Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
File:                     6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft (raw, json)
Hash identifier:          X1zwJryRzt1JnUyvdpcGTleQUjDzDzzig0MRW6q21Qw=
Subject key identifier:   14:B0:30:C4:BD:FF:C4:6A:E7:B2:0B:31:6D:1E:07:63:C8:48:A6:93
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       01935764C2CCB9DBEBAE8A143F91472EB6E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
Manifest number:          0A41
Signing time:             Sat 23 Nov 2024 05:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:41 +0000
Files and hashes:         1: 6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl (hash: //2GTFhDW3ynSdYjIWWoCbkTyLM+8bBE2Hw6iawA4SE=)
                          2: n0MjsIN9l0WD2XsxevYyZnOXA_o.roa (hash: P44x0gNe4pn15BIF2Z+765NjqLelGSc0UYDGu3pvOsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:c2:cc:b9:db:eb:ae:8a:14:3f:91:47:2e:b6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: Nov 23 05:00:41 2024 GMT
            Not After : Nov 24 05:00:41 2024 GMT
        Subject: CN=14b030c4bdffc46ae7b20b316d1e0763c848a693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:61:24:de:e3:70:fb:02:3b:8c:b4:de:95:
                    a2:2c:e1:ce:65:50:67:cd:b2:08:f1:5b:ea:ad:8c:
                    4d:5c:d0:78:af:8a:bc:a0:85:00:c6:2d:58:81:2b:
                    97:22:dc:41:d0:18:9f:2b:4b:61:00:0b:92:e3:79:
                    37:16:5f:ce:83:2a:72:45:ed:6e:17:c6:33:3d:62:
                    a0:2e:60:53:b1:c0:7b:30:f9:dd:59:dc:7b:c7:24:
                    19:e3:ce:27:7c:a0:56:c8:5f:34:12:5e:65:40:b1:
                    85:9c:53:10:ed:6e:6d:b5:0a:04:ca:64:07:0d:32:
                    77:32:79:a9:20:99:bf:bc:ad:6c:18:df:a3:d0:ef:
                    a9:51:d6:02:13:b5:8b:a9:12:5e:8b:34:64:e9:2b:
                    71:3e:f7:22:37:3f:98:b6:cf:d8:ad:9b:7c:b1:65:
                    f0:4f:b8:c7:19:7d:6f:8f:6f:8f:e9:4f:4c:4c:5d:
                    00:b6:ab:d0:f1:55:97:07:99:7f:6e:f9:79:a8:cf:
                    69:44:96:ce:9f:cc:75:fd:de:67:2d:b1:82:d5:43:
                    af:19:86:e7:81:4e:04:1b:5b:6d:1b:5d:0e:09:1a:
                    33:43:9a:55:29:2e:7a:fb:b6:c7:58:fc:d2:c3:4a:
                    e0:d2:de:41:b1:23:cc:5f:e5:ad:f2:c9:5d:62:bf:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:30:C4:BD:FF:C4:6A:E7:B2:0B:31:6D:1E:07:63:C8:48:A6:93
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:85:94:ad:5e:19:ee:83:61:97:a9:fb:69:a3:a1:2b:05:
         33:aa:6e:c3:26:4c:44:2e:47:da:28:14:a5:5c:c4:a4:76:4f:
         68:26:f3:3b:56:c4:2c:b2:93:ee:c4:d6:be:36:58:85:1f:35:
         45:6c:2a:d6:3d:d4:3c:4b:a0:75:9c:5c:ae:37:82:08:40:ff:
         ee:fc:45:bb:19:64:fe:1b:df:81:4e:c0:2c:a9:e9:26:4a:b3:
         d2:42:e6:47:4c:46:ca:16:fc:a5:f6:33:33:47:4f:f8:3f:1f:
         c2:1b:64:c2:87:02:bb:7e:36:5a:32:22:fe:d4:a7:a3:ed:7c:
         70:c2:f8:6a:ce:ba:e8:3e:f1:fc:7f:66:68:d4:b5:fc:87:b3:
         bc:b4:13:78:61:b2:26:f2:e4:dd:d2:41:ce:18:0d:34:05:96:
         a5:17:66:f3:84:36:e1:fe:85:3c:d3:6e:8e:27:7b:63:ec:32:
         8d:e3:98:80:68:1e:10:a4:d5:20:2f:d9:85:d1:53:f4:15:97:
         fe:41:29:1d:3b:bf:97:bd:3d:b2:69:b5:31:73:e2:97:79:e2:
         96:6d:40:96:ce:90:50:37:ab:2f:f9:15:74:72:9d:a2:a1:44:
         21:cb:c6:e9:a4:90:84:a8:a9:62:b6:e2:62:05:1b:25:7a:cc:
         ea:f5:82:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZMLMudvrrooUP5FHLrbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjcxNDQzOTA1Zjk0MGIxMzhkOWQ0YjRhMzQ4N2NiZmJk
MDIxZTMwHhcNMjQxMTIzMDUwMDQxWhcNMjQxMTI0MDUwMDQxWjAzMTEwLwYDVQQD
EygxNGIwMzBjNGJkZmZjNDZhZTdiMjBiMzE2ZDFlMDc2M2M4NDhhNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApURhJN7jcPsCO4y03pWiLOHOZVBn
zbII8VvqrYxNXNB4r4q8oIUAxi1YgSuXItxB0BifK0thAAuS43k3Fl/OgypyRe1u
F8YzPWKgLmBTscB7MPndWdx7xyQZ484nfKBWyF80El5lQLGFnFMQ7W5ttQoEymQH
DTJ3MnmpIJm/vK1sGN+j0O+pUdYCE7WLqRJeizRk6StxPvciNz+Yts/YrZt8sWXw
T7jHGX1vj2+P6U9MTF0AtqvQ8VWXB5l/bvl5qM9pRJbOn8x1/d5nLbGC1UOvGYbn
gU4EG1ttG10OCRozQ5pVKS56+7bHWPzSw0rg0t5BsSPMX+Wt8sldYr9CPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSwMMS9/8Rq57ILMW0eB2PISKaTMB8GA1UdIwQY
MBaAFOgnFEOQX5QLE42dS0o0h8v70CHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUt
NTdjN2U2MTk5YjEyLzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNDg3ZGEtNGQyYS00YjRkLWJmZTUtNTdjN2U2MTk5YjEy
LzEvNkNjVVE1QmZsQXNUaloxTFNqU0h5X3ZRSWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaceFlK1e
Ge6DYZep+2mjoSsFM6puwyZMRC5H2igUpVzEpHZPaCbzO1bELLKT7sTWvjZYhR81
RWwq1j3UPEugdZxcrjeCCED/7vxFuxlk/hvfgU7ALKnpJkqz0kLmR0xGyhb8pfYz
M0dP+D8fwhtkwocCu342WjIi/tSno+18cML4as666D7x/H9maNS1/IezvLQTeGGy
JvLk3dJBzhgNNAWWpRdm84Q24f6FPNNujid7Y+wyjeOYgGgeEKTVIC/ZhdFT9BWX
/kEpHTu/l709smm1MXPil3nilm1Als6QUDerL/kVdHKdoqFEIcvG6aSQhKipYrbi
YgUbJXrM6vWCbg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:41 2024 by rpki-client on console-fra.rpki-client.org