Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File:                     Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier:          XqZi7KN2HEiS37A0Czk25dP/JDafqY0uwdyqwavHFSc=
Subject key identifier:   84:AB:4E:45:E6:2C:DA:A2:76:65:54:78:8D:0B:1B:BE:3C:4C:89:74
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       019364B2651C53D73EF9B58B000AF6097B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number:          02B9
Signing time:             Mon 25 Nov 2024 19:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:32 +0000
Files and hashes:         1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: 3ajZyEu1PFoN5fOfpGeYz8O55eaVGDy9hMGCRa6UH1k=)
                          2: gtasqkd8LOQGvXS--WQ7XX7aGqY.roa (hash: 3jEAd/GWbTafe1HkwtS7FvMerKkxxzcFs4ZaJ3V5S6c=)
                          3: wQRzizNNi9dmQ1StMiB-dC_0i_I.roa (hash: ssPOLcC/Fvj+ek+Q0QGurPj074Zf3WcAfB1EtEGVgzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:65:1c:53:d7:3e:f9:b5:8b:00:0a:f6:09:7b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Nov 25 19:00:32 2024 GMT
            Not After : Nov 26 19:00:32 2024 GMT
        Subject: CN=84ab4e45e62cdaa2766554788d0b1bbe3c4c8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:69:82:b0:78:80:ba:b6:34:a6:3f:55:cc:
                    9c:30:a8:3b:b2:df:46:1e:71:07:82:3d:12:ce:d6:
                    9f:8a:80:5b:32:9a:f0:92:81:87:d6:3f:09:a9:f6:
                    62:99:5f:92:3d:a1:1e:07:f0:4e:83:12:e1:36:66:
                    cb:fb:22:dd:66:18:7e:12:a5:1f:e3:9f:c5:09:64:
                    9a:fb:3f:db:63:b2:c7:6a:4a:a6:47:42:aa:a4:43:
                    b3:73:72:6f:43:19:93:08:b3:d1:5c:ad:70:3a:fd:
                    79:9c:21:22:bf:21:21:2a:c7:f6:5b:cf:8f:ba:03:
                    9a:de:4e:dd:0d:94:12:91:1b:b1:5b:d7:23:b8:bf:
                    11:ef:d8:dd:2a:09:f3:2b:6c:a3:eb:90:ca:1c:77:
                    29:37:1b:b7:f5:97:b3:86:c5:c4:bc:65:44:61:0e:
                    a8:18:c4:d8:70:8e:fc:69:0c:d8:b1:c4:7d:e2:f4:
                    ee:23:89:f7:0a:7a:e1:2a:4f:19:8d:8b:8d:90:39:
                    d3:66:9a:79:a3:0d:73:c0:2c:e0:f4:8e:5b:71:aa:
                    aa:90:54:8e:12:ae:29:ec:f2:a0:7a:5a:6e:81:17:
                    71:ec:6b:0a:12:ea:ae:fa:d2:77:7e:71:01:7f:0b:
                    44:58:98:b7:50:14:d3:77:cc:39:72:df:4a:42:25:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AB:4E:45:E6:2C:DA:A2:76:65:54:78:8D:0B:1B:BE:3C:4C:89:74
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:eb:48:29:c1:dd:e1:14:02:34:b1:24:40:ef:aa:27:3d:
         7a:fb:3c:72:1f:e0:cc:11:49:5c:35:66:27:cc:7f:0d:d8:88:
         e7:50:13:b9:cd:e5:a9:22:26:9c:3b:6c:aa:59:c8:e9:85:7b:
         0d:02:6c:08:3d:c9:63:d1:d9:4b:75:af:89:91:47:aa:62:d5:
         26:8d:b3:70:09:48:6f:fa:c3:65:ec:d9:96:95:14:8a:24:fa:
         22:42:96:50:2e:63:69:2a:6c:1c:c3:92:d6:54:87:bc:95:54:
         04:56:0d:6e:3a:7c:39:15:f0:6b:75:7a:4a:50:a5:1f:f9:db:
         9e:a9:c2:e8:7c:31:83:5e:14:05:63:b4:84:ff:0b:6c:be:14:
         34:ba:2f:26:7b:c1:b9:d4:1d:ac:fd:85:08:68:21:54:9a:18:
         62:eb:90:46:57:06:b8:05:5e:44:24:47:3a:36:d9:ff:87:e3:
         b3:10:58:3d:4b:a7:75:b3:9c:3c:2f:31:88:05:fa:5d:78:48:
         37:50:02:dc:8b:1d:d8:68:d8:a0:3b:b4:ee:eb:a8:64:05:04:
         35:b8:ea:0f:6a:bf:b0:ec:f3:7c:23:cd:cc:fb:a8:c2:72:a7:
         6f:58:70:d7:4f:b3:25:85:5e:79:26:3a:cf:7f:ee:98:ca:7e:
         1d:80:bd:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNksmUcU9c++bWLAAr2CXsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZGNiOGUxNDEwYzhjZDE4ZTUyNDU3ZjdlMWE5NTgwZDZk
YTUyMjYwHhcNMjQxMTI1MTkwMDMyWhcNMjQxMTI2MTkwMDMyWjAzMTEwLwYDVQQD
Eyg4NGFiNGU0NWU2MmNkYWEyNzY2NTU0Nzg4ZDBiMWJiZTNjNGM4OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16NpgrB4gLq2NKY/VcycMKg7st9G
HnEHgj0SztafioBbMprwkoGH1j8JqfZimV+SPaEeB/BOgxLhNmbL+yLdZhh+EqUf
45/FCWSa+z/bY7LHakqmR0KqpEOzc3JvQxmTCLPRXK1wOv15nCEivyEhKsf2W8+P
ugOa3k7dDZQSkRuxW9cjuL8R79jdKgnzK2yj65DKHHcpNxu39ZezhsXEvGVEYQ6o
GMTYcI78aQzYscR94vTuI4n3CnrhKk8ZjYuNkDnTZpp5ow1zwCzg9I5bcaqqkFSO
Eq4p7PKgelpugRdx7GsKEuqu+tJ3fnEBfwtEWJi3UBTTd8w5ct9KQiXf6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISrTkXmLNqidmVUeI0LG748TIl0MB8GA1UdIwQY
MBaAFBLcuOFBDIzRjlJFf34alYDW2lImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jM2MzYzQtMjdhMS00Yzc5LWI3ZGUt
Yjk0MDNmNjRiYTYwLzEvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jM2MzYzQtMjdhMS00Yzc5LWI3ZGUtYjk0MDNmNjRiYTYw
LzEvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV3rSCnB
3eEUAjSxJEDvqic9evs8ch/gzBFJXDVmJ8x/DdiI51ATuc3lqSImnDtsqlnI6YV7
DQJsCD3JY9HZS3WviZFHqmLVJo2zcAlIb/rDZezZlpUUiiT6IkKWUC5jaSpsHMOS
1lSHvJVUBFYNbjp8ORXwa3V6SlClH/nbnqnC6Hwxg14UBWO0hP8LbL4UNLovJnvB
udQdrP2FCGghVJoYYuuQRlcGuAVeRCRHOjbZ/4fjsxBYPUundbOcPC8xiAX6XXhI
N1AC3Isd2GjYoDu07uuoZAUENbjqD2q/sOzzfCPNzPuownKnb1hw10+zJYVeeSY6
z3/umMp+HYC97Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:00:08 2024 by rpki-client on console-ams.rpki-client.org