Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File:                     FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier:          YTr8MoCv+/S9zu0H+d8C1D9lOz4RLzBbdijJRBjHTlU=
Subject key identifier:   D7:14:B5:06:7E:54:C9:EA:42:D3:AF:FF:2B:0F:3B:2D:32:AD:33:D2
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer:       /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial:       0193549C14D9B05EE8D9019094F7659B6B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number:          74
Signing time:             Fri 22 Nov 2024 16:02:15 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:15 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:15 +0000
Files and hashes:         1: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: ksCCfGLgCw/TlHubPQKLcKLynwZdL9Z13Xf/N7Nawnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:14:d9:b0:5e:e8:d9:01:90:94:f7:65:9b:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
        Validity
            Not Before: Nov 22 16:02:15 2024 GMT
            Not After : Nov 23 16:02:15 2024 GMT
        Subject: CN=d714b5067e54c9ea42d3afff2b0f3b2d32ad33d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:80:7c:03:2d:02:aa:7e:70:93:ac:a2:ae:
                    64:ff:de:58:58:fe:df:db:56:7d:09:9f:3c:ca:76:
                    e7:aa:4f:69:94:c5:51:b1:c1:25:d4:d4:43:56:a0:
                    44:3d:06:09:70:40:b8:39:36:2d:0a:12:16:33:f4:
                    b0:80:ed:51:f7:9b:a4:e2:13:a1:64:66:6b:8d:d9:
                    91:7d:da:60:64:39:9d:1b:2b:4b:cd:e1:0e:84:f6:
                    0f:48:86:2f:34:ef:bf:a3:59:26:2e:b9:36:10:3d:
                    9e:b0:01:7a:2e:7a:54:60:3a:f0:df:f1:89:65:f1:
                    0f:fb:96:12:11:6e:a1:23:83:e6:ae:b4:af:5e:50:
                    7b:13:d3:56:7d:53:35:f9:6d:fd:f0:17:cb:4f:b2:
                    d1:1e:c8:d1:9b:ef:85:98:3d:f7:0c:a5:44:cd:0c:
                    0d:27:5c:6d:1d:a2:59:88:ec:1c:48:29:bf:b2:60:
                    e1:30:0f:52:f3:32:ea:40:5c:9a:62:4c:a4:20:d0:
                    16:65:4a:84:9d:ad:71:95:83:74:d6:7e:89:dc:73:
                    ce:5f:9a:8c:e7:f7:47:b6:a8:03:cc:74:ab:e0:49:
                    02:ed:52:07:a1:85:2b:6a:b4:e3:03:31:77:20:ec:
                    d6:bf:31:6a:ab:5c:8a:02:f9:10:f4:58:4e:8b:81:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:B5:06:7E:54:C9:EA:42:D3:AF:FF:2B:0F:3B:2D:32:AD:33:D2
            X509v3 Authority Key Identifier:
                keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:cd:4d:57:a7:fa:b1:67:cc:5c:d6:f5:7d:45:c8:b8:85:
         20:60:d6:28:56:b1:64:ad:33:79:35:ef:19:8c:6b:5d:a7:70:
         ba:16:4a:cc:ef:23:63:ae:88:e2:d1:65:d2:23:a9:2a:58:8e:
         e0:01:e5:4e:41:74:3c:2c:fd:9c:1c:84:59:39:27:ce:0f:f3:
         84:3f:24:4c:1e:c3:75:d4:bf:95:36:fb:ac:31:b9:79:85:40:
         dc:a2:ac:b8:40:1d:f4:d8:d4:5e:f8:dc:dc:3c:aa:17:4c:dd:
         ff:5d:7b:fe:68:59:1a:95:60:9e:0c:07:35:59:79:87:3f:ec:
         02:de:4c:b7:0b:f3:c3:56:d3:57:63:21:69:df:93:a8:cb:47:
         5f:1b:88:4e:c8:31:32:0d:69:10:fb:27:09:bf:40:86:31:a5:
         15:9e:e1:32:6c:0e:08:b7:e0:5b:90:f1:d9:73:cf:f7:14:cd:
         c7:9f:05:6b:18:c9:1a:c5:0c:2a:ec:10:b4:3d:3f:1f:84:b2:
         cd:06:dd:27:10:c9:99:15:62:69:c9:29:4e:ba:96:59:b1:3e:
         67:71:63:0a:48:42:c1:77:87:5c:9b:31:75:56:8b:52:11:61:
         9e:68:86:53:28:67:08:f8:26:27:e4:06:77:3e:e0:46:be:9d:
         24:6d:66:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnBTZsF7o2QGQlPdlm2smMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YjE5OGI2ZWUzYWY2OGRlYmMyMzQ3YTVlOThmNzExZmIz
MGYyOGIwHhcNMjQxMTIyMTYwMjE1WhcNMjQxMTIzMTYwMjE1WjAzMTEwLwYDVQQD
EyhkNzE0YjUwNjdlNTRjOWVhNDJkM2FmZmYyYjBmM2IyZDMyYWQzM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxSAfAMtAqp+cJOsoq5k/95YWP7f
21Z9CZ88ynbnqk9plMVRscEl1NRDVqBEPQYJcEC4OTYtChIWM/SwgO1R95uk4hOh
ZGZrjdmRfdpgZDmdGytLzeEOhPYPSIYvNO+/o1kmLrk2ED2esAF6LnpUYDrw3/GJ
ZfEP+5YSEW6hI4PmrrSvXlB7E9NWfVM1+W398BfLT7LRHsjRm++FmD33DKVEzQwN
J1xtHaJZiOwcSCm/smDhMA9S8zLqQFyaYkykINAWZUqEna1xlYN01n6J3HPOX5qM
5/dHtqgDzHSr4EkC7VIHoYUrarTjAzF3IOzWvzFqq1yKAvkQ9FhOi4EXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcUtQZ+VMnqQtOv/ysPOy0yrTPSMB8GA1UdIwQY
MBaAFBaxmLbuOvaN68I0el6Y9xH7MPKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDct
NDQ4MmFkYTIzMmUzLzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDctNDQ4MmFkYTIzMmUz
LzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe3NTVen
+rFnzFzW9X1FyLiFIGDWKFaxZK0zeTXvGYxrXadwuhZKzO8jY66I4tFl0iOpKliO
4AHlTkF0PCz9nByEWTknzg/zhD8kTB7DddS/lTb7rDG5eYVA3KKsuEAd9NjUXvjc
3DyqF0zd/117/mhZGpVgngwHNVl5hz/sAt5Mtwvzw1bTV2Mhad+TqMtHXxuITsgx
Mg1pEPsnCb9AhjGlFZ7hMmwOCLfgW5Dx2XPP9xTNx58FaxjJGsUMKuwQtD0/H4Sy
zQbdJxDJmRViackpTrqWWbE+Z3FjCkhCwXeHXJsxdVaLUhFhnmiGUyhnCPgmJ+QG
dz7gRr6dJG1mmw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:15 2024 by rpki-client on console-fra.rpki-client.org