Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File:                     1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier:          ND58tlHd4Cp0nH+E5hPCA0L9SqXHf2xZuVbBYja5F9I=
Subject key identifier:   84:AD:30:75:1B:76:7D:FB:61:D6:96:B9:1C:77:50:61:56:C8:36:7C
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer:       /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial:       0193568ABEFB85292C0A5002EB51F4D72DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number:          0E49
Signing time:             Sat 23 Nov 2024 01:02:33 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:33 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:33 +0000
Files and hashes:         1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: 5kHL4hWRHRFe2vSTm3lL3SL14ZcdM+FAnfX+MuiQjsU=)
                          2: 5BCqGihcYav6owe_uTJyxXL4UXQ.roa (hash: 8BUPypEDVex7HePz4UM70w0XUU7zeFNVYqgjx6LtV1w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:be:fb:85:29:2c:0a:50:02:eb:51:f4:d7:2d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
        Validity
            Not Before: Nov 23 01:02:33 2024 GMT
            Not After : Nov 24 01:02:33 2024 GMT
        Subject: CN=84ad30751b767dfb61d696b91c77506156c8367c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:62:82:d2:65:64:67:46:d5:b3:9a:49:4c:
                    6a:0c:f6:e8:2d:24:5d:aa:76:87:3b:58:3e:a2:02:
                    fe:c0:79:ce:5a:ad:58:7f:40:41:d3:41:7b:df:98:
                    66:15:8f:3b:65:48:a4:8f:30:39:e8:3b:4f:c5:ba:
                    f4:8b:d5:ba:f6:ab:74:2b:46:fb:49:43:53:81:2c:
                    21:83:27:07:e7:41:7d:73:86:23:b7:b2:56:1d:e7:
                    7f:7c:75:d3:1b:8f:7c:8b:6e:c1:6b:4d:fb:48:18:
                    aa:01:4a:ed:d5:f9:9a:65:dd:f9:bb:95:75:ac:87:
                    9d:08:b0:58:d0:46:ff:4f:38:80:7c:38:39:17:59:
                    de:01:95:60:05:05:ab:32:07:07:8c:71:40:e6:01:
                    b8:f0:33:e7:27:fb:94:93:a2:39:28:43:2a:14:f3:
                    09:46:08:a3:a0:e0:17:69:e4:4b:8f:2f:54:83:9b:
                    6e:dc:db:be:af:8d:d8:1b:72:95:bc:54:c6:c6:2d:
                    04:99:8f:b1:46:24:83:32:e6:26:78:2c:38:9a:20:
                    4a:9f:16:ff:33:5b:3e:b1:d0:2f:69:14:90:e8:d8:
                    de:be:be:95:af:ba:41:d7:7e:1c:49:13:20:46:6e:
                    4b:94:d2:23:77:2c:a3:81:a6:0b:69:c6:ab:37:43:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AD:30:75:1B:76:7D:FB:61:D6:96:B9:1C:77:50:61:56:C8:36:7C
            X509v3 Authority Key Identifier:
                keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:aa:d0:21:1f:fc:55:41:dc:c0:50:77:12:b3:b1:85:4f:
         e1:ed:b6:07:e4:7a:8e:43:17:af:1d:53:9f:61:f3:83:5d:eb:
         58:a6:98:6d:c2:23:29:de:67:f7:d8:7b:3e:e3:fa:3f:ed:b5:
         da:2d:1c:0e:78:ab:3b:5f:84:e1:e9:60:6c:0e:7e:de:85:75:
         7b:8e:6a:6c:ba:d4:5e:f5:98:e5:6e:c1:ac:f8:22:7c:a5:f9:
         c6:04:39:2b:96:8a:5d:fa:86:3b:dd:9f:ba:14:39:94:39:32:
         7f:f4:81:98:f3:1b:4f:2f:af:5f:84:1d:94:22:05:25:bd:6f:
         86:f3:e2:d8:9c:5c:1f:4f:db:22:22:6c:e6:a2:d7:db:09:5a:
         f8:19:c4:38:04:b4:34:6b:d7:64:b7:ac:84:0d:02:29:03:15:
         69:f8:67:1a:ee:87:f5:93:bd:f1:87:4b:7a:39:a0:61:40:3f:
         f6:0f:59:44:18:2d:17:20:10:4f:90:35:8b:91:04:87:46:f7:
         1e:6d:cb:25:11:0c:89:b6:b9:0f:e7:24:2f:bf:3a:02:5f:fb:
         0e:1a:20:10:8e:cc:fe:85:4a:59:41:bd:cd:bd:d0:96:0d:d2:
         6d:45:62:66:0b:0b:52:82:55:7f:4f:ff:f3:57:a7:13:11:56:
         6c:da:97:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWir77hSksClAC61H01y3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDYyMGVhNWRhZjhhNTRhYWVhMTdmMmNiOWVjZGYzNWQ3
ODUzMDYwHhcNMjQxMTIzMDEwMjMzWhcNMjQxMTI0MDEwMjMzWjAzMTEwLwYDVQQD
Eyg4NGFkMzA3NTFiNzY3ZGZiNjFkNjk2YjkxYzc3NTA2MTU2YzgzNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRhigtJlZGdG1bOaSUxqDPboLSRd
qnaHO1g+ogL+wHnOWq1Yf0BB00F735hmFY87ZUikjzA56DtPxbr0i9W69qt0K0b7
SUNTgSwhgycH50F9c4Yjt7JWHed/fHXTG498i27Ba037SBiqAUrt1fmaZd35u5V1
rIedCLBY0Eb/TziAfDg5F1neAZVgBQWrMgcHjHFA5gG48DPnJ/uUk6I5KEMqFPMJ
RgijoOAXaeRLjy9Ug5tu3Nu+r43YG3KVvFTGxi0EmY+xRiSDMuYmeCw4miBKnxb/
M1s+sdAvaRSQ6Njevr6Vr7pB134cSRMgRm5LlNIjdyyjgaYLacarN0NgsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIStMHUbdn37YdaWuRx3UGFWyDZ8MB8GA1UdIwQY
MBaAFNQGIOpdr4pUquoX8suezfNdeFMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUt
ZjA5ZTQ2YzY5YmY4LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83OThmYzUtYjU0Yy00MWMxLThhZmUtZjA5ZTQ2YzY5YmY4
LzEvMUFZZzZsMnZpbFNxNmhmeXk1N044MTE0VXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbOq0CEf
/FVB3MBQdxKzsYVP4e22B+R6jkMXrx1Tn2Hzg13rWKaYbcIjKd5n99h7PuP6P+21
2i0cDnirO1+E4elgbA5+3oV1e45qbLrUXvWY5W7BrPgifKX5xgQ5K5aKXfqGO92f
uhQ5lDkyf/SBmPMbTy+vX4QdlCIFJb1vhvPi2JxcH0/bIiJs5qLX2wla+BnEOAS0
NGvXZLeshA0CKQMVafhnGu6H9ZO98YdLejmgYUA/9g9ZRBgtFyAQT5A1i5EEh0b3
Hm3LJREMiba5D+ckL786Al/7DhogEI7M/oVKWUG9zb3Qlg3SbUViZgsLUoJVf0//
81enExFWbNqXLA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:35 2024 by rpki-client on console-ams.rpki-client.org