Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File:                     ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier:          4l58a+zZn8U6U85RShMi3a96baRvUxlZdojSYUHn4TI=
Subject key identifier:   0D:F0:CF:D0:F2:74:C2:BB:47:D7:FD:28:7A:7B:99:83:01:B3:AE:FC
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer:       /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial:       01936B227A4E17EB2A8F26207ECAAC724285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number:          1380
Signing time:             Wed 27 Nov 2024 01:00:41 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:41 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:41 +0000
Files and hashes:         1: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: vD/gUE3SRz83RFEUZ0KqsSw0Q436nN+VUCAM+tvpNvs=)
                          2: eInNgAHOM3N8ED9Sfo0TwAe-7TQ.roa (hash: YST+g81WCEefubbIauMqfmlWtd/Yfn/pND5R9EHzT4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:7a:4e:17:eb:2a:8f:26:20:7e:ca:ac:72:42:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
        Validity
            Not Before: Nov 27 01:00:41 2024 GMT
            Not After : Nov 28 01:00:41 2024 GMT
        Subject: CN=0df0cfd0f274c2bb47d7fd287a7b998301b3aefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1b:2f:ba:02:e3:8c:fe:f3:29:d7:e0:1d:0e:
                    1a:57:4b:0f:d3:b8:34:c7:4d:1f:d9:18:9b:58:8d:
                    4f:07:41:46:3c:e7:58:0c:ed:7f:3f:7d:f0:3f:16:
                    3f:06:29:04:b5:66:f9:c3:18:7f:88:b9:dd:53:51:
                    c7:a7:be:8a:66:1b:13:1f:d6:34:fb:ae:5b:4f:98:
                    cc:0e:69:8d:8d:93:ab:8b:0f:17:10:52:9e:44:04:
                    06:6d:cc:8e:f0:81:8c:fe:22:cd:de:b3:0f:cd:10:
                    3c:83:36:e6:9b:85:85:ae:b3:e1:53:60:f3:7e:be:
                    ca:2c:6d:93:2c:bb:b8:b1:b2:0c:ec:f6:99:59:1a:
                    97:41:6e:48:e7:31:56:54:47:af:2e:bc:c8:ec:3e:
                    46:92:92:99:cf:a0:38:5d:10:fe:c9:8e:bb:24:13:
                    74:fa:73:07:a3:ec:da:9e:7e:a9:e3:07:46:0c:0a:
                    4e:ca:f9:ac:60:54:5c:4f:0d:44:bb:30:13:f7:5d:
                    8a:ac:dd:eb:34:a4:a7:4c:5a:33:04:77:d6:4b:dd:
                    dc:ec:64:77:02:f8:42:5b:f3:c6:e3:2e:27:a2:d7:
                    5e:e2:90:75:a1:fc:d2:a9:f3:0e:5f:f3:c0:20:54:
                    29:56:3a:9c:39:82:b2:9c:e4:52:9a:3f:00:3d:47:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F0:CF:D0:F2:74:C2:BB:47:D7:FD:28:7A:7B:99:83:01:B3:AE:FC
            X509v3 Authority Key Identifier:
                keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:be:be:23:04:80:fb:48:b3:5f:45:cd:dd:1c:2d:b7:ce:
         ec:7f:06:76:da:a4:4c:59:cf:6a:67:7b:51:bf:f3:6a:da:12:
         ba:1a:f8:8a:45:cc:75:2d:f5:f2:74:39:84:76:81:48:e0:bc:
         ad:5d:d9:4b:cc:95:20:3e:f3:90:8a:8f:25:36:dd:6b:58:5d:
         ca:cd:c5:68:85:8c:c7:71:46:a9:8c:aa:ac:6c:6e:b1:45:75:
         3e:04:41:28:0d:d4:39:81:c1:98:f5:b4:62:43:9a:87:52:d0:
         ac:c8:20:f1:49:4d:16:f6:d5:18:e3:ba:f6:63:3a:2a:31:60:
         f5:ab:09:aa:79:22:89:51:8f:cd:8d:df:19:ee:0f:5c:96:d9:
         3c:03:0d:50:a4:c5:8e:82:7b:3d:ea:46:d9:fe:48:5c:fb:2c:
         62:26:3f:e5:03:14:57:2c:21:5a:cf:ae:c7:55:ad:a9:13:d6:
         59:58:2b:d1:c1:48:f5:dc:d3:5c:b4:cc:88:30:e7:1d:5e:94:
         f0:a3:3b:a2:7a:37:ff:4a:c7:36:64:86:61:1f:fc:7a:7f:0f:
         1e:a8:a7:e5:ef:19:9f:83:63:96:11:b2:7d:bc:4f:fa:2d:f8:
         57:a9:f6:e9:39:06:24:82:20:30:5d:19:a7:1b:3b:d5:34:14:
         74:cf:ea:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrInpOF+sqjyYgfsqsckKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1N2VkNmY1YmJhNjMzZDU1MjY5ZmRkMDU2YmNmNjBjNjhj
N2IyYjgwHhcNMjQxMTI3MDEwMDQxWhcNMjQxMTI4MDEwMDQxWjAzMTEwLwYDVQQD
EygwZGYwY2ZkMGYyNzRjMmJiNDdkN2ZkMjg3YTdiOTk4MzAxYjNhZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RsvugLjjP7zKdfgHQ4aV0sP07g0
x00f2RibWI1PB0FGPOdYDO1/P33wPxY/BikEtWb5wxh/iLndU1HHp76KZhsTH9Y0
+65bT5jMDmmNjZOriw8XEFKeRAQGbcyO8IGM/iLN3rMPzRA8gzbmm4WFrrPhU2Dz
fr7KLG2TLLu4sbIM7PaZWRqXQW5I5zFWVEevLrzI7D5GkpKZz6A4XRD+yY67JBN0
+nMHo+zann6p4wdGDApOyvmsYFRcTw1EuzAT912KrN3rNKSnTFozBHfWS93c7GR3
AvhCW/PG4y4notde4pB1ofzSqfMOX/PAIFQpVjqcOYKynORSmj8APUfpyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3wz9DydMK7R9f9KHp7mYMBs678MB8GA1UdIwQY
MBaAFGV+1vW7pjPVUmn90Fa89gxox7K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2Qt
MGI5Yzc2YzBkOTFjLzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2QtMGI5Yzc2YzBkOTFj
LzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqK+viME
gPtIs19Fzd0cLbfO7H8GdtqkTFnPamd7Ub/zatoSuhr4ikXMdS318nQ5hHaBSOC8
rV3ZS8yVID7zkIqPJTbda1hdys3FaIWMx3FGqYyqrGxusUV1PgRBKA3UOYHBmPW0
YkOah1LQrMgg8UlNFvbVGOO69mM6KjFg9asJqnkiiVGPzY3fGe4PXJbZPAMNUKTF
joJ7PepG2f5IXPssYiY/5QMUVywhWs+ux1WtqRPWWVgr0cFI9dzTXLTMiDDnHV6U
8KM7ono3/0rHNmSGYR/8en8PHqin5e8Zn4NjlhGyfbxP+i34V6n26TkGJIIgMF0Z
pxs71TQUdM/qPA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:34 2024 by rpki-client on console-fra.rpki-client.org