Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
File:                     qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft (raw, json)
Hash identifier:          whpMY5LiCSYODbXgsrBaCLj1Zm+I+02t5CFud84pbS0=
Subject key identifier:   14:40:75:21:B2:C9:60:D2:D7:93:D9:26:64:B7:B8:78:51:62:49:54
Authority key identifier: A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C
Certificate issuer:       /CN=a8f4e638d1fedb32c556ed697bd96dcade9edd3c
Certificate serial:       01923A026A77448948F72F12ED0378261B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
Manifest number:          0EAB
Signing time:             Sat 28 Sep 2024 19:01:29 +0000
Manifest this update:     Sat 28 Sep 2024 19:01:29 +0000
Manifest next update:     Sun 29 Sep 2024 19:01:29 +0000
Files and hashes:         1: qPTmONH-2zLFVu1pe9ltyt6e3Tw.crl (hash: 4WRgzXWfYYpgOv5qQMQz6WZ+HsPNznkcv8/TKhIU1y8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:02:6a:77:44:89:48:f7:2f:12:ed:03:78:26:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f4e638d1fedb32c556ed697bd96dcade9edd3c
        Validity
            Not Before: Sep 28 19:01:29 2024 GMT
            Not After : Sep 29 19:01:29 2024 GMT
        Subject: CN=14407521b2c960d2d793d92664b7b87851624954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:b9:c5:27:23:6b:90:cb:eb:32:a9:d4:23:
                    a0:41:bd:e5:7b:b9:a0:1e:1e:a6:cd:59:74:25:ed:
                    3a:14:a3:9f:36:0c:eb:19:55:52:d0:35:cb:1b:a4:
                    da:59:b9:5c:3c:ec:3e:3a:de:0c:bd:da:b3:20:0b:
                    c5:04:a7:94:0e:e6:a8:3c:eb:4b:cd:c3:ac:c7:88:
                    88:40:1c:95:8d:ef:2f:c9:61:15:a5:bb:5f:05:62:
                    67:5d:fe:48:70:17:71:b0:11:3c:ce:d9:c7:8f:85:
                    88:ef:23:33:c0:1e:61:20:6d:e9:2e:e2:80:28:ad:
                    32:e7:7a:2c:2d:e1:59:31:35:f8:cc:f2:10:b1:bc:
                    01:5b:35:ee:ab:15:b3:81:8b:30:7f:e0:ab:9c:87:
                    50:ce:01:c7:17:e9:01:06:3c:80:60:83:bb:d7:98:
                    f9:a1:96:1e:54:2b:4a:c6:23:80:00:af:2c:a4:34:
                    87:82:88:a6:0f:b1:2c:ea:79:de:4e:93:9a:c5:31:
                    16:b2:f7:55:ff:d8:dd:b0:e8:d0:80:09:1f:22:96:
                    17:46:40:43:48:24:24:bc:7e:8a:bd:13:c3:b1:b6:
                    9a:f9:aa:0e:a4:13:f7:37:90:c0:a8:98:73:c0:50:
                    4a:40:17:03:2a:99:94:bb:e3:56:43:86:c7:bc:34:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:75:21:B2:C9:60:D2:D7:93:D9:26:64:B7:B8:78:51:62:49:54
            X509v3 Authority Key Identifier:
