Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File:                     At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier:          0ZtFExLWb8dRzMN3Qakut8TPIrWtmIhhorSG9z9VUlI=
Subject key identifier:   F7:A8:09:DC:D9:9E:0F:7F:43:66:D0:2B:22:0F:33:B9:00:83:B8:B1
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer:       /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial:       0193568965C374528F60CEFE133883B9D9A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:05 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:05 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:05 +0000
Files and hashes:         1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: ZKczXUrbeyEQWlEqd0Qvlhv9zRu1tcVU1xLcg/lLGSw=)
                          2: OHWDENxiwHUHcGpgbk08K1UT8-o.roa (hash: X1tpsVlJz+V4XoCcuFZ23Xvt78PJPBqwL75tsKfUzro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:65:c3:74:52:8f:60:ce:fe:13:38:83:b9:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
        Validity
            Not Before: Nov 23 01:01:05 2024 GMT
            Not After : Nov 24 01:01:05 2024 GMT
        Subject: CN=f7a809dcd99e0f7f4366d02b220f33b90083b8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:4d:6b:ee:52:b7:4c:44:1d:62:0c:4f:2b:
                    02:6f:24:ec:2a:76:1d:f7:e7:da:99:8e:02:07:39:
                    4d:44:89:f7:ea:2c:ae:00:51:1c:2d:8e:d9:72:ff:
                    80:30:32:73:a2:ed:9d:93:ee:c9:68:10:40:5a:25:
                    db:b9:53:f6:51:0a:9e:6f:81:92:42:f9:78:6d:6c:
                    0e:09:99:1a:9e:52:10:f6:2b:74:7e:c2:8c:e0:be:
                    52:ea:24:0f:8a:c5:ac:4a:9c:23:28:b2:07:81:85:
                    6f:d8:e7:cf:88:97:ee:57:33:60:4f:2c:8d:a4:42:
                    f3:48:bd:ad:5f:3a:29:77:66:74:52:80:2f:10:5c:
                    75:78:22:79:6b:3d:41:03:d6:74:33:a7:9d:69:d4:
                    38:8a:4f:0f:29:99:b6:13:30:a7:20:e2:7e:b3:3e:
                    55:a8:66:ed:f0:d3:6a:15:3f:e6:6c:6b:de:72:0c:
                    fc:03:00:b3:1c:48:69:55:17:cc:f1:b9:b6:36:7f:
                    47:9a:c6:d8:fa:1d:47:bf:61:2e:54:00:76:57:55:
                    b6:f2:87:19:a7:8b:37:49:db:ec:f3:1f:40:27:39:
                    58:ab:c1:a9:f6:6c:bf:83:6b:29:09:d3:df:bd:59:
                    26:19:21:40:91:43:ed:4e:49:3d:c8:24:38:2d:56:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A8:09:DC:D9:9E:0F:7F:43:66:D0:2B:22:0F:33:B9:00:83:B8:B1
            X509v3 Authority Key Identifier:
                keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:35:6d:b2:53:a2:81:c3:64:d2:fb:65:38:1b:19:5d:86:40:
         1b:2c:c3:c9:89:25:ec:1a:eb:ee:9a:ab:13:ee:c1:cb:04:72:
         dd:8c:a0:db:c0:38:73:de:43:5a:0f:0c:34:5f:76:a5:23:2d:
         9f:c4:bd:83:d8:e4:ac:22:bc:1f:7c:10:e3:3a:0c:82:cb:40:
         98:26:a9:11:68:6f:f1:91:51:e1:6c:f6:7d:48:cc:e7:22:0e:
         af:8d:a6:83:73:43:07:1c:22:a2:30:0f:0a:fd:66:83:df:52:
         76:36:b1:83:29:79:28:e7:be:2c:65:4c:a3:11:ef:a4:6e:30:
         87:45:53:95:c1:5f:05:1a:66:fd:74:38:c4:a8:d6:0f:6e:b1:
         fa:d7:ef:ed:eb:87:9a:ce:26:a5:b3:01:d5:4f:9e:3c:68:9b:
         d3:c3:cd:85:3c:2a:1f:8e:e8:8e:dc:cd:be:f9:24:e0:03:b5:
         b6:ba:e2:73:44:dd:5e:d4:7f:3b:22:ba:63:2c:a5:89:55:1d:
         e3:3f:7e:d9:10:38:ec:3e:f5:8f:12:bd:1d:d8:72:c3:c5:ab:
         31:3c:4e:39:61:be:e5:16:fc:49:19:48:f8:07:0a:bb:e3:4d:
         ea:d3:23:57:db:8c:34:45:88:18:05:23:c9:a9:7c:d4:d5:2c:
         27:34:bb:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiWXDdFKPYM7+EziDudmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGY4MTI2ODgyOTMwMWYzZDY5ZWI5NmY4YWM2MTdmYTI1
MjU2YTEwHhcNMjQxMTIzMDEwMTA1WhcNMjQxMTI0MDEwMTA1WjAzMTEwLwYDVQQD
EyhmN2E4MDlkY2Q5OWUwZjdmNDM2NmQwMmIyMjBmMzNiOTAwODNiOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDdNa+5St0xEHWIMTysCbyTsKnYd
9+famY4CBzlNRIn36iyuAFEcLY7Zcv+AMDJzou2dk+7JaBBAWiXbuVP2UQqeb4GS
Qvl4bWwOCZkanlIQ9it0fsKM4L5S6iQPisWsSpwjKLIHgYVv2OfPiJfuVzNgTyyN
pELzSL2tXzopd2Z0UoAvEFx1eCJ5az1BA9Z0M6edadQ4ik8PKZm2EzCnIOJ+sz5V
qGbt8NNqFT/mbGvecgz8AwCzHEhpVRfM8bm2Nn9HmsbY+h1Hv2EuVAB2V1W28ocZ
p4s3Sdvs8x9AJzlYq8Gp9my/g2spCdPfvVkmGSFAkUPtTkk9yCQ4LVYDcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeoCdzZng9/Q2bQKyIPM7kAg7ixMB8GA1UdIwQY
MBaAFALfgSaIKTAfPWnrlvisYX+iUlahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2It
M2U4NmQyYzI5OTY5LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wNjE3MTYtMDljNi00ODM4LWIxY2ItM2U4NmQyYzI5OTY5
LzEvQXQtQkpvZ3BNQjg5YWV1Vy1LeGhmNkpTVnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTVtslOi
gcNk0vtlOBsZXYZAGyzDyYkl7Brr7pqrE+7BywRy3Yyg28A4c95DWg8MNF92pSMt
n8S9g9jkrCK8H3wQ4zoMgstAmCapEWhv8ZFR4Wz2fUjM5yIOr42mg3NDBxwiojAP
Cv1mg99Sdjaxgyl5KOe+LGVMoxHvpG4wh0VTlcFfBRpm/XQ4xKjWD26x+tfv7euH
ms4mpbMB1U+ePGib08PNhTwqH47ojtzNvvkk4AO1trric0TdXtR/OyK6YyyliVUd
4z9+2RA47D71jxK9Hdhyw8WrMTxOOWG+5Rb8SRlI+AcKu+NN6tMjV9uMNEWIGAUj
yal81NUsJzS7Rw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:33 2024 by rpki-client on console-ams.rpki-client.org