Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File:                     FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier:          KuzE7Zv+PQy46jHhYYNkkbfKkWMkEFNMrmHNyZCKHRY=
Subject key identifier:   9E:4F:AF:6F:57:ED:89:F3:2C:D3:F8:2A:9F:D2:87:2E:F6:41:55:E6
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer:       /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial:       019358772444D6A536FE5517387B4E8CD8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number:          0BE5
Signing time:             Sat 23 Nov 2024 10:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:23 +0000
Files and hashes:         1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: mGUyuXZLqYsQAmW40UvsqwUfpoHQmdb7Nwa+WyRnkO4=)
                          2: n0APRDvviU0xEyJLkjFToZ2jTGI.roa (hash: tj/C+HsnLk9qfOjapsBbduRdb+BWoLGgFOg1EtMRk+c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:24:44:d6:a5:36:fe:55:17:38:7b:4e:8c:d8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
        Validity
            Not Before: Nov 23 10:00:23 2024 GMT
            Not After : Nov 24 10:00:23 2024 GMT
        Subject: CN=9e4faf6f57ed89f32cd3f82a9fd2872ef64155e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:41:3c:82:e9:d3:b0:70:29:10:55:83:c8:
                    fb:24:c1:af:bb:33:16:70:29:72:5f:23:21:94:95:
                    4f:63:57:17:d3:e8:b7:26:b5:77:d4:ed:a4:ad:d4:
                    e6:25:93:e6:d8:8d:e6:80:3d:9f:a8:d7:c1:ed:37:
                    7d:27:df:81:25:bc:5a:9f:97:cc:ee:c2:0a:31:af:
                    5b:4c:7a:ad:f1:13:04:f1:d4:ca:5b:dd:b4:b7:27:
                    44:00:ca:ac:e4:56:37:88:d0:9b:07:b9:bd:89:f8:
                    90:cb:5d:a5:3e:e1:56:6b:a8:56:0a:ed:79:e8:c6:
                    a4:d7:59:d4:8d:d6:39:5a:97:74:77:c3:bb:96:82:
                    89:4f:ce:f7:b0:de:d6:81:6b:9b:02:67:68:c2:d6:
                    64:32:5a:da:72:fd:57:23:d0:3f:86:da:4a:4a:8b:
                    48:e2:e3:06:ab:3d:63:05:3e:e6:0e:74:d3:36:73:
                    e5:fa:ee:83:c1:83:79:c8:ee:73:2c:7b:55:c8:4c:
                    32:49:79:7b:02:b2:ed:63:29:94:87:a2:fb:41:0e:
                    b2:e2:42:e2:54:9a:15:86:69:c5:9e:67:53:62:f7:
                    98:86:75:46:ad:c8:00:1b:eb:7b:17:64:35:a8:0c:
                    1f:c1:14:ba:f1:cc:0c:01:54:09:7e:8b:9b:4c:1f:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4F:AF:6F:57:ED:89:F3:2C:D3:F8:2A:9F:D2:87:2E:F6:41:55:E6
            X509v3 Authority Key Identifier:
                keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:68:d9:86:97:12:f2:ce:e2:e0:41:e8:d2:48:1a:9c:61:
         1b:01:5d:03:3a:ff:ce:5b:27:37:cc:98:b4:8d:4c:82:49:7b:
         ad:29:f6:4f:e8:c6:51:db:c5:48:97:11:24:49:3e:11:65:43:
         71:cc:3f:03:14:c8:6d:2e:b3:4c:de:4f:cf:2a:4f:b0:21:33:
         d1:70:c5:28:22:96:f5:5b:57:c4:a9:5e:f5:e0:41:20:cd:a0:
         0d:85:5d:97:99:5b:7a:86:b8:d5:55:ea:b7:c1:40:a1:85:3e:
         8b:89:75:46:d8:5f:70:82:87:f7:9b:15:7f:5f:5e:b8:c5:51:
         4e:03:f2:ea:8e:eb:15:a3:b3:e6:e2:87:38:cd:65:a3:fe:5a:
         9d:0f:61:75:60:3b:6d:3b:3e:0f:01:40:ad:35:5e:d9:13:fe:
         e9:f3:f1:cc:e8:b5:45:d4:fc:6d:cc:e8:60:c5:b5:0d:ab:4f:
         5e:55:75:17:42:af:0f:2f:73:84:20:f0:00:4b:a6:9e:5d:00:
         0f:79:72:c4:15:e3:a1:64:6c:7b:16:92:8a:bc:20:a4:c3:28:
         55:cd:0f:43:5e:f5:86:a6:f6:e3:58:05:d3:0b:b7:ea:f5:cc:
         81:2d:3f:fa:01:50:94:62:e8:17:ff:94:64:34:67:db:b5:71:
         44:a6:ba:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdyRE1qU2/lUXOHtOjNi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjJlOTY3OGZiMGQ0MTRkMmRkZmJkMjQyMGM0Yzc0ODI2
M2YzNGIwHhcNMjQxMTIzMTAwMDIzWhcNMjQxMTI0MTAwMDIzWjAzMTEwLwYDVQQD
Eyg5ZTRmYWY2ZjU3ZWQ4OWYzMmNkM2Y4MmE5ZmQyODcyZWY2NDE1NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+FBPILp07BwKRBVg8j7JMGvuzMW
cClyXyMhlJVPY1cX0+i3JrV31O2krdTmJZPm2I3mgD2fqNfB7Td9J9+BJbxan5fM
7sIKMa9bTHqt8RME8dTKW920tydEAMqs5FY3iNCbB7m9ifiQy12lPuFWa6hWCu15
6Mak11nUjdY5Wpd0d8O7loKJT873sN7WgWubAmdowtZkMlracv1XI9A/htpKSotI
4uMGqz1jBT7mDnTTNnPl+u6DwYN5yO5zLHtVyEwySXl7ArLtYymUh6L7QQ6y4kLi
VJoVhmnFnmdTYveYhnVGrcgAG+t7F2Q1qAwfwRS68cwMAVQJfoubTB8WlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5Pr29X7YnzLNP4Kp/Shy72QVXmMB8GA1UdIwQY
MBaAFBci6WePsNQU0t370kIMTHSCY/NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGIt
ODhjOTUxY2VlNzg0LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hNmUxYjUtZTc4MS00MDE4LTk2MGItODhjOTUxY2VlNzg0
LzEvRnlMcFo0LXcxQlRTM2Z2U1FneE1kSUpqODBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRNo2YaX
EvLO4uBB6NJIGpxhGwFdAzr/zlsnN8yYtI1Mgkl7rSn2T+jGUdvFSJcRJEk+EWVD
ccw/AxTIbS6zTN5PzypPsCEz0XDFKCKW9VtXxKle9eBBIM2gDYVdl5lbeoa41VXq
t8FAoYU+i4l1RthfcIKH95sVf19euMVRTgPy6o7rFaOz5uKHOM1lo/5anQ9hdWA7
bTs+DwFArTVe2RP+6fPxzOi1RdT8bczoYMW1DatPXlV1F0KvDy9zhCDwAEumnl0A
D3lyxBXjoWRsexaSirwgpMMoVc0PQ171hqb241gF0wu36vXMgS0/+gFQlGLoF/+U
ZDRn27VxRKa6iQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:26 2024 by rpki-client on console-fra.rpki-client.org