Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File:                     8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier:          VuVFuBL8uWNGixqSBmA6g3A7rLYMcmfgwkWOUY5D0+M=
Subject key identifier:   DD:6E:56:65:8F:C0:3E:7D:DB:7C:77:F2:A7:D6:47:3D:35:A3:25:9D
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer:       /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial:       01935508936042F246D3E9CB2CF2E4F717C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number:          1302
Signing time:             Fri 22 Nov 2024 18:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:45 +0000
Files and hashes:         1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: HPiWKV6pgUASCCqFtoUX57g+HMnBbvp7rvukVu/N4RM=)
                          2: te7BzhGTUqhhlF11hh0YaBOprjI.roa (hash: KrC9vOv0ebHCdRYFm2BpYWUaECyofVf3/GwIteKCBuU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:93:60:42:f2:46:d3:e9:cb:2c:f2:e4:f7:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
        Validity
            Not Before: Nov 22 18:00:45 2024 GMT
            Not After : Nov 23 18:00:45 2024 GMT
        Subject: CN=dd6e56658fc03e7ddb7c77f2a7d6473d35a3259d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:98:41:4f:8f:d6:9c:01:38:50:c6:89:d2:
                    0a:91:72:06:28:30:84:09:ef:30:c6:6c:98:26:26:
                    31:7b:7d:e6:73:b8:6e:6c:0d:0b:d9:e7:79:79:b7:
                    ab:6e:7a:a9:b4:d7:d1:43:7a:b0:a5:97:a3:00:89:
                    55:98:b7:a0:18:bc:57:66:4d:fc:21:40:56:66:3e:
                    f7:9b:c9:92:6f:d5:63:dd:15:20:3f:9d:87:55:41:
                    e0:b3:48:9b:8f:0b:7c:15:3f:36:37:c1:62:b6:f8:
                    e2:e6:03:b6:db:e7:f7:ca:e5:1d:68:2b:a5:73:e9:
                    67:18:6a:ad:f8:8d:f9:c2:29:0f:30:f5:9c:ec:fa:
                    9f:9c:0b:a8:16:3b:bb:ca:46:03:1c:e9:ee:76:4f:
                    63:55:34:61:52:08:8c:78:06:44:28:66:61:6b:c4:
                    8a:d6:f9:83:0b:13:3d:12:ec:ed:33:71:ca:84:68:
                    a9:d0:ce:78:02:69:ae:ff:52:9d:a8:85:7e:0c:c2:
                    04:68:87:0a:b2:48:15:00:5a:07:53:ba:0e:4e:7b:
                    3e:18:26:60:92:b0:1e:31:8d:8a:74:51:bb:45:1c:
                    43:31:b3:ff:c8:4f:cb:4d:8d:ab:20:07:6e:94:ee:
                    25:66:2a:9f:5f:c0:7c:dc:82:10:76:8f:39:8d:ff:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:56:65:8F:C0:3E:7D:DB:7C:77:F2:A7:D6:47:3D:35:A3:25:9D
            X509v3 Authority Key Identifier:
                keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:8b:76:29:3f:29:3d:d9:57:fb:14:4f:8d:6f:70:82:54:0d:
         76:82:0b:8c:b9:81:74:f1:a1:0a:f1:6b:dd:81:b3:e4:a6:95:
         db:6f:98:d1:fb:26:b2:b5:f8:15:cd:4b:21:81:eb:7e:27:c2:
         90:59:b6:35:f6:dc:57:03:3e:b3:9b:a6:d2:29:5c:81:2c:a4:
         d2:7a:a1:ba:5f:3f:34:99:e8:3b:25:05:49:5e:60:14:4e:02:
         d1:87:76:d5:bd:ad:74:2a:f2:07:a1:67:fe:0a:fe:86:aa:2b:
         36:65:07:56:3d:e2:c4:c6:31:3d:e9:af:dc:70:fa:a8:f8:55:
         71:4d:e2:fe:c8:17:66:bc:f5:93:78:8f:42:63:b0:c0:ad:19:
         72:62:fb:22:7c:d7:9a:90:71:5d:26:6c:02:ca:98:29:9e:9e:
         4a:32:87:21:35:13:56:f7:69:5c:d1:29:05:aa:ea:97:3a:d2:
         2e:ec:c5:aa:a9:b2:a0:e7:bf:34:9e:40:6f:75:0e:6e:69:de:
         fa:f7:92:25:11:02:94:52:4e:0b:c9:c4:70:db:69:99:f4:b9:
         5f:70:69:61:1d:c8:b9:a5:27:73:ec:74:e1:46:fb:82:57:1b:
         6b:1f:cf:51:93:78:e0:57:fe:d0:fe:59:d3:9f:cb:86:0b:2a:
         47:f5:e9:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVCJNgQvJG0+nLLPLk9xfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3
NmEzODQwHhcNMjQxMTIyMTgwMDQ1WhcNMjQxMTIzMTgwMDQ1WjAzMTEwLwYDVQQD
EyhkZDZlNTY2NThmYzAzZTdkZGI3Yzc3ZjJhN2Q2NDczZDM1YTMyNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuheYQU+P1pwBOFDGidIKkXIGKDCE
Ce8wxmyYJiYxe33mc7hubA0L2ed5eberbnqptNfRQ3qwpZejAIlVmLegGLxXZk38
IUBWZj73m8mSb9Vj3RUgP52HVUHgs0ibjwt8FT82N8Fitvji5gO22+f3yuUdaCul
c+lnGGqt+I35wikPMPWc7PqfnAuoFju7ykYDHOnudk9jVTRhUgiMeAZEKGZha8SK
1vmDCxM9EuztM3HKhGip0M54Ammu/1KdqIV+DMIEaIcKskgVAFoHU7oOTns+GCZg
krAeMY2KdFG7RRxDMbP/yE/LTY2rIAdulO4lZiqfX8B83IIQdo85jf83swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1uVmWPwD5923x38qfWRz01oyWdMB8GA1UdIwQY
MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt
NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5
LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYt2KT8p
PdlX+xRPjW9wglQNdoILjLmBdPGhCvFr3YGz5KaV22+Y0fsmsrX4Fc1LIYHrfifC
kFm2NfbcVwM+s5um0ilcgSyk0nqhul8/NJnoOyUFSV5gFE4C0Yd21b2tdCryB6Fn
/gr+hqorNmUHVj3ixMYxPemv3HD6qPhVcU3i/sgXZrz1k3iPQmOwwK0ZcmL7InzX
mpBxXSZsAsqYKZ6eSjKHITUTVvdpXNEpBarqlzrSLuzFqqmyoOe/NJ5Ab3UObmne
+veSJREClFJOC8nEcNtpmfS5X3BpYR3IuaUnc+x04Ub7glcbax/PUZN44Ff+0P5Z
05/LhgsqR/Xpbw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:21 2024 by rpki-client on console-fra.rpki-client.org