Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
File:                     9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json)
Hash identifier:          RIIEVUxMhtAFlzzdqFin9r5dKNB8WCdj2l6+k8ldrI8=
Subject key identifier:   04:ED:CA:6E:44:54:BD:BA:BD:DC:FC:81:18:FC:72:D2:C1:A2:EA:30
Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E
Certificate issuer:       /CN=f57766f0726cff8618af968258f5bb229e937c6e
Certificate serial:       019357D26DBD03CA54E5E0AF5696E5D25E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
Manifest number:          0A9E
Signing time:             Sat 23 Nov 2024 07:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:28 +0000
Files and hashes:         1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: G48atK8mne0+z2j8Dc/mXat/Ps3VF4uPgkyyD89ZluY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:6d:bd:03:ca:54:e5:e0:af:56:96:e5:d2:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e
        Validity
            Not Before: Nov 23 07:00:28 2024 GMT
            Not After : Nov 24 07:00:28 2024 GMT
        Subject: CN=04edca6e4454bdbabddcfc8118fc72d2c1a2ea30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:fd:28:42:09:a0:e2:e9:66:b0:94:66:30:
                    08:32:97:66:49:f3:39:4b:4c:80:de:66:d2:8e:00:
                    d7:8e:ea:28:a8:92:ce:08:cb:9e:4a:76:84:e3:79:
                    ce:c6:00:b0:cc:58:46:18:35:05:82:26:cc:72:92:
                    42:1a:67:d5:af:19:9d:92:85:39:b4:eb:c2:f6:41:
                    09:b8:4e:ce:bb:ee:94:ed:52:3e:fc:1e:ca:ec:8d:
                    bb:17:8f:3a:c1:87:70:c6:47:46:0f:94:f0:f0:65:
                    5e:23:a9:36:a9:ac:6b:82:c0:e1:f6:d6:d3:bf:09:
                    d8:da:7a:6e:18:bc:35:ee:64:ac:2a:be:75:09:58:
                    49:f1:14:09:65:2c:cb:c1:6d:d1:4d:69:bb:08:f3:
                    b2:3e:40:9e:7d:f5:7e:dd:d6:93:0f:49:97:3e:8f:
                    30:e3:2a:bf:c7:8d:ae:c6:42:15:aa:25:4e:2f:60:
                    a8:b4:51:01:52:7d:84:b7:b3:12:ec:be:d7:54:83:
                    1e:ca:7a:6c:1a:e3:8f:22:41:1b:8c:be:94:80:ef:
                    da:00:4e:d9:d9:ee:00:cc:2a:04:5a:79:93:74:65:
                    4c:bc:19:f1:1d:29:54:8d:8b:a7:ce:1c:ba:b2:55:
                    28:57:d4:49:27:ee:66:ea:d4:f8:51:4a:00:b9:d1:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:ED:CA:6E:44:54:BD:BA:BD:DC:FC:81:18:FC:72:D2:C1:A2:EA:30
            X509v3 Authority Key Identifier:
                keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:89:f8:41:07:c8:09:6a:67:bc:9a:30:b4:02:bd:e7:e1:
         9c:67:ef:de:3d:da:4a:7a:d9:b2:b7:d1:9a:09:f1:18:1b:9b:
         e1:2a:fd:05:2c:5a:ef:9f:1f:0c:a2:91:d4:e3:28:f5:9b:aa:
         73:99:8d:b9:3e:be:58:7d:35:16:c9:d1:89:fe:b4:c2:ab:86:
         78:4a:64:3e:66:ff:18:e0:7b:59:52:9d:28:1c:b2:be:00:3e:
         aa:32:a3:c6:c2:cb:ad:36:84:6d:1d:5d:ed:7f:46:60:14:21:
         ec:e6:6f:2b:f1:c9:a5:5a:9e:f2:c2:21:33:95:88:16:0d:ce:
         59:18:95:ce:41:57:9c:e1:d6:65:37:bc:7d:c0:fb:90:3c:90:
         80:6e:12:f8:b5:5e:0c:6a:ac:39:6e:12:af:e9:a4:96:27:53:
         e9:03:5a:ad:e7:b6:0a:03:72:45:84:8c:53:4c:32:a4:b0:ca:
         68:c0:67:af:b2:66:59:60:45:42:fd:99:4e:1c:ab:d2:d8:53:
         6d:74:81:97:83:a2:0a:98:d9:0d:0e:1e:cf:c9:21:ef:d3:63:
         42:9e:fc:8a:7f:1f:ea:32:2d:5a:8f:47:06:8b:c7:a9:5c:2f:
         c3:91:4d:98:c1:64:58:39:a7:3c:28:f6:5e:75:e6:06:3d:e8:
         5e:29:59:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0m29A8pU5eCvVpbl0l5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5
MzdjNmUwHhcNMjQxMTIzMDcwMDI4WhcNMjQxMTI0MDcwMDI4WjAzMTEwLwYDVQQD
EygwNGVkY2E2ZTQ0NTRiZGJhYmRkY2ZjODExOGZjNzJkMmMxYTJlYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1db9KEIJoOLpZrCUZjAIMpdmSfM5
S0yA3mbSjgDXjuooqJLOCMueSnaE43nOxgCwzFhGGDUFgibMcpJCGmfVrxmdkoU5
tOvC9kEJuE7Ou+6U7VI+/B7K7I27F486wYdwxkdGD5Tw8GVeI6k2qaxrgsDh9tbT
vwnY2npuGLw17mSsKr51CVhJ8RQJZSzLwW3RTWm7CPOyPkCeffV+3daTD0mXPo8w
4yq/x42uxkIVqiVOL2CotFEBUn2Et7MS7L7XVIMeynpsGuOPIkEbjL6UgO/aAE7Z
2e4AzCoEWnmTdGVMvBnxHSlUjYunzhy6slUoV9RJJ+5m6tT4UUoAudHb4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATtym5EVL26vdz8gRj8ctLBouowMB8GA1UdIwQY
MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt
YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1
LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV6J+EEH
yAlqZ7yaMLQCvefhnGfv3j3aSnrZsrfRmgnxGBub4Sr9BSxa758fDKKR1OMo9Zuq
c5mNuT6+WH01FsnRif60wquGeEpkPmb/GOB7WVKdKByyvgA+qjKjxsLLrTaEbR1d
7X9GYBQh7OZvK/HJpVqe8sIhM5WIFg3OWRiVzkFXnOHWZTe8fcD7kDyQgG4S+LVe
DGqsOW4Sr+mklidT6QNaree2CgNyRYSMU0wypLDKaMBnr7JmWWBFQv2ZThyr0thT
bXSBl4OiCpjZDQ4ez8kh79NjQp78in8f6jItWo9HBovHqVwvw5FNmMFkWDmnPCj2
XnXmBj3oXilZMQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:42 2024 by rpki-client on console-ams.rpki-client.org