Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File:                     lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier:          ulpQWaOktt0DAA21SzmUa8xpbyTiHbLefhK9eNu41hY=
Subject key identifier:   6C:5C:C6:5E:CB:3F:87:AE:71:38:C5:45:0E:44:2B:38:CE:ED:3F:34
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer:       /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial:       019353BECA8BA7E156E9CDF65AECCD70AB83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number:          02E7
Signing time:             Fri 22 Nov 2024 12:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:32 +0000
Files and hashes:         1: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: bhD6fZs4Y/PqhDEvDfLQG6zx+HCwIz40aAbURzXSGMQ=)
                          2: oR7yCYxfsnJPS9sgiksnu946-yg.roa (hash: deS7g0GTgeawzn7QOz17bm+UO+6B6dP/XN+aoSgDsOs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:ca:8b:a7:e1:56:e9:cd:f6:5a:ec:cd:70:ab:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
        Validity
            Not Before: Nov 22 12:00:32 2024 GMT
            Not After : Nov 23 12:00:32 2024 GMT
        Subject: CN=6c5cc65ecb3f87ae7138c5450e442b38ceed3f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:c6:aa:02:09:2e:83:1e:2f:77:aa:22:cb:
                    20:fa:5e:35:30:75:5b:11:67:7d:68:fe:c8:77:81:
                    a9:d2:1b:c3:1e:5c:2a:b6:45:89:6d:61:60:68:be:
                    3e:c9:cc:8e:70:5a:a8:7e:f1:33:5f:04:8e:e0:16:
                    62:a1:e3:b5:91:ef:75:a6:73:30:c0:ce:ca:e2:bc:
                    e2:7f:e4:1e:66:ef:6f:9c:87:3f:22:4a:fe:55:5e:
                    cf:cd:15:37:c4:49:37:4a:6b:fd:68:54:08:b7:2c:
                    5a:ef:c2:26:c9:0d:b9:e0:5a:1d:70:e1:af:da:f6:
                    27:42:1b:5e:a5:8b:bf:aa:4e:c9:a3:62:72:93:df:
                    71:63:c2:a9:c2:8b:48:86:25:d2:d6:fc:f5:ae:41:
                    52:cd:91:53:31:d6:31:2c:96:8f:67:93:a2:63:41:
                    5c:16:88:dc:e1:31:90:c0:91:85:99:96:6f:fb:1f:
                    a7:10:f6:3b:7d:62:dd:a1:62:7a:a9:23:57:6c:26:
                    5d:c8:bf:6a:6f:d0:27:f1:6f:3d:17:21:bf:ab:13:
                    ec:13:21:8e:4a:a8:97:12:a3:7c:62:db:40:74:2a:
                    3a:ca:ab:33:0d:5d:f3:b2:56:57:84:57:80:06:d8:
                    1e:e7:57:24:e7:f7:b3:41:3b:a8:ef:e3:30:8c:39:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5C:C6:5E:CB:3F:87:AE:71:38:C5:45:0E:44:2B:38:CE:ED:3F:34
            X509v3 Authority Key Identifier:
                keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:e5:72:7b:7c:ae:2e:4d:7c:23:00:24:91:11:7a:0f:35:
         be:7d:7c:ac:f7:ca:ad:34:10:47:6a:0a:f5:cf:63:2c:d7:04:
         8c:24:10:58:b1:51:b8:c9:24:0d:cb:17:d4:4b:9f:5a:55:7b:
         5f:ea:de:6e:61:26:ee:03:d7:99:99:c1:ec:2d:e6:26:0a:dc:
         63:f2:09:a0:31:18:cf:68:60:60:31:a1:41:07:71:20:6e:34:
         a6:10:4c:04:39:51:74:d4:61:32:13:df:08:b4:7f:bc:c8:85:
         0d:92:61:f0:c3:32:d4:a7:2c:57:63:d6:2e:a3:26:8b:90:19:
         6d:f8:80:c7:07:1e:38:1c:85:e7:8a:dd:37:3d:e5:3f:bc:e0:
         a2:04:53:3f:66:cb:29:da:ff:57:7a:f6:45:6d:76:64:57:99:
         2b:fd:24:b5:ac:b1:9c:04:c1:7a:6b:99:7e:a1:b9:54:84:21:
         82:21:ef:3e:40:ce:2f:3b:b5:9d:86:28:9f:3c:5b:ac:bb:83:
         f4:05:7d:89:68:1a:d6:c9:7d:4d:55:43:d9:a9:37:61:71:e7:
         d1:d5:34:47:fa:25:f3:b1:78:5e:f7:ae:89:e9:76:fb:81:1a:
         89:93:39:b1:87:49:dc:25:f2:2b:83:8d:65:f0:50:8a:36:d7:
         f8:ca:de:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTvsqLp+FW6c32WuzNcKuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDQ3ZWIzMTk3YWEzMWU3ZTY4NDlmMTZhZjU1YWIyNTMw
MWZhODIwHhcNMjQxMTIyMTIwMDMyWhcNMjQxMTIzMTIwMDMyWjAzMTEwLwYDVQQD
Eyg2YzVjYzY1ZWNiM2Y4N2FlNzEzOGM1NDUwZTQ0MmIzOGNlZWQzZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMjGqgIJLoMeL3eqIssg+l41MHVb
EWd9aP7Id4Gp0hvDHlwqtkWJbWFgaL4+ycyOcFqofvEzXwSO4BZioeO1ke91pnMw
wM7K4rzif+QeZu9vnIc/Ikr+VV7PzRU3xEk3Smv9aFQItyxa78ImyQ254FodcOGv
2vYnQhtepYu/qk7Jo2Jyk99xY8KpwotIhiXS1vz1rkFSzZFTMdYxLJaPZ5OiY0Fc
Fojc4TGQwJGFmZZv+x+nEPY7fWLdoWJ6qSNXbCZdyL9qb9An8W89FyG/qxPsEyGO
SqiXEqN8YttAdCo6yqszDV3zslZXhFeABtge51ck5/ezQTuo7+MwjDmqqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxcxl7LP4eucTjFRQ5EKzjO7T80MB8GA1UdIwQY
MBaAFJREfrMZeqMefmhJ8Wr1WrJTAfqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQt
MjM4YmRlMGUxZWY3LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQtMjM4YmRlMGUxZWY3
LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLHlcnt8
ri5NfCMAJJEReg81vn18rPfKrTQQR2oK9c9jLNcEjCQQWLFRuMkkDcsX1EufWlV7
X+rebmEm7gPXmZnB7C3mJgrcY/IJoDEYz2hgYDGhQQdxIG40phBMBDlRdNRhMhPf
CLR/vMiFDZJh8MMy1KcsV2PWLqMmi5AZbfiAxwceOByF54rdNz3lP7zgogRTP2bL
Kdr/V3r2RW12ZFeZK/0ktayxnATBemuZfqG5VIQhgiHvPkDOLzu1nYYonzxbrLuD
9AV9iWga1sl9TVVD2ak3YXHn0dU0R/ol87F4Xveuiel2+4EaiZM5sYdJ3CXyK4ON
ZfBQijbX+MrejA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:27 2024 by rpki-client on console-fra.rpki-client.org