Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
File:                     CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft (raw, json)
Hash identifier:          Zrx/ZzBetr8UFfIz9wA0kFz7IO5CEWDI+5H4ucyiCtU=
Subject key identifier:   07:D5:C8:CB:94:6C:92:42:B2:B2:10:64:9F:A7:18:F8:66:D1:7C:3C
Authority key identifier: 08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC
Certificate issuer:       /CN=087813142b0d3f068dea6dd4341c4e0b907988ec
Certificate serial:       019356F6B72870E4084CD09936A5F57CB7D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
Manifest number:          0EF3
Signing time:             Sat 23 Nov 2024 03:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:29 +0000
Files and hashes:         1: CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl (hash: fWdNCHWkJS1iiGNb1H7pxcaQbm20JfnFo5t1//rlXFw=)
                          2: tlPSxJbaYaCdHjDPISJEayws_yc.roa (hash: TE6il5tB/r5wLI4gfgseRdom20XkwyfANtb9DGaUTdU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b7:28:70:e4:08:4c:d0:99:36:a5:f5:7c:b7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=087813142b0d3f068dea6dd4341c4e0b907988ec
        Validity
            Not Before: Nov 23 03:00:29 2024 GMT
            Not After : Nov 24 03:00:29 2024 GMT
        Subject: CN=07d5c8cb946c9242b2b210649fa718f866d17c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:ca:47:ea:82:87:9f:ee:d9:62:f5:fd:0a:
                    45:71:29:c5:00:df:9d:4c:eb:d3:73:62:e1:61:a1:
                    b3:15:5f:06:5d:5c:e0:89:e0:87:b4:0d:f5:90:24:
                    9d:14:58:c3:f3:1d:da:45:8c:5f:8a:ce:5c:bb:f4:
                    13:68:97:a0:a3:e9:d9:b9:8b:04:cc:68:4a:25:61:
                    71:8d:32:5a:f9:b1:41:4a:15:d5:0d:b1:90:b1:16:
                    3a:11:35:21:27:37:63:c1:4c:bb:8e:b3:0e:5d:18:
                    c8:fa:e8:67:fb:13:0a:3a:61:9a:1f:7d:95:2a:77:
                    94:e9:37:4e:b4:9a:56:f8:48:1b:d3:62:52:7b:eb:
                    b8:dc:b9:32:88:2c:7b:81:40:0a:a3:4c:a9:6a:cd:
                    1a:c3:da:12:9e:2f:2b:35:b8:21:e3:5c:90:7d:ff:
                    e0:c3:33:94:0f:62:ab:38:c8:6f:5f:1d:d1:db:68:
                    77:38:6c:40:05:e7:67:b0:ac:f8:f0:7b:0f:7b:1d:
                    eb:ca:a5:9a:0b:09:82:f9:9e:ba:71:1d:cf:9b:16:
                    4d:90:3f:de:35:cd:44:8f:9c:0e:d6:d5:b9:f8:f4:
                    d0:74:45:38:f2:06:3a:d2:28:91:d5:a3:49:59:22:
                    98:f9:24:f4:c9:43:b9:04:fb:6f:c3:df:97:da:68:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D5:C8:CB:94:6C:92:42:B2:B2:10:64:9F:A7:18:F8:66:D1:7C:3C
            X509v3 Authority Key Identifier:
