Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File:                     aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier:          +VxhHoHJ4xWiBkp5m94FirqdEwzYhvxV1G5Sps+IbTA=
Subject key identifier:   43:66:43:06:76:05:31:1D:A4:22:E3:1B:89:7A:7E:13:C6:B4:3D:A6
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer:       /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial:       0193549C6E4DED441E30D4E85270B9326016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number:          0767
Signing time:             Fri 22 Nov 2024 16:02:38 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:38 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:38 +0000
Files and hashes:         1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: 4yehrTihOaOztPKByPl1UJonVS9THqm/V9dlzEVRlOw=)
                          2: slahiM7f-RYHvbhMgYrSeVXgulo.roa (hash: /qmu+Dpp1bS3QpTnySyv+udWARgjycUFts78wP4iATE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:6e:4d:ed:44:1e:30:d4:e8:52:70:b9:32:60:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
        Validity
            Not Before: Nov 22 16:02:38 2024 GMT
            Not After : Nov 23 16:02:38 2024 GMT
        Subject: CN=436643067605311da422e31b897a7e13c6b43da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:71:1a:ff:09:83:ef:7e:2f:70:8e:ca:6a:
                    93:2b:e2:60:6a:b3:06:ff:00:46:ab:4a:ca:ce:74:
                    a8:fd:9c:ac:fe:7f:f4:ea:b4:e7:a9:5f:3f:03:42:
                    d7:5e:f6:76:32:37:74:ac:8f:17:5c:b6:b2:09:95:
                    70:81:9c:d7:52:3d:aa:1f:3c:11:25:8d:e7:26:a2:
                    1f:2f:40:08:6c:1c:44:bf:ae:db:b0:8e:70:16:b0:
                    d7:9c:32:be:6d:10:da:0b:80:66:54:84:36:02:15:
                    f1:66:7c:43:30:88:f6:70:51:6c:41:3e:b9:14:95:
                    8f:d1:b4:e5:4d:cb:bb:69:59:ec:1b:f2:b3:e3:dd:
                    66:17:f9:3b:c9:2e:0c:ad:ef:ec:65:26:11:e0:6d:
                    73:5c:59:59:05:45:cf:f1:24:7b:ba:48:77:f5:02:
                    da:2d:e5:b5:f9:44:36:8c:e6:74:85:18:10:be:88:
                    92:96:1b:13:00:b2:05:dd:01:56:be:98:7c:de:b0:
                    53:40:c5:61:0e:35:d0:08:d6:49:93:86:4c:db:1d:
                    b9:4a:64:45:71:f2:ad:42:d4:8d:c9:ed:a3:e8:12:
                    15:f5:31:34:34:b9:98:7e:c5:08:09:62:b0:e6:2d:
                    bd:0b:fb:00:74:60:4a:ca:bc:f7:1d:ee:f5:cf:1e:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:66:43:06:76:05:31:1D:A4:22:E3:1B:89:7A:7E:13:C6:B4:3D:A6
            X509v3 Authority Key Identifier:
                keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a1:c3:f1:3e:9f:d5:0f:38:6d:e6:8f:65:da:ff:59:61:cc:
         88:39:e4:64:6e:55:c4:80:38:55:87:1c:e8:1c:18:9b:43:10:
         e8:cf:af:8d:de:62:33:0f:90:3e:6a:13:40:ba:36:c6:2d:ec:
         b6:be:e6:cc:a7:07:34:f5:1e:c8:70:05:b6:4f:32:a6:23:d9:
         67:8d:48:2e:c2:69:9b:59:32:10:45:fa:88:8e:86:d5:68:7b:
         ed:bc:ce:34:ca:78:ec:b1:51:bd:8d:f5:6f:cf:93:b1:8d:4a:
         62:bf:06:54:f7:ef:54:55:30:15:60:ff:06:e8:e3:90:20:48:
         d3:45:52:c0:f3:1c:22:64:8d:0c:d2:cd:3e:05:f0:54:76:d3:
         e7:7e:3e:12:5e:dc:cd:b3:74:cd:9f:a5:f1:20:0d:63:e2:99:
         0a:e9:5c:9b:7f:1a:47:95:bd:e7:bf:2b:19:0e:28:29:7e:b4:
         30:49:ad:61:5d:7f:0a:1c:28:6e:d5:1e:6a:f5:aa:48:35:bd:
         c9:b0:c9:1d:9d:4b:eb:cf:8b:d8:b3:6e:f9:fe:ee:e9:40:5c:
         8a:16:2f:28:0c:fb:e0:fc:06:f8:07:c8:ba:13:be:0c:a2:24:
         cb:64:b6:f7:39:6c:95:46:3d:04:a1:d2:af:27:7e:17:5f:6b:
         af:cb:be:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnG5N7UQeMNToUnC5MmAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw
MjQ5NTYwHhcNMjQxMTIyMTYwMjM4WhcNMjQxMTIzMTYwMjM4WjAzMTEwLwYDVQQD
Eyg0MzY2NDMwNjc2MDUzMTFkYTQyMmUzMWI4OTdhN2UxM2M2YjQzZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVtxGv8Jg+9+L3COymqTK+JgarMG
/wBGq0rKznSo/Zys/n/06rTnqV8/A0LXXvZ2Mjd0rI8XXLayCZVwgZzXUj2qHzwR
JY3nJqIfL0AIbBxEv67bsI5wFrDXnDK+bRDaC4BmVIQ2AhXxZnxDMIj2cFFsQT65
FJWP0bTlTcu7aVnsG/Kz491mF/k7yS4Mre/sZSYR4G1zXFlZBUXP8SR7ukh39QLa
LeW1+UQ2jOZ0hRgQvoiSlhsTALIF3QFWvph83rBTQMVhDjXQCNZJk4ZM2x25SmRF
cfKtQtSNye2j6BIV9TE0NLmYfsUICWKw5i29C/sAdGBKyrz3He71zx4euwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENmQwZ2BTEdpCLjG4l6fhPGtD2mMB8GA1UdIwQY
MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt
MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0
LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaHD8T6f
1Q84beaPZdr/WWHMiDnkZG5VxIA4VYcc6BwYm0MQ6M+vjd5iMw+QPmoTQLo2xi3s
tr7mzKcHNPUeyHAFtk8ypiPZZ41ILsJpm1kyEEX6iI6G1Wh77bzONMp47LFRvY31
b8+TsY1KYr8GVPfvVFUwFWD/BujjkCBI00VSwPMcImSNDNLNPgXwVHbT534+El7c
zbN0zZ+l8SANY+KZCulcm38aR5W9578rGQ4oKX60MEmtYV1/ChwobtUeavWqSDW9
ybDJHZ1L68+L2LNu+f7u6UBcihYvKAz74PwG+AfIuhO+DKIky2S29zlslUY9BKHS
ryd+F19rr8u+sQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:13 2024 by rpki-client on console-fra.rpki-client.org