Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File:                     8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier:          I6+zXQAw0o08VkfFRCrb8VBNU7paC+Gg3HDRs1QkmMA=
Subject key identifier:   4D:57:25:5B:8D:06:9E:2A:26:30:6D:AF:80:12:ED:80:E7:80:90:7D
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer:       /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial:       019365FC0A8EE4E0BC4A9CB307205ECAC666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number:          1377
Signing time:             Tue 26 Nov 2024 01:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:36 +0000
Files and hashes:         1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: VteXFkTkKKvP/fCevbU79KJ74xNAixXOisXjasJrH1w=)
                          2: v9RJFoBiaUTkzKiU9LRy_gae3bo.roa (hash: WKTULwo8wbxxNrGGQZx7kXnNpzRyLuIe+P6Dgckpp4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:0a:8e:e4:e0:bc:4a:9c:b3:07:20:5e:ca:c6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
        Validity
            Not Before: Nov 26 01:00:36 2024 GMT
            Not After : Nov 27 01:00:36 2024 GMT
        Subject: CN=4d57255b8d069e2a26306daf8012ed80e780907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:25:18:6c:ca:ac:6e:4a:9e:15:51:1e:08:
                    cd:a4:02:40:a1:ef:91:7f:0a:ff:b0:f0:a0:24:d3:
                    11:ce:7f:07:e9:c8:67:c1:91:47:3c:b2:c6:cf:25:
                    8d:e1:8b:af:61:af:f8:f0:12:be:a3:5c:eb:25:b1:
                    86:fd:7e:ef:ca:ee:e1:4a:d0:2f:39:41:38:dd:f3:
                    82:c5:94:0f:29:0e:a3:c6:8a:65:80:aa:60:07:f6:
                    34:56:cf:d6:38:96:5d:54:58:a4:f8:bf:3f:6e:b9:
                    63:1f:29:cd:df:5b:ab:65:a2:7b:30:7e:b3:93:40:
                    1c:bb:43:b1:0f:84:13:c2:3d:fa:bc:3c:9e:33:4e:
                    f8:dc:99:fb:a7:1f:f2:b3:ff:1b:3a:15:38:65:2a:
                    91:7b:f1:38:a0:c3:90:fd:69:dd:89:4a:c8:23:2b:
                    b2:7a:5d:fd:66:6b:bd:aa:24:7c:a6:36:7e:9a:bf:
                    ab:fd:b8:f8:aa:0e:09:05:f2:a5:c6:2b:60:6d:1e:
                    ef:0a:87:3b:a0:73:6b:93:6c:82:96:23:20:87:44:
                    05:fc:c5:fe:f4:55:a6:f4:45:d8:3d:ee:83:12:5e:
                    35:08:7f:18:82:0c:6e:9b:7c:2a:4e:16:1c:2d:41:
                    7f:db:60:aa:dc:0a:95:49:31:8a:79:49:fd:85:8d:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:25:5B:8D:06:9E:2A:26:30:6D:AF:80:12:ED:80:E7:80:90:7D
            X509v3 Authority Key Identifier:
                keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:f8:bb:56:1c:4b:f3:63:20:c6:52:0d:1f:b7:27:ee:6f:
         ab:22:63:4f:61:12:4f:5b:5e:ed:49:7e:22:e8:f2:a6:a6:0a:
         7a:1a:5f:59:df:2a:47:f9:35:06:08:30:c2:9f:7f:6f:97:93:
         77:37:91:f9:4c:0f:d4:9d:48:50:26:0d:96:83:b0:97:d9:ab:
         fd:77:33:7f:30:f9:e0:24:23:8c:c0:a0:ec:32:50:d5:01:92:
         9e:44:eb:3b:96:4c:98:3d:30:f5:fa:97:33:d3:7b:be:eb:63:
         53:f9:4a:88:99:88:c9:7d:be:ce:d9:a0:9a:c7:23:46:5f:93:
         1f:9d:17:03:91:7d:31:99:a8:69:8d:42:06:20:6f:47:b8:d1:
         9e:e7:3f:8c:c4:89:89:89:00:57:ac:46:59:61:2d:a5:1f:45:
         8f:f7:df:66:67:0b:ab:c1:07:d1:39:0f:e2:6c:de:e8:57:c3:
         89:d1:20:93:35:ee:7e:df:f2:0e:60:c9:d2:5d:1d:86:5e:83:
         0c:23:7b:a9:ee:cd:e6:f1:20:1c:ed:86:45:5e:0d:3c:51:38:
         76:e1:0b:38:33:9b:6a:e8:3a:08:aa:eb:d4:d7:20:8c:e5:31:
         7f:37:26:86:20:df:3a:f6:ed:d4:5a:72:ad:20:2a:c2:55:b9:
         b8:64:76:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/AqO5OC8SpyzByBeysZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOTZmYTc5OTY3ZTFhZWEwNDI2MDJmOTMyNDI4ODBhOTU0
MzkzOGIwHhcNMjQxMTI2MDEwMDM2WhcNMjQxMTI3MDEwMDM2WjAzMTEwLwYDVQQD
Eyg0ZDU3MjU1YjhkMDY5ZTJhMjYzMDZkYWY4MDEyZWQ4MGU3ODA5MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW0lGGzKrG5KnhVRHgjNpAJAoe+R
fwr/sPCgJNMRzn8H6chnwZFHPLLGzyWN4YuvYa/48BK+o1zrJbGG/X7vyu7hStAv
OUE43fOCxZQPKQ6jxoplgKpgB/Y0Vs/WOJZdVFik+L8/brljHynN31urZaJ7MH6z
k0Acu0OxD4QTwj36vDyeM0743Jn7px/ys/8bOhU4ZSqRe/E4oMOQ/WndiUrIIyuy
el39Zmu9qiR8pjZ+mr+r/bj4qg4JBfKlxitgbR7vCoc7oHNrk2yCliMgh0QF/MX+
9FWm9EXYPe6DEl41CH8Yggxum3wqThYcLUF/22Cq3AqVSTGKeUn9hY2hGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1XJVuNBp4qJjBtr4AS7YDngJB9MB8GA1UdIwQY
MBaAFPKW+nmWfhrqBCYC+TJCiAqVQ5OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYt
OTQwOWQ5MTA5MGZhLzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYtOTQwOWQ5MTA5MGZh
LzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9r4u1Yc
S/NjIMZSDR+3J+5vqyJjT2EST1te7Ul+IujypqYKehpfWd8qR/k1Bggwwp9/b5eT
dzeR+UwP1J1IUCYNloOwl9mr/XczfzD54CQjjMCg7DJQ1QGSnkTrO5ZMmD0w9fqX
M9N7vutjU/lKiJmIyX2+ztmgmscjRl+TH50XA5F9MZmoaY1CBiBvR7jRnuc/jMSJ
iYkAV6xGWWEtpR9Fj/ffZmcLq8EH0TkP4mze6FfDidEgkzXuft/yDmDJ0l0dhl6D
DCN7qe7N5vEgHO2GRV4NPFE4duELODObaug6CKrr1NcgjOUxfzcmhiDfOvbt1Fpy
rSAqwlW5uGR2Ag==
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:18:47 2024 by rpki-client on console-fra.rpki-client.org