Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File:                     0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier:          TXwA2nzjuieLYoABrsN6D8fQiuGAa5aW6g/BeuycyQI=
Subject key identifier:   CA:1E:FD:DE:6C:9D:58:8D:B5:4A:DF:F3:5F:AC:0D:E1:4A:FE:E2:C8
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer:       /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial:       0193550845B94D8CE1F63BB12B9F0EE0490D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number:          07D0
Signing time:             Fri 22 Nov 2024 18:00:25 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:25 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:25 +0000
Files and hashes:         1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: PZNGKRiXVonKUJGQsVVr9Cf2S7UWFmHrQUEIYoUxo7A=)
                          2: M_tR2X10EX-4-S704IWpXen8yog.roa (hash: 4HD/71bbT17LEJPQhCm3IuLNj8atAquwxF1iQ+f+p8c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:45:b9:4d:8c:e1:f6:3b:b1:2b:9f:0e:e0:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
        Validity
            Not Before: Nov 22 18:00:25 2024 GMT
            Not After : Nov 23 18:00:25 2024 GMT
        Subject: CN=ca1efdde6c9d588db54adff35fac0de14afee2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:64:65:ad:fe:6d:a7:d6:be:60:7e:01:a5:
                    c0:df:49:82:bb:7d:2c:95:47:bc:08:db:c0:0a:fc:
                    f4:59:07:cd:f1:5a:db:80:e2:b6:33:da:da:3d:e6:
                    88:c2:87:54:88:0d:98:2c:f8:c2:1c:c3:1d:61:3f:
                    48:04:8d:6c:6b:be:d9:61:59:3f:fa:87:66:05:0d:
                    f9:3f:ac:61:9e:b5:27:0f:84:37:0f:8c:f9:36:8d:
                    97:e9:e5:59:a0:14:84:86:c6:cb:e5:59:bb:53:fd:
                    15:33:fd:b6:56:8e:a7:e7:11:fc:19:74:59:d9:41:
                    de:5c:a4:37:9e:54:ca:0e:56:48:29:86:02:e9:28:
                    c3:b8:9e:fb:b6:20:33:fe:28:a6:9b:61:d5:00:ff:
                    0f:f8:d5:75:40:3b:e0:e7:c1:a9:f3:2c:75:e0:65:
                    6c:02:ed:a5:a2:15:5f:08:21:80:ff:b2:e6:2c:fb:
                    d4:b2:7b:07:e9:ba:cb:66:72:e1:d0:80:06:0a:33:
                    2a:e0:b4:02:89:7b:f8:f3:c8:4a:b8:fb:46:d9:50:
                    1a:bf:cd:07:8f:e9:b7:13:bf:9e:f5:15:fe:cb:c6:
                    57:a6:a3:09:55:1a:90:4a:46:7d:ea:3f:9c:6b:97:
                    0b:71:d9:bb:59:16:28:e5:20:27:d2:20:9e:e2:74:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1E:FD:DE:6C:9D:58:8D:B5:4A:DF:F3:5F:AC:0D:E1:4A:FE:E2:C8
            X509v3 Authority Key Identifier:
                keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:f7:b2:05:76:e5:3b:f1:83:da:f7:74:d9:47:eb:84:62:6d:
         2d:9b:cd:13:5a:31:53:f1:8c:31:6d:ed:12:36:b4:ce:9e:7f:
         4c:ad:d3:e3:b1:07:b9:f5:a9:a1:b5:d9:3b:e2:74:70:b0:18:
         ff:83:e3:bd:e8:da:12:65:eb:de:5d:c2:2c:90:74:f1:22:93:
         82:e1:43:b0:5c:cb:30:88:cc:20:e8:43:f8:ca:5a:71:6b:c7:
         4e:b3:85:d0:8a:10:cf:8c:3f:a8:f6:7d:04:bd:70:13:2b:f9:
         7f:f9:7e:56:4f:f2:d7:84:6e:33:97:92:6d:88:f7:d0:4f:03:
         0e:34:ab:9e:b4:bc:16:19:09:7e:9b:26:32:87:95:5b:92:cc:
         e6:77:ba:69:83:52:7e:c4:30:ab:3c:3a:70:31:b1:39:e8:75:
         d1:e4:45:6c:c8:21:f5:29:a9:54:f0:be:9d:e0:fc:26:5b:50:
         f4:fe:d4:e7:a9:62:34:e0:5a:36:78:ae:d1:12:16:9b:a6:1a:
         9a:10:b1:0a:58:14:2a:af:72:12:1d:ef:92:64:56:4c:c3:bd:
         e6:a1:32:76:ee:6d:14:d7:54:32:4b:29:87:c9:f9:1f:b0:a2:
         9c:6e:46:30:ed:f9:bb:6f:a6:06:d5:a9:ef:20:d7:84:c1:8e:
         f0:7d:9f:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCEW5TYzh9juxK58O4EkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjk3ODllMWI1OWZhMmYyYzUwY2UxZThlMTJlYjk3NjU1
YmJjZGQwHhcNMjQxMTIyMTgwMDI1WhcNMjQxMTIzMTgwMDI1WjAzMTEwLwYDVQQD
EyhjYTFlZmRkZTZjOWQ1ODhkYjU0YWRmZjM1ZmFjMGRlMTRhZmVlMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6dkZa3+bafWvmB+AaXA30mCu30s
lUe8CNvACvz0WQfN8VrbgOK2M9raPeaIwodUiA2YLPjCHMMdYT9IBI1sa77ZYVk/
+odmBQ35P6xhnrUnD4Q3D4z5No2X6eVZoBSEhsbL5Vm7U/0VM/22Vo6n5xH8GXRZ
2UHeXKQ3nlTKDlZIKYYC6SjDuJ77tiAz/iimm2HVAP8P+NV1QDvg58Gp8yx14GVs
Au2lohVfCCGA/7LmLPvUsnsH6brLZnLh0IAGCjMq4LQCiXv488hKuPtG2VAav80H
j+m3E7+e9RX+y8ZXpqMJVRqQSkZ96j+ca5cLcdm7WRYo5SAn0iCe4nTj6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoe/d5snViNtUrf81+sDeFK/uLIMB8GA1UdIwQY
MBaAFNL5eJ4bWfovLFDOHo4S65dlW7zdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGIt
YmM1YWI4MTk4N2YwLzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81ODA3NjktYTljNC00OTlhLWI5ZGItYmM1YWI4MTk4N2Yw
LzEvMHZsNG5odFotaThzVU00ZWpoTHJsMlZidk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxveyBXbl
O/GD2vd02UfrhGJtLZvNE1oxU/GMMW3tEja0zp5/TK3T47EHufWpobXZO+J0cLAY
/4PjvejaEmXr3l3CLJB08SKTguFDsFzLMIjMIOhD+MpacWvHTrOF0IoQz4w/qPZ9
BL1wEyv5f/l+Vk/y14RuM5eSbYj30E8DDjSrnrS8FhkJfpsmMoeVW5LM5ne6aYNS
fsQwqzw6cDGxOeh10eRFbMgh9SmpVPC+neD8JltQ9P7U56liNOBaNniu0RIWm6Ya
mhCxClgUKq9yEh3vkmRWTMO95qEydu5tFNdUMksph8n5H7CinG5GMO35u2+mBtWp
7yDXhMGO8H2faA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:49 2024 by rpki-client on console-ams.rpki-client.org