Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File:                     A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier:          Yer4PnPUcIz9CGJahShUnI1vlxgt+8jzo8W4tJ6uuL8=
Subject key identifier:   B7:C3:CF:04:0E:39:4C:1C:45:02:0B:F0:13:C9:4E:56:67:83:D9:0E
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer:       /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial:       019405A0EF75EDDC8CFDACD9D7DCDBDF5D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number:          0819
Signing time:             Fri 27 Dec 2024 01:00:20 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:20 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:20 +0000
Files and hashes:         1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: +vn3leooPaF+sXMQPIXbTH0yElsX8n063aWc5Z/C1T0=)
                          2: el5_TcNDYyekUSA4jvU59D-Tu4w.roa (hash: SKH1YUKKq/HYCPz+MnKAjWjXOw4D5P7yFr8LIYWImEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a0:ef:75:ed:dc:8c:fd:ac:d9:d7:dc:db:df:5d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
        Validity
            Not Before: Dec 27 01:00:20 2024 GMT
            Not After : Dec 28 01:00:20 2024 GMT
        Subject: CN=b7c3cf040e394c1c45020bf013c94e566783d90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:7c:d9:6e:1c:51:a9:43:2e:a5:c7:d5:06:
                    7d:99:66:5a:a9:d7:19:db:a1:2e:35:e4:60:e9:1d:
                    a9:69:85:25:29:59:33:c4:e3:2b:e0:70:fb:79:22:
                    74:23:61:e8:87:f4:f1:c6:31:9b:19:f4:bd:d3:d8:
                    46:c2:7f:2f:82:f9:f6:9e:f4:e9:25:73:2f:0c:b5:
                    5e:1d:85:a4:3b:7d:5c:08:89:58:d1:fa:7e:e9:83:
                    54:80:b9:7a:ff:c6:c2:e5:3a:09:f7:d4:a9:68:e8:
                    26:4a:d4:93:da:16:f8:cd:2f:0a:54:14:4f:d6:1a:
                    23:5d:5c:86:85:2c:3a:e9:ff:c6:59:87:57:09:87:
                    7f:ac:04:94:d2:9f:53:4e:10:c4:fb:6c:25:c8:33:
                    a0:be:14:7d:01:f8:05:d2:50:52:9b:45:6f:bd:fc:
                    e5:5a:29:c3:5a:c5:02:0a:7b:b9:3f:d0:6b:21:53:
                    74:40:6b:90:de:65:cb:43:66:26:7a:2f:44:dc:3b:
                    c2:aa:26:9b:5d:fd:c4:a0:15:4c:3e:ca:40:93:06:
                    af:ee:bd:c5:01:aa:09:52:28:68:fd:dd:dd:ee:cc:
                    52:09:08:c9:99:58:df:8c:2a:39:5d:8c:1f:af:03:
                    74:5c:88:41:ae:4c:05:e4:5c:cd:a6:51:75:9f:01:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:CF:04:0E:39:4C:1C:45:02:0B:F0:13:C9:4E:56:67:83:D9:0E
            X509v3 Authority Key Identifier:
                keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:93:a9:da:e9:c3:b8:ce:68:cb:ad:7e:44:3e:cb:44:0a:50:
         54:a2:d8:2a:27:e7:a1:03:ec:c3:39:20:3a:e0:85:70:67:92:
         1f:1e:ff:84:41:04:0b:84:f4:f4:2a:cd:9b:87:f7:ba:25:3c:
         97:77:8c:1b:63:b5:48:37:b7:62:2a:b5:ef:8b:09:15:18:f9:
         7c:15:fc:a1:a6:4a:61:96:8e:c3:c1:4e:ce:4c:03:eb:42:74:
         5d:f1:57:83:5a:ce:08:67:46:06:00:18:57:13:a2:32:08:11:
         ce:7a:f7:4c:5a:81:ac:d8:78:34:39:8a:e0:b2:b7:35:f7:68:
         ed:a9:3f:6d:44:45:e7:39:26:c3:63:79:10:df:3f:2f:65:c3:
         e7:43:17:12:c1:74:8f:18:a2:a8:09:c9:86:fd:6f:c9:b6:49:
         e2:75:54:0c:28:70:78:de:7b:dd:13:e0:fa:3b:26:e7:c5:42:
         3c:f6:1a:4c:4f:66:d7:9f:fc:41:d8:99:2c:f0:e3:8e:0f:b3:
         1c:55:5f:bf:10:c8:22:24:4e:96:06:9f:07:9f:74:b3:e5:54:
         2d:70:10:37:67:96:c1:d3:4b:71:7b:45:81:c4:22:17:b6:27:
         74:94:a8:80:94:c3:d8:7e:55:43:94:c0:e4:99:0d:00:90:b6:
         ca:88:d2:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQFoO917dyM/azZ19zb312UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5
YWY1OWYwHhcNMjQxMjI3MDEwMDIwWhcNMjQxMjI4MDEwMDIwWjAzMTEwLwYDVQQD
EyhiN2MzY2YwNDBlMzk0YzFjNDUwMjBiZjAxM2M5NGU1NjY3ODNkOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMJ82W4cUalDLqXH1QZ9mWZaqdcZ
26EuNeRg6R2paYUlKVkzxOMr4HD7eSJ0I2Hoh/TxxjGbGfS909hGwn8vgvn2nvTp
JXMvDLVeHYWkO31cCIlY0fp+6YNUgLl6/8bC5ToJ99SpaOgmStST2hb4zS8KVBRP
1hojXVyGhSw66f/GWYdXCYd/rASU0p9TThDE+2wlyDOgvhR9AfgF0lBSm0Vvvfzl
WinDWsUCCnu5P9BrIVN0QGuQ3mXLQ2Ymei9E3DvCqiabXf3EoBVMPspAkwav7r3F
AaoJUiho/d3d7sxSCQjJmVjfjCo5XYwfrwN0XIhBrkwF5FzNplF1nwFzQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfDzwQOOUwcRQIL8BPJTlZng9kOMB8GA1UdIwQY
MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt
ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw
LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZOp2unD
uM5oy61+RD7LRApQVKLYKifnoQPswzkgOuCFcGeSHx7/hEEEC4T09CrNm4f3uiU8
l3eMG2O1SDe3Yiq174sJFRj5fBX8oaZKYZaOw8FOzkwD60J0XfFXg1rOCGdGBgAY
VxOiMggRznr3TFqBrNh4NDmK4LK3Nfdo7ak/bURF5zkmw2N5EN8/L2XD50MXEsF0
jxiiqAnJhv1vybZJ4nVUDChweN573RPg+jsm58VCPPYaTE9m15/8QdiZLPDjjg+z
HFVfvxDIIiROlgafB590s+VULXAQN2eWwdNLcXtFgcQiF7YndJSogJTD2H5VQ5TA
5JkNAJC2yojSwA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 10:51:46 2024 by rpki-client on console-fra.rpki-client.org