                keyid:A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:dd:b1:79:3d:f2:61:0e:68:3d:71:b3:bf:90:39:53:0c:46:
         a9:2a:bf:be:ce:01:0f:63:c8:90:8f:ec:da:ab:43:d5:72:48:
         22:a0:8e:00:2c:c0:f7:84:23:f0:49:27:18:fd:cc:ef:49:85:
         c6:5c:d3:3a:dd:54:ac:f6:10:3e:ce:56:43:a0:06:0f:1f:60:
         40:c1:52:c1:ca:a9:bb:60:cf:9a:ac:99:65:cd:b6:91:d5:51:
         25:53:e5:1a:e9:fb:d1:57:a4:d7:5b:e8:35:04:92:e0:15:45:
         f4:68:3d:d6:58:a3:97:2f:77:54:24:81:87:cb:a6:f9:c1:fc:
         3e:bf:0a:37:f3:30:b7:d5:a0:09:99:4a:27:9d:03:d0:bf:88:
         0c:a1:ef:df:5f:7c:d5:2e:e5:e1:8c:3e:85:92:32:20:65:3c:
         84:b3:d7:97:94:48:d9:d2:88:77:9c:c3:23:31:b6:26:c7:74:
         27:4e:d7:f6:f9:42:40:70:e3:b4:13:38:a0:80:b1:8b:ef:17:
         8e:cd:05:32:23:76:58:a2:82:02:10:b6:f8:57:1b:13:ca:c2:
         a7:d9:d9:8d:78:d8:3c:78:fd:ab:42:92:7f:7a:e8:31:d3:3a:
         59:b2:17:75:fe:9f:0d:ef:f9:82:d9:2b:30:92:0e:fb:e9:87:
         d5:3a:2e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6Amp3RIlI9y8S7QN4JhuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjRlNjM4ZDFmZWRiMzJjNTU2ZWQ2OTdiZDk2ZGNhZGU5
ZWRkM2MwHhcNMjQwOTI4MTkwMTI5WhcNMjQwOTI5MTkwMTI5WjAzMTEwLwYDVQQD
EygxNDQwNzUyMWIyYzk2MGQyZDc5M2Q5MjY2NGI3Yjg3ODUxNjI0OTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd65xScja5DL6zKp1COgQb3le7mg
Hh6mzVl0Je06FKOfNgzrGVVS0DXLG6TaWblcPOw+Ot4MvdqzIAvFBKeUDuaoPOtL
zcOsx4iIQByVje8vyWEVpbtfBWJnXf5IcBdxsBE8ztnHj4WI7yMzwB5hIG3pLuKA
KK0y53osLeFZMTX4zPIQsbwBWzXuqxWzgYswf+CrnIdQzgHHF+kBBjyAYIO715j5
oZYeVCtKxiOAAK8spDSHgoimD7Es6nneTpOaxTEWsvdV/9jdsOjQgAkfIpYXRkBD
SCQkvH6KvRPDsbaa+aoOpBP3N5DAqJhzwFBKQBcDKpmUu+NWQ4bHvDSATwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRAdSGyyWDS15PZJmS3uHhRYklUMB8GA1UdIwQY
MBaAFKj05jjR/tsyxVbtaXvZbcrent08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBUbU9OSC0yekxGVnUxcGU5bHR5dDZlM1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xMzY4OGYtMzJhZS00NDZjLWE2Zjgt
YTg3NDQ0ZTYwNjFiLzEvcVBUbU9OSC0yekxGVnUxcGU5bHR5dDZlM1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xMzY4OGYtMzJhZS00NDZjLWE2ZjgtYTg3NDQ0ZTYwNjFi
LzEvcVBUbU9OSC0yekxGVnUxcGU5bHR5dDZlM1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2N2xeT3y
YQ5oPXGzv5A5UwxGqSq/vs4BD2PIkI/s2qtD1XJIIqCOACzA94Qj8EknGP3M70mF
xlzTOt1UrPYQPs5WQ6AGDx9gQMFSwcqpu2DPmqyZZc22kdVRJVPlGun70Vek11vo
NQSS4BVF9Gg91lijly93VCSBh8um+cH8Pr8KN/Mwt9WgCZlKJ50D0L+IDKHv3198
1S7l4Yw+hZIyIGU8hLPXl5RI2dKId5zDIzG2Jsd0J07X9vlCQHDjtBM4oICxi+8X
js0FMiN2WKKCAhC2+FcbE8rCp9nZjXjYPHj9q0KSf3roMdM6WbIXdf6fDe/5gtkr
MJIO++mH1ToupQ==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:16:55 2024 by rpki-client on console-fra.rpki-client.org