                keyid:08:78:13:14:2B:0D:3F:06:8D:EA:6D:D4:34:1C:4E:0B:90:79:88:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHgTFCsNPwaN6m3UNBxOC5B5iOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/206ff0-445a-42b4-99f5-7e157bae6c2b/1/CHgTFCsNPwaN6m3UNBxOC5B5iOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b3:f0:ae:79:2f:28:57:df:e9:f6:ad:98:96:db:61:32:be:
         52:a3:25:7a:31:96:23:c7:6b:5f:02:cc:e0:b5:89:96:73:da:
         b0:68:cd:d8:2e:de:ed:95:80:bb:68:ff:e6:bb:0e:01:91:da:
         c4:14:1b:4f:ae:7b:2a:6e:3d:4a:ad:b1:c7:d5:61:e2:41:30:
         41:1c:f9:2a:d3:95:7a:11:89:fb:7d:1d:1c:92:e1:26:91:d5:
         af:2e:6b:14:54:2d:c9:ea:34:a2:5d:d3:12:6b:cc:e9:22:12:
         b5:53:c6:c4:ae:07:d8:90:97:5d:d5:9b:46:48:0f:3c:60:93:
         3d:c6:bd:d2:eb:64:1a:ee:85:dc:95:c8:77:69:f1:67:47:d1:
         8d:77:52:27:db:c6:3e:b3:72:49:00:ca:93:8f:dd:bf:5e:c2:
         64:bf:a3:80:39:ea:aa:f5:17:93:17:6f:f6:9c:8d:3f:67:83:
         40:9d:37:0f:11:f6:25:17:4a:51:b4:b2:ae:9f:f8:f3:1e:0b:
         f0:b5:e3:e3:2b:22:8b:c2:20:8c:53:1a:6b:f6:97:ca:bd:53:
         45:82:d1:d1:a1:b5:a9:4b:5a:e0:8e:d2:53:c8:31:2f:09:86:
         b8:f2:69:7b:cc:20:b8:2d:1c:bc:a8:1c:bb:f8:4d:6c:ec:74:
         f2:d1:10:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9rcocOQITNCZNqX1fLfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NzgxMzE0MmIwZDNmMDY4ZGVhNmRkNDM0MWM0ZTBiOTA3
OTg4ZWMwHhcNMjQxMTIzMDMwMDI5WhcNMjQxMTI0MDMwMDI5WjAzMTEwLwYDVQQD
EygwN2Q1YzhjYjk0NmM5MjQyYjJiMjEwNjQ5ZmE3MThmODY2ZDE3YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NzKR+qCh5/u2WL1/QpFcSnFAN+d
TOvTc2LhYaGzFV8GXVzgieCHtA31kCSdFFjD8x3aRYxfis5cu/QTaJego+nZuYsE
zGhKJWFxjTJa+bFBShXVDbGQsRY6ETUhJzdjwUy7jrMOXRjI+uhn+xMKOmGaH32V
KneU6TdOtJpW+Egb02JSe+u43LkyiCx7gUAKo0ypas0aw9oSni8rNbgh41yQff/g
wzOUD2KrOMhvXx3R22h3OGxABednsKz48HsPex3ryqWaCwmC+Z66cR3PmxZNkD/e
Nc1Ej5wO1tW5+PTQdEU48gY60iiR1aNJWSKY+ST0yUO5BPtvw9+X2mhDXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfVyMuUbJJCsrIQZJ+nGPhm0Xw8MB8GA1UdIwQY
MBaAFAh4ExQrDT8Gjept1DQcTguQeYjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUt
N2UxNTdiYWU2YzJiLzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yMDZmZjAtNDQ1YS00MmI0LTk5ZjUtN2UxNTdiYWU2YzJi
LzEvQ0hnVEZDc05Qd2FONm0zVU5CeE9DNUI1aU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbPwrnkv
KFff6fatmJbbYTK+UqMlejGWI8drXwLM4LWJlnPasGjN2C7e7ZWAu2j/5rsOAZHa
xBQbT657Km49Sq2xx9Vh4kEwQRz5KtOVehGJ+30dHJLhJpHVry5rFFQtyeo0ol3T
EmvM6SIStVPGxK4H2JCXXdWbRkgPPGCTPca90utkGu6F3JXId2nxZ0fRjXdSJ9vG
PrNySQDKk4/dv17CZL+jgDnqqvUXkxdv9pyNP2eDQJ03DxH2JRdKUbSyrp/48x4L
8LXj4ysii8IgjFMaa/aXyr1TRYLR0aG1qUta4I7SU8gxLwmGuPJpe8wguC0cvKgc
u/hNbOx08tEQMg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:36 2024 by rpki-client on console-fra.rpki-client.org