Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File:                     2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier:          ykBBhQjPD5sajX4QXoWrYa9I3GTcEB+i7MFi7ss47Rc=
Subject key identifier:   20:23:7B:06:39:EB:76:92:AE:FD:2F:89:9F:75:04:6D:87:97:A9:C0
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer:       /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial:       019369D9DF23F49C3ECDBBED52FC1FFF1689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number:          01B9
Signing time:             Tue 26 Nov 2024 19:01:46 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:46 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:46 +0000
Files and hashes:         1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: EYrTt0Dl45fm36Yf2O7tk+Qso7lLnlN0k04xGtt1Fqw=)
                          2: QkLyjSan_Ah_fesckd4LqSyPgfk.roa (hash: ymTIWKGFTWO+20GWHBiAGFGeKKHl13LireTe8tZ6XD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:df:23:f4:9c:3e:cd:bb:ed:52:fc:1f:ff:16:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
        Validity
            Not Before: Nov 26 19:01:46 2024 GMT
            Not After : Nov 27 19:01:46 2024 GMT
        Subject: CN=20237b0639eb7692aefd2f899f75046d8797a9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:cb:ec:cf:68:7b:93:1b:b1:3f:3a:9e:b9:
                    c0:62:c4:99:7c:b1:a3:ec:ee:88:a9:f4:e5:1e:0b:
                    ec:4f:a2:17:34:56:13:23:93:97:15:ae:bb:32:55:
                    6e:2d:ec:98:75:1e:ac:4e:2d:d5:02:fc:e4:db:f9:
                    8d:4e:47:7d:d7:81:cc:30:f8:a2:13:4f:d6:6d:54:
                    73:36:cb:a9:94:71:1d:76:fe:f8:e6:e5:24:aa:af:
                    6c:bd:2e:f5:33:1f:60:56:10:a3:b1:3b:2e:97:18:
                    57:f0:5e:ac:4a:f2:d7:95:b9:60:d4:14:b2:a4:c9:
                    b2:28:1c:58:1f:3a:23:e6:7a:14:f0:9d:aa:12:78:
                    3a:e2:1f:b2:be:57:1c:ad:7b:62:c7:3c:24:c2:a2:
                    ce:41:ee:34:e2:e8:7f:e8:9d:99:f0:a5:92:8e:45:
                    53:d5:fe:b6:74:57:49:f0:64:12:f1:fa:9d:20:1f:
                    ab:64:ff:5b:23:63:dd:9d:43:c7:dc:bd:e7:d2:6c:
                    b5:3f:6f:46:a7:65:69:e7:f2:89:6d:ad:9b:f3:d3:
                    6c:80:ba:d2:f1:20:e2:3b:be:10:cb:96:03:9c:cc:
                    73:ae:3e:87:85:32:6b:e1:48:2f:bd:9f:2a:74:c6:
                    aa:fc:24:bc:e9:17:54:c2:a8:f1:b2:0e:03:98:e4:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:7B:06:39:EB:76:92:AE:FD:2F:89:9F:75:04:6D:87:97:A9:C0
            X509v3 Authority Key Identifier:
                keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a5:eb:9d:16:85:47:a2:f3:ad:05:cc:46:a3:eb:21:f8:29:
         77:a4:e3:66:8d:a7:fb:45:af:7e:96:e3:8c:e0:85:51:7e:a3:
         50:04:a6:29:68:06:cc:6c:ad:f8:fc:1b:d8:82:65:3a:07:45:
         32:36:3a:79:d2:79:dd:77:1c:75:2b:bc:3e:33:da:9d:ec:d5:
         45:01:ea:7f:cd:97:5f:21:84:ca:7b:82:6d:69:ce:23:b7:f9:
         89:6b:02:16:6f:76:e2:78:81:74:ce:52:72:ed:da:ba:a3:33:
         9c:54:ea:35:3e:d6:c3:78:b3:eb:d2:82:86:66:37:81:ab:91:
         28:a8:6a:e9:08:ae:65:94:ce:8d:cc:6b:12:11:53:8a:59:1b:
         46:dd:32:c1:76:cb:3c:cd:15:bb:3e:23:fe:d2:15:a0:ff:1d:
         45:56:18:be:1f:7d:f6:69:d8:93:4e:28:a5:4b:dd:88:65:68:
         d4:6c:fb:a5:73:e0:9b:e6:3a:57:0b:a5:42:4f:4c:da:47:fa:
         61:db:43:d6:8e:2d:fd:3b:13:85:3f:d1:6f:5b:58:17:17:8c:
         ca:d2:07:fe:36:1f:ea:db:7e:ce:51:0c:b0:61:15:2f:f4:9a:
         50:c2:23:e1:1d:00:a0:a9:1d:af:2e:49:70:f3:87:26:47:c5:
         92:5e:70:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2d8j9Jw+zbvtUvwf/xaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTllNWQ2NGU0NGIxNzMzYzYxNzM3MzM3Y2U4MmI0YTY5
NDNhNDYwHhcNMjQxMTI2MTkwMTQ2WhcNMjQxMTI3MTkwMTQ2WjAzMTEwLwYDVQQD
EygyMDIzN2IwNjM5ZWI3NjkyYWVmZDJmODk5Zjc1MDQ2ZDg3OTdhOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05bL7M9oe5MbsT86nrnAYsSZfLGj
7O6IqfTlHgvsT6IXNFYTI5OXFa67MlVuLeyYdR6sTi3VAvzk2/mNTkd914HMMPii
E0/WbVRzNsuplHEddv745uUkqq9svS71Mx9gVhCjsTsulxhX8F6sSvLXlblg1BSy
pMmyKBxYHzoj5noU8J2qEng64h+yvlccrXtixzwkwqLOQe404uh/6J2Z8KWSjkVT
1f62dFdJ8GQS8fqdIB+rZP9bI2PdnUPH3L3n0my1P29Gp2Vp5/KJba2b89NsgLrS
8SDiO74Qy5YDnMxzrj6HhTJr4UgvvZ8qdMaq/CS86RdUwqjxsg4DmORj0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAjewY563aSrv0viZ91BG2Hl6nAMB8GA1UdIwQY
MBaAFNmZ5dZORLFzPGFzczfOgrSmlDpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjIt
OWY0N2M3NDEwZDQxLzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjItOWY0N2M3NDEwZDQx
LzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaXrnRaF
R6LzrQXMRqPrIfgpd6TjZo2n+0WvfpbjjOCFUX6jUASmKWgGzGyt+Pwb2IJlOgdF
MjY6edJ53XccdSu8PjPanezVRQHqf82XXyGEynuCbWnOI7f5iWsCFm924niBdM5S
cu3auqMznFTqNT7Ww3iz69KChmY3gauRKKhq6QiuZZTOjcxrEhFTilkbRt0ywXbL
PM0Vuz4j/tIVoP8dRVYYvh999mnYk04opUvdiGVo1Gz7pXPgm+Y6VwulQk9M2kf6
YdtD1o4t/TsThT/Rb1tYFxeMytIH/jYf6tt+zlEMsGEVL/SaUMIj4R0AoKkdry5J
cPOHJkfFkl5wRg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:48 2024 by rpki-client on console-fra.rpki-client.org