Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File:                     1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier:          ratutXWLl3YFgPDf0sJau29sORkY+WW6GmUVStugq/o=
Subject key identifier:   4A:F0:16:9B:C4:D7:EB:F5:EE:25:B3:86:16:E7:D5:85:70:46:C1:3A
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer:       /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial:       0193549C5F59E70CBFCE60003D26D37E3EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:02:34 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:34 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:34 +0000
Files and hashes:         1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: Vh/Z2vGuSlai+WgV6/MRD4bjAnN3K5dS6XWJjzPo8Fs=)
                          2: mWcgUYzwcY21P3WT4JyVYaq5b28.roa (hash: LEPfK/SZ96vfo4FnLxAkn8Q4VMoOflW/bmtwNQo6Y78=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:5f:59:e7:0c:bf:ce:60:00:3d:26:d3:7e:3e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
        Validity
            Not Before: Nov 22 16:02:34 2024 GMT
            Not After : Nov 23 16:02:34 2024 GMT
        Subject: CN=4af0169bc4d7ebf5ee25b38616e7d5857046c13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:9d:f1:b0:d6:94:d0:7b:f2:fc:e5:d7:e4:
                    af:23:ef:ea:53:f8:cd:96:9d:60:7d:ce:7a:e0:d7:
                    b5:3a:36:14:86:80:b6:58:d8:a8:c8:20:04:6f:37:
                    0b:62:c1:a1:cf:57:7a:d9:b0:63:6c:45:dc:da:b6:
                    bb:c6:40:3c:e6:b1:cb:49:df:6f:74:be:ea:fd:54:
                    70:3f:fb:51:b0:77:5c:02:c6:41:59:ad:c5:91:86:
                    a0:8b:a2:64:91:61:90:e1:08:df:c2:7e:a7:f5:5e:
                    67:66:bf:09:4e:2f:07:79:78:9c:f1:26:0a:4b:3e:
                    5e:90:05:cf:ff:db:77:8a:22:c4:a9:37:8a:28:9b:
                    0d:db:24:0b:d7:c2:06:1f:6c:0f:2e:67:20:56:61:
                    53:20:97:68:f9:e6:34:53:9e:da:7b:27:1e:28:07:
                    0e:14:65:a4:fb:45:e3:47:df:62:f2:1e:55:63:d4:
                    ee:e0:21:ad:1d:8f:4d:66:02:bb:a1:18:b4:c7:ea:
                    d4:86:14:f2:44:06:28:d5:ed:05:31:57:26:9c:1a:
                    84:88:a8:fe:cf:c6:08:6f:ff:9e:31:8b:ea:af:e8:
                    16:47:a9:05:7b:ee:58:aa:af:1f:80:93:46:f2:d8:
                    3d:a2:33:ac:c3:7c:f3:01:cd:ed:57:21:e7:d2:6f:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:16:9B:C4:D7:EB:F5:EE:25:B3:86:16:E7:D5:85:70:46:C1:3A
            X509v3 Authority Key Identifier:
                keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:c3:80:f3:2d:a6:0d:93:ec:8d:bc:cd:b6:d8:56:c6:8e:
         86:b9:fb:8b:ad:38:cb:d7:28:48:97:a5:bc:09:fe:b1:21:99:
         62:9c:7c:f9:f9:df:df:56:46:ad:22:0e:0a:7c:dd:9c:3a:bd:
         ad:52:07:84:51:61:f4:55:2c:d1:cd:b2:f5:55:22:b5:86:24:
         6e:1e:72:2f:aa:4c:0a:a5:05:5c:28:0e:41:99:83:03:dc:2e:
         44:18:ba:5f:95:2e:8a:89:fa:75:c8:88:54:36:07:be:30:c3:
         42:d8:49:f8:ab:9d:a6:64:3b:f2:d1:ba:63:ad:49:10:f4:1c:
         fd:aa:a2:68:40:37:39:84:e7:76:16:59:47:72:07:c8:d7:06:
         ad:64:ed:dd:4d:2f:c1:02:e1:89:4f:ef:14:d8:0c:75:4a:e1:
         5f:41:43:1a:05:86:20:06:df:82:45:96:fc:6f:ea:a4:b8:36:
         c9:f5:85:5e:67:75:d8:b3:41:7d:b0:6b:d6:fc:70:81:8b:7f:
         4b:29:4b:e2:45:8a:fa:0c:4d:72:6a:b6:21:a8:aa:21:a4:1c:
         51:e5:13:18:94:65:28:e8:04:c1:fa:ce:5f:8c:6b:b7:ab:58:
         d4:ca:6f:51:a7:96:9c:02:e3:06:d5:08:cf:59:90:da:4d:18:
         ab:19:c4:9e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNUnF9Z5wy/zmAAPSbTfj7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NzVkZjEzYmY4YzFiYThiMTBlMmRhNDgwYWU2MWE1MzQ4
YWI4ZTkwHhcNMjQxMTIyMTYwMjM0WhcNMjQxMTIzMTYwMjM0WjAzMTEwLwYDVQQD
Eyg0YWYwMTY5YmM0ZDdlYmY1ZWUyNWIzODYxNmU3ZDU4NTcwNDZjMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ed8bDWlNB78vzl1+SvI+/qU/jN
lp1gfc564Ne1OjYUhoC2WNioyCAEbzcLYsGhz1d62bBjbEXc2ra7xkA85rHLSd9v
dL7q/VRwP/tRsHdcAsZBWa3FkYagi6JkkWGQ4Qjfwn6n9V5nZr8JTi8HeXic8SYK
Sz5ekAXP/9t3iiLEqTeKKJsN2yQL18IGH2wPLmcgVmFTIJdo+eY0U57aeyceKAcO
FGWk+0XjR99i8h5VY9Tu4CGtHY9NZgK7oRi0x+rUhhTyRAYo1e0FMVcmnBqEiKj+
z8YIb/+eMYvqr+gWR6kFe+5Yqq8fgJNG8tg9ojOsw3zzAc3tVyHn0m8AQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFErwFpvE1+v17iWzhhbn1YVwRsE6MB8GA1UdIwQY
MBaAFPh13xO/jBuosQ4tpICuYaU0irjpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IWGZFNy1NRzZpeERpMmtnSzVocFRTS3VPay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5
LWZjODNkYjEzZjNhMS8xLzEtSFhmRTctTUc2aXhEaTJrZ0s1aHBUU0t1T2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNiL2FiYWNmMS1mNGM2LTQ3MTAtOTNlOS1mYzgzZGIxM2Yz
YTEvMS8xLUhYZkU3LU1HNml4RGkya2dLNWhwVFNLdU9rLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbHD
gPMtpg2T7I28zbbYVsaOhrn7i604y9coSJelvAn+sSGZYpx8+fnf31ZGrSIOCnzd
nDq9rVIHhFFh9FUs0c2y9VUitYYkbh5yL6pMCqUFXCgOQZmDA9wuRBi6X5Uuion6
dciIVDYHvjDDQthJ+KudpmQ78tG6Y61JEPQc/aqiaEA3OYTndhZZR3IHyNcGrWTt
3U0vwQLhiU/vFNgMdUrhX0FDGgWGIAbfgkWW/G/qpLg2yfWFXmd12LNBfbBr1vxw
gYt/SylL4kWK+gxNcmq2IaiqIaQcUeUTGJRlKOgEwfrOX4xrt6tY1MpvUaeWnALj
BtUIz1mQ2k0YqxnEng==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:20 2024 by rpki-client on console-fra.rpki-client.org