Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
File:                     Ivlg_e70BzVat4Nty2uQJvRCk-o.mft (raw, json)
Hash identifier:          wrodANMlMM9ciFnjYVZpa55z8W7DgiuH++SRIwHdf24=
Subject key identifier:   6B:5E:CA:9B:C6:93:1F:CD:22:A1:7F:75:2D:A1:B1:2D:E9:39:40:29
Authority key identifier: 22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA
Certificate issuer:       /CN=22f960fdeef407355ab7836dcb6b9026f44293ea
Certificate serial:       0193549B33CC3040044910510CC7301E530B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
Manifest number:          06D8
Signing time:             Fri 22 Nov 2024 16:01:17 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:17 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:17 +0000
Files and hashes:         1: Ivlg_e70BzVat4Nty2uQJvRCk-o.crl (hash: oX5O7AJZiLG3W1a+1xJtNdS7ntAnMp4bOpGG2lKITtw=)
                          2: JMSB-Af1_1eesYRiARk_EfaVV8A.roa (hash: G5peJStO0zqmy1CiRlRy5qkY8WGTQVvVZ4vqr254cCE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:33:cc:30:40:04:49:10:51:0c:c7:30:1e:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f960fdeef407355ab7836dcb6b9026f44293ea
        Validity
            Not Before: Nov 22 16:01:17 2024 GMT
            Not After : Nov 23 16:01:17 2024 GMT
        Subject: CN=6b5eca9bc6931fcd22a17f752da1b12de9394029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:e5:1e:38:cc:49:1a:04:e7:6b:44:e7:b6:
                    72:fe:22:f9:1a:89:93:9d:44:eb:50:d0:23:7c:67:
                    00:d0:6c:6f:f0:c3:90:38:b1:30:31:fb:54:18:8f:
                    07:84:ee:0a:e1:b6:ee:50:9b:7f:7a:00:4b:dd:ec:
                    3c:15:44:32:e1:2f:33:38:7c:1d:ac:cf:a9:1d:f1:
                    03:28:26:d1:28:5b:5f:aa:aa:fc:69:62:65:5f:c5:
                    d5:da:2f:c8:f8:b7:69:23:f5:af:16:1c:87:48:a8:
                    30:1c:82:4d:4c:52:e8:b7:f3:0b:2c:6f:39:4b:ad:
                    1f:e1:db:8b:ec:ff:5b:3f:69:3d:53:2c:ad:69:3c:
                    78:c8:db:1e:80:07:4a:e6:94:7b:02:d6:65:6b:fe:
                    6b:02:6a:e1:50:4b:e1:38:23:f8:d8:43:92:7a:0b:
                    8f:ba:79:7d:23:55:d8:23:e8:59:16:97:3a:95:56:
                    55:d9:2e:58:b9:e9:31:f1:0d:d3:b6:94:49:13:61:
                    59:47:42:6e:9b:a4:02:fa:e6:d6:80:fc:db:7d:5d:
                    0c:d7:82:fb:e7:4a:89:75:43:59:9c:66:cd:8e:f9:
                    4d:2e:81:37:ac:03:cc:67:03:d7:56:58:07:89:dc:
                    94:0d:cc:18:81:69:04:f1:75:0e:f3:3f:fe:e0:2d:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5E:CA:9B:C6:93:1F:CD:22:A1:7F:75:2D:A1:B1:2D:E9:39:40:29
            X509v3 Authority Key Identifier:
