Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File:                     QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier:          gOSg6SCgGF0r/mMVSMS1TVm6AWJ3+ObTWq7AjxuszPw=
Subject key identifier:   F1:18:86:A6:83:6A:AE:0E:B8:E9:36:83:9C:98:3E:8F:29:4E:C6:7C
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer:       /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial:       01935387B356C03BE18A3B0E2FAF9E4E781B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number:          020F
Signing time:             Fri 22 Nov 2024 11:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:22 +0000
Files and hashes:         1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: uMDICm3GKmCZuM9QsJNUKSMrFP7f3fEvx2om0SvRWxo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:b3:56:c0:3b:e1:8a:3b:0e:2f:af:9e:4e:78:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
        Validity
            Not Before: Nov 22 11:00:22 2024 GMT
            Not After : Nov 23 11:00:22 2024 GMT
        Subject: CN=f11886a6836aae0eb8e936839c983e8f294ec67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:da:67:4b:82:1f:bb:3e:d1:62:14:17:bf:
                    65:65:ee:d1:ee:25:82:14:99:14:35:3e:16:4d:52:
                    0e:1e:be:99:26:ca:5d:0f:41:c6:ca:be:98:e4:08:
                    38:ad:d0:3e:03:66:be:3c:c7:83:0d:51:1f:d0:ec:
                    83:55:06:6f:ca:96:58:98:c1:4c:49:d2:57:c7:a8:
                    dd:68:9b:23:97:74:e6:10:05:86:87:8a:9e:a5:58:
                    00:1d:92:63:fa:36:7c:1c:52:b9:56:30:12:1d:92:
                    d8:78:e1:1d:cb:6d:fc:2f:05:c8:b5:22:63:77:52:
                    10:42:97:19:ef:d3:70:eb:4d:3a:75:03:56:99:cd:
                    96:ed:7f:a2:c2:1e:72:11:75:42:9f:76:d7:48:5e:
                    9b:48:bd:d2:03:a9:3e:9c:50:76:2d:67:3d:1f:f7:
                    57:29:95:6c:4f:71:df:4e:f3:7c:b9:e0:84:48:af:
                    96:f1:fe:86:02:f5:05:c7:80:5b:25:19:69:1a:72:
                    e0:d0:ca:3b:9a:ec:0e:3c:b9:0d:4e:2e:17:15:7c:
                    02:fb:6e:56:02:21:79:07:a0:13:48:ea:e7:4f:86:
                    53:8f:d3:b9:24:2f:35:97:89:1c:ef:f0:76:d1:47:
                    f5:0b:fc:aa:7f:ee:97:03:28:ae:ce:1a:58:9f:61:
                    38:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:86:A6:83:6A:AE:0E:B8:E9:36:83:9C:98:3E:8F:29:4E:C6:7C
            X509v3 Authority Key Identifier:
                keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:28:e3:cf:89:3e:a7:22:30:6b:52:aa:ce:ff:78:70:d4:c5:
         ba:9c:7c:59:07:31:3f:db:5b:7f:96:ef:4a:14:00:0b:34:51:
         72:ee:c9:d3:b7:a1:fc:a2:53:b8:be:fb:5e:e5:c8:e1:6c:e2:
         55:90:0e:c0:c5:f9:f7:aa:25:7c:5a:bb:2c:b3:f5:3c:c7:2b:
         58:5b:54:a3:e7:15:3a:d5:e6:85:12:e5:90:4b:43:cb:a6:60:
         53:ee:49:95:e8:d5:5d:34:fd:0c:d9:38:3d:1d:3b:3a:8b:d7:
         b2:d0:63:0c:f8:1e:ca:20:be:6a:58:47:f5:99:e8:d0:90:db:
         1e:63:fd:7f:22:a3:98:83:9e:20:80:24:cb:d7:be:39:b6:86:
         0b:57:71:86:6e:bf:bd:69:9d:95:40:a8:e6:67:99:24:ed:a3:
         10:ea:fe:4c:a9:d5:af:a3:10:14:8e:06:97:93:22:27:12:21:
         6a:5f:b5:71:a5:fa:11:41:cc:00:97:02:cb:14:d1:23:39:26:
         4b:47:7e:52:65:4e:06:a4:db:1f:9c:05:23:8f:1b:8d:8c:57:
         3c:40:61:83:1f:0b:3a:37:58:45:b6:d6:23:06:ab:69:de:3a:
         ad:1c:64:d7:62:de:5a:d7:27:2b:f4:09:2f:57:2f:1d:67:a4:
         39:e6:36:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTh7NWwDvhijsOL6+eTngbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy
ZWJlOGUwHhcNMjQxMTIyMTEwMDIyWhcNMjQxMTIzMTEwMDIyWjAzMTEwLwYDVQQD
EyhmMTE4ODZhNjgzNmFhZTBlYjhlOTM2ODM5Yzk4M2U4ZjI5NGVjNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfaZ0uCH7s+0WIUF79lZe7R7iWC
FJkUNT4WTVIOHr6ZJspdD0HGyr6Y5Ag4rdA+A2a+PMeDDVEf0OyDVQZvypZYmMFM
SdJXx6jdaJsjl3TmEAWGh4qepVgAHZJj+jZ8HFK5VjASHZLYeOEdy238LwXItSJj
d1IQQpcZ79Nw6006dQNWmc2W7X+iwh5yEXVCn3bXSF6bSL3SA6k+nFB2LWc9H/dX
KZVsT3HfTvN8ueCESK+W8f6GAvUFx4BbJRlpGnLg0Mo7muwOPLkNTi4XFXwC+25W
AiF5B6ATSOrnT4ZTj9O5JC81l4kc7/B20Uf1C/yqf+6XAyiuzhpYn2E49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEYhqaDaq4OuOk2g5yYPo8pTsZ8MB8GA1UdIwQY
MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt
ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0
LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyjjz4k+
pyIwa1Kqzv94cNTFupx8WQcxP9tbf5bvShQACzRRcu7J07eh/KJTuL77XuXI4Wzi
VZAOwMX596olfFq7LLP1PMcrWFtUo+cVOtXmhRLlkEtDy6ZgU+5JlejVXTT9DNk4
PR07OovXstBjDPgeyiC+alhH9Zno0JDbHmP9fyKjmIOeIIAky9e+ObaGC1dxhm6/
vWmdlUCo5meZJO2jEOr+TKnVr6MQFI4Gl5MiJxIhal+1caX6EUHMAJcCyxTRIzkm
S0d+UmVOBqTbH5wFI48bjYxXPEBhgx8LOjdYRbbWIwarad46rRxk12LeWtcnK/QJ
L1cvHWekOeY28Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:45 2024 by rpki-client on console-ams.rpki-client.org