Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File:                     k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier:          ORCUfsfNZ71vqA9UTP3tntXtUnkDPRTef/0I/hKIyKE=
Subject key identifier:   07:6A:8F:53:0A:C2:71:0F:40:EF:FD:A3:4B:A7:5B:5E:56:A0:21:71
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer:       /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial:       0193568B2559DFDF777B87C15B106CDED559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number:          0BCB
Signing time:             Sat 23 Nov 2024 01:02:59 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:59 +0000
Files and hashes:         1: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: 6Xg2GIHT0O/dvTDxMRjSm458bHw/FKlXXsFyEmphiB0=)
                          2: vSFrHdE5yQxJdJeGzEMuWnp9E5U.roa (hash: 67WpJMIoQ0bI5lvuDKx3m+hoHpr7MT3Tnm6JsCOmbTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:25:59:df:df:77:7b:87:c1:5b:10:6c:de:d5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
        Validity
            Not Before: Nov 23 01:02:59 2024 GMT
            Not After : Nov 24 01:02:59 2024 GMT
        Subject: CN=076a8f530ac2710f40effda34ba75b5e56a02171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:4c:91:4a:f2:dc:5f:63:60:4e:68:f7:99:
                    e3:a0:f6:2f:a3:dc:b4:53:54:25:84:34:3e:96:f0:
                    80:8e:3b:ce:ca:8d:90:3e:f6:e1:ea:dc:5c:9f:b3:
                    f2:eb:d2:49:3f:61:de:40:59:88:60:6a:6a:78:0c:
                    0c:b1:03:d9:a5:6d:df:c8:0b:58:a0:43:4a:8a:c9:
                    92:83:41:f8:54:81:f4:ae:02:78:91:18:4f:9d:0c:
                    2d:58:75:db:d2:ec:89:4b:72:dc:6a:bd:29:ec:ad:
                    c7:21:9d:be:6b:d0:72:5f:8b:b0:29:52:ad:0a:4f:
                    5c:1d:fa:4e:9b:cc:e0:83:c6:c1:20:29:43:b1:db:
                    90:af:3c:98:af:65:c1:a0:8a:a7:4b:8f:90:13:4b:
                    db:d5:46:c7:ed:27:24:f9:ff:9d:79:e8:7d:43:ab:
                    e0:50:bc:8a:bc:74:b7:e7:1c:7b:cc:c9:69:60:01:
                    fb:9e:14:4a:7e:b9:02:52:52:00:d9:dc:9a:e0:25:
                    fc:67:7e:5c:48:30:45:fa:b7:96:46:5d:d3:4c:cd:
                    a4:ea:a7:34:f8:04:10:a0:43:14:ed:48:82:29:81:
                    77:be:4f:16:c0:db:e9:18:aa:7d:a5:18:cc:c4:5d:
                    33:aa:f6:f4:41:6b:e7:c6:ac:d8:4b:85:43:7c:d8:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:8F:53:0A:C2:71:0F:40:EF:FD:A3:4B:A7:5B:5E:56:A0:21:71
            X509v3 Authority Key Identifier:
                keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:40:e7:08:5c:8f:67:46:46:86:0d:79:d8:f8:66:5c:35:cd:
         b3:3f:a9:2f:59:7a:20:76:48:86:27:90:31:49:53:52:ac:ef:
         70:6f:e5:a3:3d:4e:9d:3e:65:b5:9c:a8:f7:3e:7c:c8:a1:7e:
         b8:0a:ea:3d:56:34:a5:72:bc:2a:19:c7:79:e3:72:72:e2:8f:
         02:a9:75:f9:87:c4:90:03:16:b6:f7:25:7f:94:85:3a:4f:69:
         68:3d:a3:97:39:fd:da:47:75:55:97:ae:b0:ef:6e:6d:5b:3d:
         61:75:20:66:1d:97:89:d3:08:74:99:e7:04:4e:11:49:30:17:
         4c:f9:75:00:1e:72:3b:cb:1f:af:b5:3e:19:25:a0:a2:b0:6f:
         9c:63:1c:06:e7:60:c5:17:45:dd:06:71:bf:41:27:a5:f0:b0:
         3b:dd:18:a5:4e:cb:95:61:6c:33:8f:33:d6:ee:2f:e5:61:f4:
         1b:4e:1e:15:f2:82:88:88:71:57:60:55:b6:fe:79:12:66:fc:
         93:79:c6:20:5c:27:f3:29:69:5c:14:99:2c:72:6a:0c:cb:99:
         79:c6:f8:fb:1c:f0:8e:55:0c:da:b4:19:88:5b:8e:e2:45:83:
         66:8d:97:b9:ab:f3:20:32:c7:51:5c:99:4a:98:cc:d3:f6:b8:
         07:33:72:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiyVZ3993e4fBWxBs3tVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNmNiMzM2YzFiZWI3MWQ0ZmJiYWFlMjQzYjIzMzUyYzYy
NzAwNjEwHhcNMjQxMTIzMDEwMjU5WhcNMjQxMTI0MDEwMjU5WjAzMTEwLwYDVQQD
EygwNzZhOGY1MzBhYzI3MTBmNDBlZmZkYTM0YmE3NWI1ZTU2YTAyMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gBMkUry3F9jYE5o95njoPYvo9y0
U1QlhDQ+lvCAjjvOyo2QPvbh6txcn7Py69JJP2HeQFmIYGpqeAwMsQPZpW3fyAtY
oENKismSg0H4VIH0rgJ4kRhPnQwtWHXb0uyJS3Lcar0p7K3HIZ2+a9ByX4uwKVKt
Ck9cHfpOm8zgg8bBIClDsduQrzyYr2XBoIqnS4+QE0vb1UbH7Sck+f+deeh9Q6vg
ULyKvHS35xx7zMlpYAH7nhRKfrkCUlIA2dya4CX8Z35cSDBF+reWRl3TTM2k6qc0
+AQQoEMU7UiCKYF3vk8WwNvpGKp9pRjMxF0zqvb0QWvnxqzYS4VDfNhRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdqj1MKwnEPQO/9o0unW15WoCFxMB8GA1UdIwQY
MBaAFJNsszbBvrcdT7uq4kOyM1LGJwBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUt
NTlkNjBiZmYyMDVmLzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kMWRkOWEtOThmNC00NWI4LTkwOTUtNTlkNjBiZmYyMDVm
LzEvazJ5ek5zRy10eDFQdTZyaVE3SXpVc1luQUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkDnCFyP
Z0ZGhg152PhmXDXNsz+pL1l6IHZIhieQMUlTUqzvcG/loz1OnT5ltZyo9z58yKF+
uArqPVY0pXK8KhnHeeNycuKPAql1+YfEkAMWtvclf5SFOk9paD2jlzn92kd1VZeu
sO9ubVs9YXUgZh2XidMIdJnnBE4RSTAXTPl1AB5yO8sfr7U+GSWgorBvnGMcBudg
xRdF3QZxv0EnpfCwO90YpU7LlWFsM48z1u4v5WH0G04eFfKCiIhxV2BVtv55Emb8
k3nGIFwn8ylpXBSZLHJqDMuZecb4+xzwjlUM2rQZiFuO4kWDZo2XuavzIDLHUVyZ
SpjM0/a4BzNygA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:31 2024 by rpki-client on console-ams.rpki-client.org