Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File:                     AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier:          vhEQD0SV3En2/pqQle7IzTjWnJJJOPsW8TkryxvhGWg=
Subject key identifier:   AF:CB:40:D3:93:F4:42:1C:A6:5D:3E:9A:8A:AE:DE:79:38:62:79:14
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer:       /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial:       01935688B84718428CE3B4181F20E2460237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number:          EC
Signing time:             Sat 23 Nov 2024 01:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:20 +0000
Files and hashes:         1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: 6Jvo05L5h2QBjPQ0Uv0jNXhcNX683N32p46g2MByvsE=)
                          2: jVTQGAqwzwS3ftE5F_bVkugdq9g.roa (hash: eMcIEnf+tcPAyAI3sRtWFcqMPQox2Qzd5j8ygci84QU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:b8:47:18:42:8c:e3:b4:18:1f:20:e2:46:02:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
        Validity
            Not Before: Nov 23 01:00:20 2024 GMT
            Not After : Nov 24 01:00:20 2024 GMT
        Subject: CN=afcb40d393f4421ca65d3e9a8aaede7938627914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:ff:7b:21:a5:64:7f:ae:f1:cb:20:4f:a9:
                    5b:5f:d0:c4:bf:ca:47:b3:f4:08:5d:ff:4a:17:05:
                    08:e9:72:88:4e:38:d0:38:5e:5f:bb:55:f6:24:52:
                    96:ed:cc:28:5b:c1:f6:54:d3:52:ee:e6:31:a4:ea:
                    39:f8:9a:52:a8:e1:4d:5a:12:7d:c6:ac:68:41:81:
                    36:81:d9:e6:4c:82:a2:a2:eb:03:92:d3:2b:2b:a1:
                    1f:25:54:3d:bc:c1:69:6a:54:66:2d:f8:2a:bd:c8:
                    d3:50:e9:fe:10:7e:5a:fe:9d:91:c7:ee:c5:1a:54:
                    83:ed:9e:6c:2d:4c:82:82:7c:85:2f:cd:5e:83:c1:
                    88:2e:ff:29:4b:eb:65:5f:0d:d3:4d:cf:66:c5:d4:
                    a9:75:21:19:63:ed:8d:b3:32:d6:ab:b3:b0:8e:0e:
                    61:b8:09:df:25:ee:e7:c4:ba:9b:4e:92:2b:9a:87:
                    90:a6:ad:2a:7e:f9:48:d2:b7:4d:13:a7:5b:5b:bc:
                    e2:fd:fa:86:80:8d:88:80:6e:37:75:cc:cd:12:4d:
                    28:42:bc:ed:57:d9:e8:ff:9f:2d:27:5c:9e:59:91:
                    70:9c:27:44:68:c7:a5:f0:61:78:a2:46:4e:16:a7:
                    d4:df:01:2c:42:06:d1:5f:a2:83:d6:3d:a9:d2:78:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CB:40:D3:93:F4:42:1C:A6:5D:3E:9A:8A:AE:DE:79:38:62:79:14
            X509v3 Authority Key Identifier:
                keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d8:44:33:e0:1e:d2:39:c3:d1:36:79:ff:95:7d:ff:e3:b2:
         da:7c:72:28:c1:2a:58:70:35:93:f2:80:d0:fb:bd:08:c0:54:
         4f:39:66:9e:11:9a:d6:2d:36:41:9f:77:e3:7e:5c:8d:5c:a6:
         7b:ee:ce:f2:2c:4f:f5:78:57:ce:93:c8:0f:fa:8c:15:5a:7e:
         bb:01:5e:cf:f2:5f:9d:5b:e3:33:64:9a:2b:5a:6b:f1:b8:55:
         d3:ef:57:e9:9b:3e:15:29:38:bf:68:c6:21:43:5e:54:1a:a2:
         ce:a3:45:be:c0:80:0a:bb:cd:d8:1d:fb:ff:52:97:ae:3e:8b:
         e1:ae:09:fe:48:33:b7:83:fa:d2:2a:1c:1a:16:7a:95:54:ce:
         ef:96:53:7f:5c:77:0e:05:0b:d7:44:4a:2a:4e:36:4a:2e:67:
         17:3f:37:f2:a8:81:d7:bd:02:5a:94:3b:c5:10:b7:74:37:ff:
         8c:05:6d:4b:cf:f0:a0:aa:0f:19:a6:87:8c:6c:c1:a7:c2:84:
         68:7b:6a:3a:9d:5f:a4:fc:38:08:b3:91:1b:1b:29:20:32:3c:
         49:33:47:6c:b7:2b:06:10:ba:56:d3:e0:17:3b:65:38:78:3d:
         a0:7b:a0:da:fb:d7:1b:d5:76:20:f3:77:ab:ca:a0:00:bc:6c:
         73:44:1a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiLhHGEKM47QYHyDiRgI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi
NTY3NTEwHhcNMjQxMTIzMDEwMDIwWhcNMjQxMTI0MDEwMDIwWjAzMTEwLwYDVQQD
EyhhZmNiNDBkMzkzZjQ0MjFjYTY1ZDNlOWE4YWFlZGU3OTM4NjI3OTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xD/eyGlZH+u8csgT6lbX9DEv8pH
s/QIXf9KFwUI6XKITjjQOF5fu1X2JFKW7cwoW8H2VNNS7uYxpOo5+JpSqOFNWhJ9
xqxoQYE2gdnmTIKiousDktMrK6EfJVQ9vMFpalRmLfgqvcjTUOn+EH5a/p2Rx+7F
GlSD7Z5sLUyCgnyFL81eg8GILv8pS+tlXw3TTc9mxdSpdSEZY+2NszLWq7Owjg5h
uAnfJe7nxLqbTpIrmoeQpq0qfvlI0rdNE6dbW7zi/fqGgI2IgG43dczNEk0oQrzt
V9no/58tJ1yeWZFwnCdEaMel8GF4okZOFqfU3wEsQgbRX6KD1j2p0ng//wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/LQNOT9EIcpl0+moqu3nk4YnkUMB8GA1UdIwQY
MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt
MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1
LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdhEM+Ae
0jnD0TZ5/5V9/+Oy2nxyKMEqWHA1k/KA0Pu9CMBUTzlmnhGa1i02QZ93435cjVym
e+7O8ixP9XhXzpPID/qMFVp+uwFez/JfnVvjM2SaK1pr8bhV0+9X6Zs+FSk4v2jG
IUNeVBqizqNFvsCACrvN2B37/1KXrj6L4a4J/kgzt4P60iocGhZ6lVTO75ZTf1x3
DgUL10RKKk42Si5nFz838qiB170CWpQ7xRC3dDf/jAVtS8/woKoPGaaHjGzBp8KE
aHtqOp1fpPw4CLORGxspIDI8STNHbLcrBhC6VtPgFztlOHg9oHug2vvXG9V2IPN3
q8qgALxsc0QaJA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:16 2024 by rpki-client on console-ams.rpki-client.org