Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
File:                     R8VBw62lOmIHxADI-fOkhurrubA.mft (raw, json)
Hash identifier:          wD9cNFvMRPK+WJCtGWKMEVX7QUAe8RCAmTIkwEN3BPs=
Subject key identifier:   27:EF:6E:E3:BE:41:CA:CD:8A:44:56:AB:79:F7:74:83:18:38:6E:4E
Authority key identifier: 47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
Certificate issuer:       /CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Certificate serial:       019356F6C9F4655FD58E639DF7B0C2F764C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
Manifest number:          0B
Signing time:             Sat 23 Nov 2024 03:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:34 +0000
Files and hashes:         1: R8VBw62lOmIHxADI-fOkhurrubA.crl (hash: EaYgNWLfNrgJO/J2z4JBhHQUx+oGPBzt7CmaLm1oe88=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:c9:f4:65:5f:d5:8e:63:9d:f7:b0:c2:f7:64:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
        Validity
            Not Before: Nov 23 03:00:34 2024 GMT
            Not After : Nov 24 03:00:34 2024 GMT
        Subject: CN=27ef6ee3be41cacd8a4456ab79f7748318386e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:68:a6:41:57:f9:37:e6:27:35:ee:d7:42:
                    de:6b:c1:d2:74:96:d5:09:1f:33:09:41:f3:76:59:
                    20:e5:05:5d:c5:11:da:44:85:66:47:02:4b:ca:5b:
                    c6:8d:69:71:93:c2:9e:68:11:24:1a:4f:62:65:f3:
                    36:a7:13:ed:10:22:c5:33:0f:47:a4:ca:c7:ae:46:
                    a6:05:53:1d:e5:2d:bd:41:61:45:58:b0:94:d8:47:
                    ca:a8:32:2e:df:55:f7:41:be:f8:19:af:14:f4:38:
                    97:c2:f3:30:d2:1c:5b:95:32:61:e4:fe:a7:6e:8c:
                    0e:7b:aa:81:a5:ee:21:06:d6:21:ac:90:2f:77:16:
                    34:7a:12:10:43:e0:56:5d:d4:92:68:05:bc:89:6a:
                    c0:f2:2f:5a:14:52:d1:83:b1:a0:93:39:86:a8:50:
                    d8:04:bf:2d:11:d6:d3:ac:e7:81:36:de:c0:4b:62:
                    db:c2:6a:db:ef:18:12:dd:d3:76:68:2e:ac:4e:7e:
                    26:d3:f8:19:19:c6:b0:2e:78:65:32:c4:9f:70:2e:
                    56:2c:53:15:b4:f1:8d:6a:31:4a:5a:9c:88:a2:2a:
                    64:63:4e:a2:a1:98:31:95:eb:67:79:bd:b4:2c:d1:
                    41:c6:a2:4e:e4:d5:81:18:d5:77:32:47:e7:d8:52:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EF:6E:E3:BE:41:CA:CD:8A:44:56:AB:79:F7:74:83:18:38:6E:4E
            X509v3 Authority Key Identifier:
                keyid:47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:42:34:2e:94:99:88:a2:27:40:5f:46:d6:9b:06:da:81:
         57:97:e1:7b:42:d7:0f:48:be:a7:01:10:09:dd:98:5f:a2:d1:
         ef:92:ef:89:af:d3:2c:b3:b7:20:01:b0:41:a9:4e:66:8b:c5:
         70:63:cb:76:bb:ba:6b:b6:3b:e6:3f:df:39:b7:9d:5e:e1:4e:
         ef:f1:3d:9a:f3:22:f3:ef:8b:66:89:fc:c8:e5:01:7d:db:75:
         cc:ea:cd:ba:64:75:68:44:09:f0:6f:43:d3:77:02:a9:08:a9:
         6e:30:c5:11:7a:be:82:18:54:16:84:05:ad:f3:fa:17:7c:f6:
         98:4d:45:7d:bf:e6:8d:73:b9:ce:50:ec:e4:d0:bb:6f:55:c8:
         87:a8:d8:91:b1:ae:40:ee:62:34:2b:e4:8c:49:7f:4c:fb:77:
         6f:84:9d:8d:a5:d0:2e:a2:fe:40:d8:b5:33:0d:46:4d:0a:65:
         91:92:7c:99:bc:75:0c:75:14:65:71:aa:b5:19:e4:4d:e7:38:
         5a:cd:e5:94:64:b6:d8:3e:16:b7:b0:0f:92:33:8b:95:dd:1b:
         d6:0a:0e:5f:40:e7:f7:56:57:81:23:ec:60:17:40:b6:07:b0:
         57:fc:a8:b5:a5:43:d4:d3:9b:9a:64:a4:c7:ec:26:86:ab:f9:
         5f:2a:40:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9sn0ZV/VjmOd97DC92TCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzU0MWMzYWRhNTNhNjIwN2M0MDBjOGY5ZjNhNDg2ZWFl
YmI5YjAwHhcNMjQxMTIzMDMwMDM0WhcNMjQxMTI0MDMwMDM0WjAzMTEwLwYDVQQD
EygyN2VmNmVlM2JlNDFjYWNkOGE0NDU2YWI3OWY3NzQ4MzE4Mzg2ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreRopkFX+TfmJzXu10Lea8HSdJbV
CR8zCUHzdlkg5QVdxRHaRIVmRwJLylvGjWlxk8KeaBEkGk9iZfM2pxPtECLFMw9H
pMrHrkamBVMd5S29QWFFWLCU2EfKqDIu31X3Qb74Ga8U9DiXwvMw0hxblTJh5P6n
bowOe6qBpe4hBtYhrJAvdxY0ehIQQ+BWXdSSaAW8iWrA8i9aFFLRg7GgkzmGqFDY
BL8tEdbTrOeBNt7AS2Lbwmrb7xgS3dN2aC6sTn4m0/gZGcawLnhlMsSfcC5WLFMV
tPGNajFKWpyIoipkY06ioZgxletneb20LNFBxqJO5NWBGNV3Mkfn2FKn2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfvbuO+QcrNikRWq3n3dIMYOG5OMB8GA1UdIwQY
MBaAFEfFQcOtpTpiB8QAyPnzpIbq67mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNjI3MzgtOTY1Yi00MTg5LTg0NzQt
ZDg0NGY2MjNhOGIyLzEvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNjI3MzgtOTY1Yi00MTg5LTg0NzQtZDg0NGY2MjNhOGIy
LzEvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZpCNC6U
mYiiJ0BfRtabBtqBV5fhe0LXD0i+pwEQCd2YX6LR75Lvia/TLLO3IAGwQalOZovF
cGPLdru6a7Y75j/fObedXuFO7/E9mvMi8++LZon8yOUBfdt1zOrNumR1aEQJ8G9D
03cCqQipbjDFEXq+ghhUFoQFrfP6F3z2mE1Ffb/mjXO5zlDs5NC7b1XIh6jYkbGu
QO5iNCvkjEl/TPt3b4SdjaXQLqL+QNi1Mw1GTQplkZJ8mbx1DHUUZXGqtRnkTec4
Ws3llGS22D4Wt7APkjOLld0b1goOX0Dn91ZXgSPsYBdAtgewV/yotaVD1NObmmSk
x+wmhqv5XypApA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:27 2024 by rpki-client on console-fra.rpki-client.org