                keyid:22:F9:60:FD:EE:F4:07:35:5A:B7:83:6D:CB:6B:90:26:F4:42:93:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ivlg_e70BzVat4Nty2uQJvRCk-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3155bf-c881-4396-aefd-236ba9ee4056/1/Ivlg_e70BzVat4Nty2uQJvRCk-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:d7:b1:bf:9a:47:f6:b4:5d:79:d8:03:4b:f5:a9:ee:a5:
         f4:d1:21:4e:09:29:ca:1d:a6:fb:0d:42:0b:95:02:dc:b5:33:
         d2:d5:dd:86:cb:d8:2d:18:a7:14:c1:d0:d6:b7:03:65:5a:6d:
         6f:91:43:a5:4d:5d:91:50:69:60:98:1c:f6:59:99:b3:f4:eb:
         87:62:05:52:b3:a9:d8:b7:cd:5f:63:ed:50:07:7f:dd:05:21:
         e1:70:12:e5:d1:f5:d1:14:bd:99:0c:fb:73:b1:cc:db:97:f6:
         03:bb:85:2b:3a:78:5d:5a:16:03:62:f9:15:33:9b:83:1e:5f:
         1f:64:89:d1:4e:5d:04:6a:e6:4f:60:02:77:5f:21:9e:dd:e4:
         7b:68:ce:ed:9c:cd:a3:33:fd:63:db:8a:b8:46:9a:a4:34:96:
         c7:e4:ac:76:c9:62:5b:03:e3:4b:fe:60:37:03:1e:7f:34:a6:
         12:d0:0d:9c:ce:5a:8e:c4:32:8a:a3:26:dd:2c:8c:50:c3:11:
         d1:f8:b6:2a:41:74:42:62:a0:31:ab:22:db:92:c6:3c:a6:20:
         c2:c9:a4:78:f1:27:55:62:b3:aa:94:1b:75:75:b7:44:b4:61:
         a2:c3:6b:d7:84:e8:a2:b1:aa:6f:06:83:d1:9d:ad:4d:67:88:
         1c:a0:80:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmzPMMEAESRBRDMcwHlMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjk2MGZkZWVmNDA3MzU1YWI3ODM2ZGNiNmI5MDI2ZjQ0
MjkzZWEwHhcNMjQxMTIyMTYwMTE3WhcNMjQxMTIzMTYwMTE3WjAzMTEwLwYDVQQD
Eyg2YjVlY2E5YmM2OTMxZmNkMjJhMTdmNzUyZGExYjEyZGU5Mzk0MDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJzlHjjMSRoE52tE57Zy/iL5GomT
nUTrUNAjfGcA0Gxv8MOQOLEwMftUGI8HhO4K4bbuUJt/egBL3ew8FUQy4S8zOHwd
rM+pHfEDKCbRKFtfqqr8aWJlX8XV2i/I+LdpI/WvFhyHSKgwHIJNTFLot/MLLG85
S60f4duL7P9bP2k9UyytaTx4yNsegAdK5pR7AtZla/5rAmrhUEvhOCP42EOSeguP
unl9I1XYI+hZFpc6lVZV2S5Yuekx8Q3TtpRJE2FZR0Jum6QC+ubWgPzbfV0M14L7
50qJdUNZnGbNjvlNLoE3rAPMZwPXVlgHidyUDcwYgWkE8XUO8z/+4C2BaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGteypvGkx/NIqF/dS2hsS3pOUApMB8GA1UdIwQY
MBaAFCL5YP3u9Ac1WreDbctrkCb0QpPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZsZ19lNzBCelZhdDROdHkydVFKdlJDay1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMTU1YmYtYzg4MS00Mzk2LWFlZmQt
MjM2YmE5ZWU0MDU2LzEvSXZsZ19lNzBCelZhdDROdHkydVFKdlJDay1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zMTU1YmYtYzg4MS00Mzk2LWFlZmQtMjM2YmE5ZWU0MDU2
LzEvSXZsZ19lNzBCelZhdDROdHkydVFKdlJDay1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPDXsb+a
R/a0XXnYA0v1qe6l9NEhTgkpyh2m+w1CC5UC3LUz0tXdhsvYLRinFMHQ1rcDZVpt
b5FDpU1dkVBpYJgc9lmZs/Trh2IFUrOp2LfNX2PtUAd/3QUh4XAS5dH10RS9mQz7
c7HM25f2A7uFKzp4XVoWA2L5FTObgx5fH2SJ0U5dBGrmT2ACd18hnt3ke2jO7ZzN
ozP9Y9uKuEaapDSWx+SsdsliWwPjS/5gNwMefzSmEtANnM5ajsQyiqMm3SyMUMMR
0fi2KkF0QmKgMasi25LGPKYgwsmkePEnVWKzqpQbdXW3RLRhosNr14ToorGqbwaD
0Z2tTWeIHKCAIg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:08:46 2024 by rpki-client on console-fra.rpki-client.org