Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File:                     4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier:          ZT/DtTf8+VqLuup+UcBVl0htqD7rILDWowX7wrluPXs=
Subject key identifier:   9C:B2:35:9B:11:40:0E:29:1A:A8:80:17:14:1E:B0:F6:65:AF:AF:77
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer:       /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial:       019369DA4D669D5E29E0EE42B17931F7EDAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number:          1309
Signing time:             Tue 26 Nov 2024 19:02:14 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:14 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:14 +0000
Files and hashes:         1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: pYYyKOw93h6rt/N5WW+HCZV505q2lnEUWIpddsVKKz4=)
                          2: rgUisp-EAVY4KDS7HAHWjE59r3w.roa (hash: /NrvTHeZqXztpfPt3ROWKiJ2vw9Qk/TEeL2FxOlAkYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:4d:66:9d:5e:29:e0:ee:42:b1:79:31:f7:ed:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
        Validity
            Not Before: Nov 26 19:02:14 2024 GMT
            Not After : Nov 27 19:02:14 2024 GMT
        Subject: CN=9cb2359b11400e291aa88017141eb0f665afaf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:27:39:79:8b:0f:c8:5b:42:e2:41:b7:ca:
                    12:6f:0b:dd:28:1f:94:b2:f1:5f:86:d1:b7:0c:fc:
                    b8:3b:75:87:7f:92:d6:d5:d9:58:01:f7:be:47:08:
                    72:59:16:ef:ee:51:03:d4:bf:7d:6a:73:57:2b:91:
                    73:a8:d1:c2:54:3e:a6:f6:1a:bd:42:c6:5b:58:08:
                    fb:54:12:df:55:dd:d3:5e:53:e6:4c:88:9b:fd:68:
                    8e:7c:fd:fc:b9:36:9c:7c:82:5f:d7:2e:e4:4e:9c:
                    64:78:03:b6:1a:94:27:62:3d:c5:9d:69:eb:bb:ec:
                    97:41:f1:bf:b7:da:7d:13:6f:01:c5:bf:3e:00:8c:
                    eb:85:84:8a:3a:d1:eb:5e:77:ad:4d:d6:38:77:f8:
                    3b:8a:4e:bc:7c:56:9f:64:41:29:f6:b1:85:f6:cc:
                    ff:b4:2a:5d:04:7e:4c:f6:e8:29:bd:89:18:5e:00:
                    2e:d9:e6:37:99:0e:55:e4:a1:e6:17:cb:2f:bc:17:
                    4b:12:6d:35:93:69:f0:17:f4:86:26:7c:57:e8:39:
                    d1:5f:45:72:32:67:5b:a5:e0:8b:19:5e:68:dd:c5:
                    74:22:4e:68:18:7a:61:92:ce:27:d2:57:c8:5e:e9:
                    4b:79:33:b9:ec:20:d6:d0:81:f4:39:e3:d1:80:64:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B2:35:9B:11:40:0E:29:1A:A8:80:17:14:1E:B0:F6:65:AF:AF:77
            X509v3 Authority Key Identifier:
                keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:7d:53:8e:0e:70:6b:21:d3:3d:05:4f:c1:86:ee:ab:65:
         6e:65:a6:ac:21:14:88:4d:d2:ba:0e:5e:44:71:03:e3:2b:14:
         91:c8:83:d5:db:86:ec:1e:f2:bb:5f:87:c9:d6:97:0e:6e:6b:
         6e:58:32:25:ff:1b:7f:af:ef:ad:6e:bf:61:ea:df:6b:1c:92:
         6c:a3:86:de:5d:9f:20:83:a0:ef:bf:dd:c7:aa:2c:10:d8:6d:
         8e:17:ae:91:ea:58:ca:a9:50:ea:41:3c:fc:d6:39:2b:e0:af:
         15:e4:5a:86:63:ae:33:53:5f:e3:8a:73:4b:e5:cb:72:3e:f8:
         b4:b1:c8:5f:32:92:e6:93:a2:5a:58:d9:b5:59:62:23:ad:51:
         fb:f7:d7:75:3e:84:c8:bf:16:04:91:9f:33:98:5d:63:e2:4c:
         af:5a:7d:a2:cd:f1:1b:6f:10:fe:15:2e:0a:3d:37:6d:c7:c6:
         ac:3b:63:ee:9b:32:06:46:67:b7:49:11:64:90:f3:09:9e:19:
         67:1f:de:e5:27:a2:ac:4e:e5:f9:5a:6d:07:bd:2e:5d:8a:bb:
         25:fe:26:31:89:e7:76:e2:ea:96:14:35:ef:e4:8d:c7:cc:65:
         22:5b:6d:83:72:49:3a:9c:3b:ff:5b:8f:e9:d3:60:fd:12:63:
         ee:8e:ef:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2k1mnV4p4O5CsXkx9+2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDdiN2ViOGY0N2U1Mjc3OTEyZmYwNThjZmVkN2Q4OTlm
YzY5YjkwHhcNMjQxMTI2MTkwMjE0WhcNMjQxMTI3MTkwMjE0WjAzMTEwLwYDVQQD
Eyg5Y2IyMzU5YjExNDAwZTI5MWFhODgwMTcxNDFlYjBmNjY1YWZhZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+0nOXmLD8hbQuJBt8oSbwvdKB+U
svFfhtG3DPy4O3WHf5LW1dlYAfe+RwhyWRbv7lED1L99anNXK5FzqNHCVD6m9hq9
QsZbWAj7VBLfVd3TXlPmTIib/WiOfP38uTacfIJf1y7kTpxkeAO2GpQnYj3FnWnr
u+yXQfG/t9p9E28Bxb8+AIzrhYSKOtHrXnetTdY4d/g7ik68fFafZEEp9rGF9sz/
tCpdBH5M9ugpvYkYXgAu2eY3mQ5V5KHmF8svvBdLEm01k2nwF/SGJnxX6DnRX0Vy
MmdbpeCLGV5o3cV0Ik5oGHphks4n0lfIXulLeTO57CDW0IH0OePRgGTxSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyyNZsRQA4pGqiAFxQesPZlr693MB8GA1UdIwQY
MBaAFOLXt+uPR+UneRL/BYz+19iZ/Gm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMzNiY2EtNzI5ZC00M2UzLTk1Zjct
N2IwNDFjNTQ1NzZhLzEvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMzNiY2EtNzI5ZC00M2UzLTk1ZjctN2IwNDFjNTQ1NzZh
LzEvNHRlMzY0OUg1U2Q1RXY4RmpQN1gySm44YWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/J9U44O
cGsh0z0FT8GG7qtlbmWmrCEUiE3Sug5eRHED4ysUkciD1duG7B7yu1+HydaXDm5r
blgyJf8bf6/vrW6/YerfaxySbKOG3l2fIIOg77/dx6osENhtjheukepYyqlQ6kE8
/NY5K+CvFeRahmOuM1Nf44pzS+XLcj74tLHIXzKS5pOiWljZtVliI61R+/fXdT6E
yL8WBJGfM5hdY+JMr1p9os3xG28Q/hUuCj03bcfGrDtj7psyBkZnt0kRZJDzCZ4Z
Zx/e5SeirE7l+VptB70uXYq7Jf4mMYnnduLqlhQ17+SNx8xlIlttg3JJOpw7/1uP
6dNg/RJj7o7vQQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:17 2024 by rpki-client on console-fra.rpki-client.org