 2024 GMT
        Subject: CN=1aef2d49f918ee6a4ac91390e6d6f1b5a197ab28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:fd:8b:a8:df:99:6c:72:e2:2a:93:08:32:
                    95:5d:cf:6d:0d:a8:9d:41:72:a7:e5:65:8c:95:68:
                    77:04:18:fb:b2:c5:f9:ee:8f:73:74:99:90:fa:eb:
                    d6:4f:55:ee:49:57:7a:22:01:6c:a5:23:55:34:56:
                    03:fa:92:8c:46:ca:2f:c5:34:a1:53:b5:4c:67:27:
                    7e:4a:83:5c:92:bf:2d:9f:0c:56:d9:1b:19:c7:5e:
                    68:27:37:9b:fa:42:63:76:fc:9f:17:13:dc:e4:e0:
                    24:28:5f:4a:1a:88:98:3f:af:8b:21:ab:9f:ba:b6:
                    6b:09:79:70:fd:28:5f:f8:bb:ef:07:c8:92:a2:63:
                    f4:94:88:00:d5:8c:95:94:cc:e1:9f:3d:79:b8:7d:
                    ed:54:c6:18:09:fd:7c:f1:97:17:42:67:7c:9f:2e:
                    40:54:62:8a:bb:2a:c3:51:3e:65:85:f0:3d:be:a6:
                    9f:e0:92:4d:63:51:27:16:14:e8:a1:b6:63:e4:c6:
                    ed:ca:ed:38:34:bc:65:e2:c3:33:da:77:f6:60:bf:
                    a7:9b:7e:7f:6a:93:6f:0a:33:d9:3e:3b:c8:51:9e:
                    8e:d5:77:00:07:32:59:a5:d6:f0:fe:72:dc:0d:c8:
                    bc:47:cc:a9:40:93:21:69:14:cd:53:b7:99:cb:75:
                    21:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EF:2D:49:F9:18:EE:6A:4A:C9:13:90:E6:D6:F1:B5:A1:97:AB:28
            X509v3 Authority Key Identifier:
                keyid:20:7E:DF:9A:4D:3E:EB:47:3E:E9:8F:2F:3B:2C:34:3E:C3:AC:1E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH7fmk0-60c-6Y8vOyw0PsOsHqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/277c66-39b7-451b-9cb2-7e25ce93fdc4/1/IH7fmk0-60c-6Y8vOyw0PsOsHqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:88:94:27:95:44:f9:65:a0:68:b9:f6:d5:fd:5f:6b:18:3c:
         05:63:3f:97:71:72:b6:24:d9:a5:bc:a1:4d:b5:a9:5d:c3:90:
         73:4a:af:1a:1c:15:9c:db:63:9c:a5:20:18:23:69:7f:f7:1e:
         9d:00:4e:c4:c9:32:e5:9e:b2:bc:f3:fc:9c:8e:1b:f0:1c:b3:
         f3:56:ff:02:43:c4:d4:29:4f:9a:24:99:f6:06:6a:02:57:17:
         72:56:bc:87:d9:5b:2b:18:b9:b2:3b:65:b3:ad:66:0f:29:50:
         0f:c5:fd:27:67:4a:59:56:14:d1:5d:3e:a3:28:65:4a:ba:6e:
         44:09:d1:5a:45:03:b6:ef:60:59:dc:40:04:91:57:f5:06:49:
         ec:74:68:9a:53:96:69:ef:e6:e8:5b:f1:d0:b2:4c:a4:f1:e0:
         41:13:54:f5:0f:81:64:d1:44:fd:49:6a:f5:05:3d:96:b7:b6:
         f8:85:ea:b7:03:10:16:9e:73:68:f4:19:4e:52:fb:4e:c3:ac:
         22:66:c5:13:b7:b3:01:9b:00:8c:11:1b:03:54:80:3a:b5:37:
         13:0d:8b:90:f3:c9:40:03:26:35:0a:e1:b9:d9:6e:77:3c:f3:
         4a:af:c4:40:b6:72:8d:a8:83:82:7b:50:78:b4:aa:52:17:1a:
         51:01:17:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9xuxliTG6o6EjMLyORGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwN2VkZjlhNGQzZWViNDczZWU5OGYyZjNiMmMzNDNlYzNh
YzFlYWMwHhcNMjQxMTIzMDMwMDU1WhcNMjQxMTI0MDMwMDU1WjAzMTEwLwYDVQQD
EygxYWVmMmQ0OWY5MThlZTZhNGFjOTEzOTBlNmQ2ZjFiNWExOTdhYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gX9i6jfmWxy4iqTCDKVXc9tDaid
QXKn5WWMlWh3BBj7ssX57o9zdJmQ+uvWT1XuSVd6IgFspSNVNFYD+pKMRsovxTSh
U7VMZyd+SoNckr8tnwxW2RsZx15oJzeb+kJjdvyfFxPc5OAkKF9KGoiYP6+LIauf
urZrCXlw/Shf+LvvB8iSomP0lIgA1YyVlMzhnz15uH3tVMYYCf188ZcXQmd8ny5A
VGKKuyrDUT5lhfA9vqaf4JJNY1EnFhToobZj5Mbtyu04NLxl4sMz2nf2YL+nm35/
apNvCjPZPjvIUZ6O1XcABzJZpdbw/nLcDci8R8ypQJMhaRTNU7eZy3UhhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrvLUn5GO5qSskTkObW8bWhl6soMB8GA1UdIwQY
MBaAFCB+35pNPutHPumPLzssND7DrB6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUg3Zm1rMC02MGMtNlk4dk95dzBQc09zSHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNzdjNjYtMzliNy00NTFiLTljYjIt
N2UyNWNlOTNmZGM0LzEvSUg3Zm1rMC02MGMtNlk4dk95dzBQc09zSHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNzdjNjYtMzliNy00NTFiLTljYjItN2UyNWNlOTNmZGM0
LzEvSUg3Zm1rMC02MGMtNlk4dk95dzBQc09zSHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoiUJ5VE
+WWgaLn21f1faxg8BWM/l3FytiTZpbyhTbWpXcOQc0qvGhwVnNtjnKUgGCNpf/ce
nQBOxMky5Z6yvPP8nI4b8Byz81b/AkPE1ClPmiSZ9gZqAlcXcla8h9lbKxi5sjtl
s61mDylQD8X9J2dKWVYU0V0+oyhlSrpuRAnRWkUDtu9gWdxABJFX9QZJ7HRomlOW
ae/m6Fvx0LJMpPHgQRNU9Q+BZNFE/Ulq9QU9lre2+IXqtwMQFp5zaPQZTlL7TsOs
ImbFE7ezAZsAjBEbA1SAOrU3Ew2LkPPJQAMmNQrhudludzzzSq/EQLZyjaiDgntQ
eLSqUhcaUQEXow==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:29 2024 by rpki-client on console-fra.rpki-client.org