Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
File:                     DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json)
Hash identifier:          IT+x8nqNGNOJwF0gTadgunfjkYiVcGIX5ROyl8Q9OpI=
Subject key identifier:   74:F5:DE:AD:96:B8:2D:E6:8D:E2:80:FB:E7:26:E0:BA:5A:60:47:DB
Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90
Certificate issuer:       /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
Certificate serial:       0194072179FC300F71D5E28F9063389D8D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
Manifest number:          0FED
Signing time:             Fri 27 Dec 2024 08:00:21 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:21 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:21 +0000
Files and hashes:         1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: SdWQg96XkdMNuHCM2UiTPBkmLmj3of0QXOIMZQLnUh8=)
                          2: Vw0gxgrVjseEsYjxkJmafOCVMYc.roa (hash: qHUjkRcpUNGtxjSW9aGFDK6QrJix5PdYvYk+USpXq5Y=)
                          3: qBoWOQhY79uLzKD0s5WZDK0R_VY.roa (hash: IK0ivmobAUCYRuGTZBeZDMe1B4jQFZ9fl0pfVJZgmdQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:79:fc:30:0f:71:d5:e2:8f:90:63:38:9d:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990
        Validity
            Not Before: Dec 27 08:00:21 2024 GMT
            Not After : Dec 28 08:00:21 2024 GMT
        Subject: CN=74f5dead96b82de68de280fbe726e0ba5a6047db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:9f:13:87:57:38:ce:61:d3:9a:1a:16:77:
                    6b:72:7c:fc:73:3a:b3:56:7a:db:df:3b:fd:3f:17:
                    dc:5d:a2:1a:42:60:a2:8d:1b:e1:44:0f:f8:1c:1f:
                    45:7e:11:3a:e0:e2:6c:5b:f8:fd:af:1f:04:57:a7:
                    57:e7:71:55:b5:b3:fe:b4:f9:78:38:0d:65:d9:98:
                    c2:e1:da:40:dd:d2:4d:85:ca:87:60:ff:2d:40:6e:
                    c0:d3:91:ad:49:4a:35:7e:9a:21:e0:51:df:10:1d:
                    38:ec:fc:09:a4:80:54:ae:54:75:c5:24:67:52:83:
                    b1:2f:a8:5b:56:a7:da:5f:1f:08:3d:e7:94:6c:19:
                    34:d6:bc:ed:c3:cc:5d:27:08:ec:89:69:02:d2:c2:
                    fe:e7:b6:5c:e2:9b:b8:a0:36:75:b5:ae:c3:94:3b:
                    2e:40:be:25:a4:bc:cc:52:d5:ed:dc:aa:81:9b:5b:
                    fe:17:f2:58:09:21:b5:42:09:2c:de:da:35:bb:48:
                    e8:1f:60:45:84:4e:9b:f0:4b:7d:2b:b4:e3:66:d9:
                    ae:ae:12:2d:31:36:d8:68:05:f4:ac:a2:91:cb:06:
                    54:5d:58:68:d5:39:99:e8:f8:45:fd:ae:96:d4:e0:
                    86:82:e2:72:1b:bf:b7:73:45:81:c7:f8:ce:6a:8a:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F5:DE:AD:96:B8:2D:E6:8D:E2:80:FB:E7:26:E0:BA:5A:60:47:DB
            X509v3 Authority Key Identifier:
                keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:10:e6:90:fa:b7:ec:58:49:fa:03:a3:0a:4b:f4:c6:35:
         15:84:67:1c:2e:fc:29:07:e2:49:f0:2b:71:de:90:d4:2d:dd:
         ac:af:ef:29:a7:7f:03:37:93:e8:78:29:f0:a8:9d:2f:bd:d9:
         40:15:13:65:6d:a8:e5:29:5e:6b:37:ec:83:15:24:5e:56:0a:
         82:d1:8a:c8:12:8c:7a:71:21:70:e0:0f:22:22:44:5b:04:6e:
         d7:cb:7f:16:92:d5:31:d8:60:93:55:cb:b6:70:50:e5:7c:93:
         b8:fa:6b:67:49:5c:90:2d:e3:bd:03:9c:01:fc:5f:7c:26:47:
         77:c5:4f:5f:b1:29:f7:57:cf:47:e8:9f:53:9f:30:b9:39:78:
         31:c6:c1:3a:b1:0b:7a:87:40:c1:8e:0c:44:fd:14:3b:0f:56:
         78:51:1a:ff:18:31:20:81:dc:6c:38:fc:18:57:4e:60:8a:20:
         78:e4:2f:c5:9d:ad:a4:17:9f:c5:74:cb:ab:a6:4f:34:22:44:
         53:f0:dc:22:51:09:2f:b8:e8:27:e9:0b:55:4a:74:6b:48:ab:
         90:ec:ed:6d:a5:46:0d:af:48:6a:ec:84:4a:7f:64:8a:e7:f6:
         30:2a:e0:84:3e:84:34:66:b7:eb:f1:e0:02:48:fe:d5:1f:21:
         95:7b:bf:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHIXn8MA9x1eKPkGM4nY2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0
MGQ5OTAwHhcNMjQxMjI3MDgwMDIxWhcNMjQxMjI4MDgwMDIxWjAzMTEwLwYDVQQD
Eyg3NGY1ZGVhZDk2YjgyZGU2OGRlMjgwZmJlNzI2ZTBiYTVhNjA0N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SafE4dXOM5h05oaFndrcnz8czqz
Vnrb3zv9PxfcXaIaQmCijRvhRA/4HB9FfhE64OJsW/j9rx8EV6dX53FVtbP+tPl4
OA1l2ZjC4dpA3dJNhcqHYP8tQG7A05GtSUo1fpoh4FHfEB047PwJpIBUrlR1xSRn
UoOxL6hbVqfaXx8IPeeUbBk01rztw8xdJwjsiWkC0sL+57Zc4pu4oDZ1ta7DlDsu
QL4lpLzMUtXt3KqBm1v+F/JYCSG1Qgks3to1u0joH2BFhE6b8Et9K7TjZtmurhIt
MTbYaAX0rKKRywZUXVho1TmZ6PhF/a6W1OCGguJyG7+3c0WBx/jOaoo/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT13q2WuC3mjeKA++cm4LpaYEfbMB8GA1UdIwQY
MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt
MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm
LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKYQ5pD6
t+xYSfoDowpL9MY1FYRnHC78KQfiSfArcd6Q1C3drK/vKad/AzeT6Hgp8KidL73Z
QBUTZW2o5SleazfsgxUkXlYKgtGKyBKMenEhcOAPIiJEWwRu18t/FpLVMdhgk1XL
tnBQ5XyTuPprZ0lckC3jvQOcAfxffCZHd8VPX7Ep91fPR+ifU58wuTl4McbBOrEL
eodAwY4MRP0UOw9WeFEa/xgxIIHcbDj8GFdOYIogeOQvxZ2tpBefxXTLq6ZPNCJE
U/DcIlEJL7joJ+kLVUp0a0irkOztbaVGDa9IauyESn9kiuf2MCrghD6ENGa36/Hg
Akj+1R8hlXu/lQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:09 2024 by rpki-client on console-fra.rpki-client.org