Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
File:                     8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json)
Hash identifier:          yUq31i2RcuG9mnTm4EK6c3Ds2lDFc3IgbWpEKNuZgto=
Subject key identifier:   76:8A:0E:82:38:DF:70:E5:6E:DC:17:31:40:09:CC:41:21:EB:28:5D
Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Certificate issuer:       /CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Certificate serial:       019357D2A1CA79161B8C91914EAD596F61DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
Manifest number:          99
Signing time:             Sat 23 Nov 2024 07:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:41 +0000
Files and hashes:         1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: YUtJdb35Yy95A/Ah5pooKRG0vEZSLdFGrtT0gdmvBTs=)
                          2: VQMtuTfgZCSZ8-AbnXnHaAy5QOg.roa (hash: Fxg9cjsIs8Du4wHGW4RJrUTGiSUqVvyhBOKgdSL4+3I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a1:ca:79:16:1b:8c:91:91:4e:ad:59:6f:61:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
        Validity
            Not Before: Nov 23 07:00:41 2024 GMT
            Not After : Nov 24 07:00:41 2024 GMT
        Subject: CN=768a0e8238df70e56edc17314009cc4121eb285d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:4a:6f:22:7b:b4:96:f9:67:7a:c0:84:4c:
                    c5:72:40:3f:f8:73:b7:de:52:21:10:41:1e:68:08:
                    ab:49:ac:4d:c0:65:99:32:fc:fe:71:f3:99:34:33:
                    ac:a7:67:e4:2e:68:c3:8f:5a:44:f8:96:9d:75:a1:
                    e8:c8:dc:9d:20:f9:d9:a1:e3:b6:54:99:f8:e5:22:
                    b6:1e:ec:a6:e5:4b:a6:95:ee:e9:2c:e5:f5:8b:ee:
                    c1:50:4c:ca:c9:bf:cc:8b:54:59:f1:30:f9:7e:cf:
                    90:f9:bc:ac:8b:15:ec:86:ad:28:d7:0d:c7:9b:30:
                    f0:96:e0:b2:11:24:25:3a:63:04:1f:d2:cf:fd:ae:
                    fa:15:cd:78:44:9c:1a:42:34:86:17:84:45:91:5e:
                    7a:90:0b:ef:c2:86:bc:5d:cd:fe:5e:c3:a0:03:e6:
                    14:f5:a0:0a:29:7c:0a:e8:16:5b:13:fa:72:4d:a1:
                    2e:c2:69:1d:a0:c7:b7:ac:f6:1c:4d:33:14:25:f4:
                    6c:38:15:67:db:24:06:20:60:51:fb:62:28:01:5d:
                    d9:a1:9f:85:f5:83:83:b2:a4:e3:01:d0:b0:ea:a4:
                    c2:ce:1a:b3:88:76:84:45:cf:bb:c2:8f:ab:6e:7a:
                    a2:43:1f:4c:c0:61:5d:07:bd:c4:3d:53:dd:85:66:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:0E:82:38:DF:70:E5:6E:DC:17:31:40:09:CC:41:21:EB:28:5D
            X509v3 Authority Key Identifier:
                keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d0:e2:7e:e4:3d:06:f2:09:53:97:60:82:b5:00:86:c8:c6:
         07:b2:bf:f1:1e:81:2b:a0:b1:21:5a:fb:f4:c4:11:37:a1:e4:
         dd:9f:27:2b:a0:ce:43:15:94:9e:71:a4:4f:12:6e:04:c2:7d:
         48:06:f9:8d:13:85:c2:d1:87:01:e8:fb:ca:b3:1a:ef:a7:7e:
         72:26:38:3c:bd:79:da:5f:eb:dd:52:d8:92:a0:fb:e5:a8:fc:
         5a:0c:98:7b:c5:2c:0c:e5:df:ae:8a:f1:24:33:e9:44:3f:b0:
         e2:ca:f9:31:0d:73:c4:bd:55:e9:d0:ae:a9:55:3a:46:ac:ed:
         9d:71:2f:43:d3:e8:4a:55:69:ee:c8:5e:52:23:a5:87:06:f7:
         d9:21:e6:2d:20:e9:85:90:79:4e:56:5a:44:f1:c2:5d:57:cc:
         d2:31:e5:84:ea:75:29:99:02:57:ef:5b:dd:21:b1:83:66:29:
         df:51:f9:47:38:3e:80:12:39:01:bc:8d:44:ae:c2:3b:1b:f8:
         ee:68:55:32:9a:65:49:8d:47:8b:10:e8:a0:88:08:36:55:cc:
         9a:95:60:4b:af:04:ff:42:33:04:27:d2:c9:d7:de:b8:f8:b5:
         28:9e:40:2b:3c:bd:89:c2:e1:d2:df:95:0e:75:63:c1:56:06:
         36:c3:55:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0qHKeRYbjJGRTq1Zb2HaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwN2JlOWQxMTg5NzcxYjczMzdlZmMxY2VkMmM4MjVkYzI0
NzJhNTYwHhcNMjQxMTIzMDcwMDQxWhcNMjQxMTI0MDcwMDQxWjAzMTEwLwYDVQQD
Eyg3NjhhMGU4MjM4ZGY3MGU1NmVkYzE3MzE0MDA5Y2M0MTIxZWIyODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5BKbyJ7tJb5Z3rAhEzFckA/+HO3
3lIhEEEeaAirSaxNwGWZMvz+cfOZNDOsp2fkLmjDj1pE+JaddaHoyNydIPnZoeO2
VJn45SK2Huym5Uumle7pLOX1i+7BUEzKyb/Mi1RZ8TD5fs+Q+bysixXshq0o1w3H
mzDwluCyESQlOmMEH9LP/a76Fc14RJwaQjSGF4RFkV56kAvvwoa8Xc3+XsOgA+YU
9aAKKXwK6BZbE/pyTaEuwmkdoMe3rPYcTTMUJfRsOBVn2yQGIGBR+2IoAV3ZoZ+F
9YODsqTjAdCw6qTCzhqziHaERc+7wo+rbnqiQx9MwGFdB73EPVPdhWavjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaKDoI433DlbtwXMUAJzEEh6yhdMB8GA1UdIwQY
MBaAFPB76dEYl3G3M378HO0sgl3CRypWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEt
M2ZiMDg3MGVhMjU5LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEtM2ZiMDg3MGVhMjU5
LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttDifuQ9
BvIJU5dggrUAhsjGB7K/8R6BK6CxIVr79MQRN6Hk3Z8nK6DOQxWUnnGkTxJuBMJ9
SAb5jROFwtGHAej7yrMa76d+ciY4PL152l/r3VLYkqD75aj8WgyYe8UsDOXfrorx
JDPpRD+w4sr5MQ1zxL1V6dCuqVU6RqztnXEvQ9PoSlVp7sheUiOlhwb32SHmLSDp
hZB5TlZaRPHCXVfM0jHlhOp1KZkCV+9b3SGxg2Yp31H5Rzg+gBI5AbyNRK7COxv4
7mhVMpplSY1HixDooIgINlXMmpVgS68E/0IzBCfSydfeuPi1KJ5AKzy9icLh0t+V
DnVjwVYGNsNV7Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:24 2024 by rpki-client on console-fra.rpki-client.org