Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File:                     llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier:          iabieEQe5i3N7gk5reNqvJAsm+fG2iQtTFbpsT6lyts=
Subject key identifier:   BA:8E:36:7A:85:3B:A1:35:E9:E7:0F:6B:A4:AA:9E:A8:F7:36:6B:28
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer:       /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial:       01935508B9CAC9ACEFBCD1CAD4D71D0C5262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 18:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:55 +0000
Files and hashes:         1: 90Ft_n5Lp5pJTloM7B0KAefkSvI.roa (hash: QHz7PA1of0BvyI7ahNStMMmv99OTW8noZyIRqzh8aHc=)
                          2: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: Rnz/g8j0wNA3mFnhVABaT26DlK6QM5AOLNHrhDTh5MQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:b9:ca:c9:ac:ef:bc:d1:ca:d4:d7:1d:0c:52:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
        Validity
            Not Before: Nov 22 18:00:55 2024 GMT
            Not After : Nov 23 18:00:55 2024 GMT
        Subject: CN=ba8e367a853ba135e9e70f6ba4aa9ea8f7366b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:80:63:33:c5:7d:06:30:69:b6:4c:da:ce:
                    ad:72:e6:56:59:93:64:e0:87:8d:eb:f6:75:74:35:
                    57:6e:65:aa:7a:60:c5:2f:9e:57:2c:c9:ac:0b:62:
                    61:3b:2b:65:7f:87:fb:fe:db:f0:ad:62:3c:4b:8c:
                    39:1c:9f:17:fe:50:ef:04:d0:f6:eb:62:e1:ed:f1:
                    10:da:6e:1f:eb:f0:ce:e5:84:48:83:53:a6:d6:35:
                    d9:f3:7e:4a:4c:63:83:5e:e8:db:3c:50:75:ce:91:
                    cb:89:9b:9b:c6:65:29:3e:65:9c:0a:41:f0:b5:d5:
                    86:7b:59:4b:59:19:f4:fa:a3:43:2c:fc:6c:a3:c0:
                    0b:e5:ad:3b:a9:45:26:8f:81:0e:d8:36:67:25:89:
                    cb:4c:7b:52:16:c0:67:90:da:db:98:1c:76:ac:92:
                    b7:01:8a:ba:43:98:28:38:6c:16:af:e7:94:02:ae:
                    34:5d:76:61:ef:21:84:25:c9:83:ca:43:15:12:40:
                    f9:d0:30:be:f0:51:6a:25:06:bc:23:9c:c7:5b:8f:
                    c1:8f:cf:09:4a:23:87:8a:b3:3b:3a:56:b7:f2:bd:
                    4c:0e:1a:24:d3:98:f8:3e:3d:b1:28:ec:e9:18:54:
                    3a:6a:a7:11:65:94:37:c5:4d:b0:33:01:5e:a8:1f:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8E:36:7A:85:3B:A1:35:E9:E7:0F:6B:A4:AA:9E:A8:F7:36:6B:28
            X509v3 Authority Key Identifier:
                keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:ac:b0:61:38:d8:53:d4:39:17:f6:4b:dc:cf:8c:4b:73:
         13:53:51:b9:6d:99:6f:c6:87:d1:dd:04:ee:b0:fa:80:08:28:
         9d:34:32:ce:38:f0:20:9b:50:3b:5c:d3:02:05:45:b7:05:e7:
         e5:97:cd:a9:e5:64:d4:d1:54:83:9d:1c:b7:7f:18:e2:65:8e:
         54:ee:ba:e4:52:92:d4:12:c6:7a:07:07:fd:2b:e2:10:d7:9f:
         fd:ab:f6:47:d1:cc:d2:11:52:25:7e:eb:3b:2a:21:56:46:38:
         d1:88:f8:b0:74:25:17:f5:71:27:29:c3:89:85:c5:76:94:d2:
         39:08:48:10:f9:2c:66:d7:03:d4:58:43:2e:00:7b:f1:80:30:
         cb:94:0e:03:7b:61:55:33:7b:95:c5:f4:33:43:20:a7:dd:bd:
         d3:df:cc:95:9d:53:cc:e0:78:cf:b7:a5:06:b0:99:0a:30:c8:
         22:17:3b:b1:c7:9a:5b:44:d5:76:eb:c5:e1:f3:54:13:cf:47:
         26:b2:e4:80:94:1f:8e:8f:08:c6:c4:85:20:d6:7b:e1:61:08:
         a0:a7:00:3a:25:f1:2e:e2:b4:10:92:1f:16:17:24:4d:c7:77:
         c8:c1:8e:72:90:5e:cf:00:a4:6d:1e:33:ae:ba:a2:23:d4:2a:
         07:80:84:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCLnKyazvvNHK1NcdDFJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ1YmFkMzk2MjVhZWE2NzkwM2Y4MTgzZjlmYmJhZWFj
NmM4OGQwHhcNMjQxMTIyMTgwMDU1WhcNMjQxMTIzMTgwMDU1WjAzMTEwLwYDVQQD
EyhiYThlMzY3YTg1M2JhMTM1ZTllNzBmNmJhNGFhOWVhOGY3MzY2YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt42AYzPFfQYwabZM2s6tcuZWWZNk
4IeN6/Z1dDVXbmWqemDFL55XLMmsC2JhOytlf4f7/tvwrWI8S4w5HJ8X/lDvBND2
62Lh7fEQ2m4f6/DO5YRIg1Om1jXZ835KTGODXujbPFB1zpHLiZubxmUpPmWcCkHw
tdWGe1lLWRn0+qNDLPxso8AL5a07qUUmj4EO2DZnJYnLTHtSFsBnkNrbmBx2rJK3
AYq6Q5goOGwWr+eUAq40XXZh7yGEJcmDykMVEkD50DC+8FFqJQa8I5zHW4/Bj88J
SiOHirM7Ola38r1MDhok05j4Pj2xKOzpGFQ6aqcRZZQ3xU2wMwFeqB8o6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqONnqFO6E16ecPa6Sqnqj3NmsoMB8GA1UdIwQY
MBaAFJZUW605YlrqZ5A/gYP5+7rqxsiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmIt
OGQ0NGRlNTRjZmE3LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmItOGQ0NGRlNTRjZmE3
LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1SssGE4
2FPUORf2S9zPjEtzE1NRuW2Zb8aH0d0E7rD6gAgonTQyzjjwIJtQO1zTAgVFtwXn
5ZfNqeVk1NFUg50ct38Y4mWOVO665FKS1BLGegcH/SviENef/av2R9HM0hFSJX7r
OyohVkY40Yj4sHQlF/VxJynDiYXFdpTSOQhIEPksZtcD1FhDLgB78YAwy5QOA3th
VTN7lcX0M0Mgp92909/MlZ1TzOB4z7elBrCZCjDIIhc7sceaW0TVduvF4fNUE89H
JrLkgJQfjo8IxsSFINZ74WEIoKcAOiXxLuK0EJIfFhckTcd3yMGOcpBezwCkbR4z
rrqiI9QqB4CENg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:30 2024 by rpki-client on console-fra.rpki-client.org