Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File:                     FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier:          It60rYFAwcoFLxncRPcW7yJy9SMEdwPFGxu2HJGTM8Y=
Subject key identifier:   FD:3D:0D:1B:CB:BC:14:20:B2:FF:70:3F:9C:E5:98:66:25:6C:91:D7
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer:       /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial:       01936AEB3ABBADD9027790764834915629DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number:          0BA4
Signing time:             Wed 27 Nov 2024 00:00:20 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:20 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:20 +0000
Files and hashes:         1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: E2wZpSdDoCmZJEedRm9WS7j1lGdqZOg5FMZ9B+/7BQs=)
                          2: XnUSjsrAlz9-ISjqx-aHoFsvx88.roa (hash: LduoJ+acjaWJu+P1bPaWL+6AAnJqqhMz1eLXfvTdfvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:3a:bb:ad:d9:02:77:90:76:48:34:91:56:29:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
        Validity
            Not Before: Nov 27 00:00:20 2024 GMT
            Not After : Nov 28 00:00:20 2024 GMT
        Subject: CN=fd3d0d1bcbbc1420b2ff703f9ce59866256c91d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6f:44:a8:9f:9c:ab:07:6c:ea:e7:27:7a:34:
                    86:ce:0e:2b:38:e6:04:ce:90:bc:26:9e:e4:9f:be:
                    92:49:28:cd:5c:0e:10:b2:f5:25:bb:d9:69:39:ca:
                    5e:90:88:aa:1e:b5:68:2b:03:94:2b:0c:e4:44:b5:
                    a8:06:8f:0b:8e:b1:50:4a:71:82:64:0b:9a:b7:f2:
                    df:e1:13:20:ed:aa:2d:4a:45:89:f1:fb:9a:64:72:
                    bf:86:2a:da:a8:7a:a7:db:8c:19:94:8e:05:df:eb:
                    4d:e7:89:71:5a:3b:aa:13:33:f6:b0:d9:a9:a2:3d:
                    13:c8:83:13:67:47:32:b9:97:21:58:30:c4:9e:af:
                    e8:0e:cf:95:54:bd:2b:5c:db:d4:63:4e:83:48:44:
                    2f:b9:cf:86:e8:0b:d1:f4:c4:b9:63:12:69:ed:13:
                    8a:e3:d7:8a:d1:e0:af:1e:93:33:3d:58:6c:c6:59:
                    86:f6:31:03:85:28:31:ed:15:0d:fb:5c:49:17:f0:
                    3d:1f:d3:a8:96:43:8e:5e:09:30:eb:14:cf:b7:84:
                    55:05:cc:d2:d5:b8:95:9a:08:9e:71:af:91:aa:4d:
                    8d:0e:ed:55:98:53:18:fd:c8:01:30:a9:dd:61:b6:
                    6e:4a:d1:15:99:35:2b:46:e1:86:58:0d:17:65:33:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3D:0D:1B:CB:BC:14:20:B2:FF:70:3F:9C:E5:98:66:25:6C:91:D7
            X509v3 Authority Key Identifier:
                keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0d:0b:e4:ac:90:c5:f7:84:96:bb:f6:69:63:15:50:0b:14:
         c6:41:fb:6c:a6:a9:34:f1:42:cd:96:8c:94:0f:91:a4:ca:ea:
         c8:6d:1d:c2:1a:44:22:7b:54:d9:5e:0e:a8:26:ce:d2:94:8a:
         b7:c3:75:88:5b:b0:19:82:31:82:6d:61:c5:a7:cd:c1:8e:84:
         25:4f:e2:20:65:87:e7:1d:d9:0a:16:b2:b1:ac:bf:6d:d4:54:
         68:f6:68:93:bb:e0:2b:cc:ef:01:96:c9:19:f3:d8:36:ca:df:
         25:61:0b:b3:14:47:c6:0c:34:d0:07:ee:b2:cc:72:2a:3a:ef:
         5c:98:59:b0:7e:ff:5a:fb:fc:f8:d3:f3:97:40:05:fa:a2:f7:
         76:c2:07:7e:4a:0c:15:d1:f8:a1:8f:37:f6:78:85:65:7d:c9:
         f9:db:09:fc:20:d3:23:56:e1:64:33:c0:77:b8:9f:6f:36:40:
         cc:cf:ba:20:45:5e:86:bf:2e:fa:43:e8:63:93:d2:53:5e:82:
         c4:c0:6b:28:c3:44:67:5f:a2:fe:55:71:fc:93:fb:7d:59:ae:
         57:42:ae:a0:08:53:30:8c:ba:cb:c7:6a:4f:0b:9e:ee:56:3a:
         8e:72:47:42:71:a4:33:d1:99:bd:59:35:a0:d4:79:e6:df:3d:
         c2:4a:f2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq6zq7rdkCd5B2SDSRVinbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTMyMTIxNWE0ZDM1ZWQyMjk4YjA3Mzk3MWRiNDA4ODY0
ZmQzNjIwHhcNMjQxMTI3MDAwMDIwWhcNMjQxMTI4MDAwMDIwWjAzMTEwLwYDVQQD
EyhmZDNkMGQxYmNiYmMxNDIwYjJmZjcwM2Y5Y2U1OTg2NjI1NmM5MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m9EqJ+cqwds6ucnejSGzg4rOOYE
zpC8Jp7kn76SSSjNXA4QsvUlu9lpOcpekIiqHrVoKwOUKwzkRLWoBo8LjrFQSnGC
ZAuat/Lf4RMg7aotSkWJ8fuaZHK/hiraqHqn24wZlI4F3+tN54lxWjuqEzP2sNmp
oj0TyIMTZ0cyuZchWDDEnq/oDs+VVL0rXNvUY06DSEQvuc+G6AvR9MS5YxJp7ROK
49eK0eCvHpMzPVhsxlmG9jEDhSgx7RUN+1xJF/A9H9OolkOOXgkw6xTPt4RVBczS
1biVmgieca+Rqk2NDu1VmFMY/cgBMKndYbZuStEVmTUrRuGGWA0XZTPHyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP09DRvLvBQgsv9wP5zlmGYlbJHXMB8GA1UdIwQY
MBaAFBajISFaTTXtIpiwc5cdtAiGT9NiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85Y2E4YjItNWVjOC00ZDJhLWI5OTQt
YzRjOTRiODgwNzFiLzEvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85Y2E4YjItNWVjOC00ZDJhLWI5OTQtYzRjOTRiODgwNzFi
LzEvRnFNaElWcE5OZTBpbUxCemx4MjBDSVpQMDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA0L5KyQ
xfeElrv2aWMVUAsUxkH7bKapNPFCzZaMlA+RpMrqyG0dwhpEIntU2V4OqCbO0pSK
t8N1iFuwGYIxgm1hxafNwY6EJU/iIGWH5x3ZChaysay/bdRUaPZok7vgK8zvAZbJ
GfPYNsrfJWELsxRHxgw00AfussxyKjrvXJhZsH7/Wvv8+NPzl0AF+qL3dsIHfkoM
FdH4oY839niFZX3J+dsJ/CDTI1bhZDPAd7ifbzZAzM+6IEVehr8u+kPoY5PSU16C
xMBrKMNEZ1+i/lVx/JP7fVmuV0KuoAhTMIy6y8dqTwue7lY6jnJHQnGkM9GZvVk1
oNR55t89wkrypw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:25 2024 by rpki-client on console-ams.rpki-client.org