Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File:                     A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier:          hlZQwO87XzTwPFnbDIu1cPxRoViLCjGCoGSvmpD+M70=
Subject key identifier:   6F:60:04:B6:10:2A:3B:C8:9C:53:63:16:FF:28:6B:34:12:43:F7:4F
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer:       /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial:       0193549CC44680F32BE07959C6AF31F85B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number:          0AA8
Signing time:             Fri 22 Nov 2024 16:03:00 +0000
Manifest this update:     Fri 22 Nov 2024 16:03:00 +0000
Manifest next update:     Sat 23 Nov 2024 16:03:00 +0000
Files and hashes:         1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: 4u2HkGXSwbyJjV82u536SP4LxVEF5XQ10DlPJYp8BxE=)
                          2: lDvswE8G_hc7OrOrFNiX-g23p70.roa (hash: jQCfRHKVQzgBIK4l3y8cqKHfwI4oEGtNfIxI0smkQLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:c4:46:80:f3:2b:e0:79:59:c6:af:31:f8:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
        Validity
            Not Before: Nov 22 16:03:00 2024 GMT
            Not After : Nov 23 16:03:00 2024 GMT
        Subject: CN=6f6004b6102a3bc89c536316ff286b341243f74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:df:c2:0d:bb:d3:95:63:46:36:82:cf:d4:
                    42:d2:51:79:80:04:c2:13:0b:23:f8:f9:d9:39:f9:
                    95:06:b2:9a:cb:d0:3c:47:18:0d:57:5e:40:63:a3:
                    fc:ed:7f:2c:a0:ba:9e:5e:71:62:a4:7d:5a:57:3b:
                    6c:c9:b2:b9:2a:b3:2f:90:99:05:7d:3e:62:b2:cf:
                    dd:96:b9:6c:b1:5e:e9:ae:bb:6b:3d:b2:2d:1d:a3:
                    42:8a:19:b5:92:20:86:90:cc:7e:f9:12:ff:e5:af:
                    5c:1c:ec:fc:4f:31:6f:48:85:0f:ba:53:8a:c1:05:
                    de:6c:b0:99:8b:fa:bd:2e:b2:8c:c6:1a:54:e1:68:
                    41:e1:59:c8:87:a4:76:0d:cf:db:f5:37:a8:6b:20:
                    83:37:e3:84:c7:2f:bf:fe:87:98:4c:2a:c6:c3:a0:
                    bf:d8:ea:8e:4b:c2:93:1f:94:1c:cc:bb:64:05:fb:
                    9a:33:d7:37:4e:bf:eb:ee:46:eb:9a:1b:5b:5a:ea:
                    11:f1:ce:46:9d:70:c6:1f:9b:8c:3b:50:82:52:a5:
                    36:83:d2:56:31:f5:b6:9d:50:09:64:1f:fe:d2:36:
                    63:c5:fd:f1:b1:13:a8:f9:8e:99:ca:ad:a6:59:26:
                    8e:e0:7e:7a:13:44:4d:da:40:6e:f5:c9:38:4b:00:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:60:04:B6:10:2A:3B:C8:9C:53:63:16:FF:28:6B:34:12:43:F7:4F
            X509v3 Authority Key Identifier:
                keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:db:6e:d0:c5:f6:9a:7d:bf:ed:d1:dd:b5:20:dc:cb:3a:
         6c:55:ac:76:2e:27:a9:cb:af:bc:b9:1c:50:6e:66:01:90:87:
         74:6f:79:2f:ea:6d:b1:78:26:f3:0e:cb:2e:37:b9:05:e3:fb:
         39:cc:80:e9:31:fb:14:98:ad:84:ac:3f:bd:bb:cd:d8:64:03:
         f6:b4:66:e8:98:61:cc:de:e5:b8:82:0c:a8:88:0f:6e:45:23:
         a3:90:0e:0d:5d:0f:c9:ad:01:b5:0d:fe:4e:8f:96:81:9c:81:
         46:59:ed:4b:e1:69:fa:2b:85:a5:f3:44:f2:71:a1:87:33:26:
         c4:9e:52:21:26:39:17:74:c9:72:f7:54:85:38:3f:87:e9:e6:
         57:a7:9b:a1:55:37:0f:f9:35:1f:47:5e:e2:f1:b8:41:b3:9e:
         2c:83:50:f8:af:6d:c1:ff:fb:9e:bc:e4:7a:1b:3b:e3:c3:ec:
         a8:5c:7f:67:fa:76:dd:d8:9a:11:8f:2e:43:60:38:5f:f0:2d:
         a7:d0:00:df:83:fa:46:84:1e:c6:6f:22:9c:97:14:5b:6e:dd:
         e2:42:4e:08:a0:f2:2c:65:ba:47:62:df:62:53:38:ce:f6:2b:
         58:70:48:7e:f2:fb:3d:ec:a9:44:9e:21:0b:c8:5f:9c:95:c2:
         0e:00:dc:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnMRGgPMr4HlZxq8x+Ft4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk
ZjEzOTcwHhcNMjQxMTIyMTYwMzAwWhcNMjQxMTIzMTYwMzAwWjAzMTEwLwYDVQQD
Eyg2ZjYwMDRiNjEwMmEzYmM4OWM1MzYzMTZmZjI4NmIzNDEyNDNmNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNbfwg2705VjRjaCz9RC0lF5gATC
Ewsj+PnZOfmVBrKay9A8RxgNV15AY6P87X8soLqeXnFipH1aVztsybK5KrMvkJkF
fT5iss/dlrlssV7prrtrPbItHaNCihm1kiCGkMx++RL/5a9cHOz8TzFvSIUPulOK
wQXebLCZi/q9LrKMxhpU4WhB4VnIh6R2Dc/b9TeoayCDN+OExy+//oeYTCrGw6C/
2OqOS8KTH5QczLtkBfuaM9c3Tr/r7kbrmhtbWuoR8c5GnXDGH5uMO1CCUqU2g9JW
MfW2nVAJZB/+0jZjxf3xsROo+Y6Zyq2mWSaO4H56E0RN2kBu9ck4SwB5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9gBLYQKjvInFNjFv8oazQSQ/dPMB8GA1UdIwQY
MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt
ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk
LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakLbbtDF
9pp9v+3R3bUg3Ms6bFWsdi4nqcuvvLkcUG5mAZCHdG95L+ptsXgm8w7LLje5BeP7
OcyA6TH7FJithKw/vbvN2GQD9rRm6JhhzN7luIIMqIgPbkUjo5AODV0Pya0BtQ3+
To+WgZyBRlntS+Fp+iuFpfNE8nGhhzMmxJ5SISY5F3TJcvdUhTg/h+nmV6eboVU3
D/k1H0de4vG4QbOeLINQ+K9twf/7nrzkehs748PsqFx/Z/p23diaEY8uQ2A4X/At
p9AA34P6RoQexm8inJcUW27d4kJOCKDyLGW6R2LfYlM4zvYrWHBIfvL7PeypRJ4h
C8hfnJXCDgDc/w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:08 2024 by rpki-client on console-ams.rpki-client.org