Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft
File:                     9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft (raw, json)
Hash identifier:          3XYqytr2LJmWeWzApMbcIWlc7H7kMQJoIFiEdbAvS5s=
Subject key identifier:   0E:C4:23:7E:3C:CF:00:35:D3:11:F2:84:EB:04:0E:1C:0F:86:FE:65
Authority key identifier: F6:1F:CB:4D:10:2A:19:97:22:A0:CD:6A:70:97:CF:3B:92:1C:EE:62
Certificate issuer:       /CN=f61fcb4d102a199722a0cd6a7097cf3b921cee62
Certificate serial:       0194BBCEAAC17B44EE362E2EAF57FE5658D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9h_LTRAqGZcioM1qcJfPO5Ic7mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft
Manifest number:          0942
Signing time:             Fri 31 Jan 2025 10:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:10 +0000
Files and hashes:         1: 9h_LTRAqGZcioM1qcJfPO5Ic7mI.crl (hash: /zhr/sUdIOASgzHxMXRHNDUorpEEpDWk8fu0Bc2JklI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9h_LTRAqGZcioM1qcJfPO5Ic7mI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:aa:c1:7b:44:ee:36:2e:2e:af:57:fe:56:58:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f61fcb4d102a199722a0cd6a7097cf3b921cee62
        Validity
            Not Before: Jan 31 10:01:10 2025 GMT
            Not After : Feb  1 10:01:10 2025 GMT
        Subject: CN=0ec4237e3ccf0035d311f284eb040e1c0f86fe65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:b0:da:4e:97:32:26:e7:97:46:ea:0d:d8:
                    2e:bd:d4:10:2e:9c:25:e5:51:41:d9:32:28:d5:f9:
                    8f:fe:62:a0:1e:1e:45:8b:99:ef:03:26:fd:92:ac:
                    97:19:2e:08:7b:a4:c1:d1:25:ce:27:07:4d:a9:70:
                    37:f3:0e:57:a0:75:78:27:27:45:27:29:7f:5f:40:
                    6b:ca:00:00:34:ee:49:4f:24:0d:cb:5b:46:f7:39:
                    bf:28:4d:e4:db:b9:6d:7b:03:55:b2:5b:b8:e2:64:
                    5d:81:87:76:92:3e:5f:4b:4a:c2:f1:95:2e:54:4a:
                    e5:74:46:54:78:56:d0:1e:4d:b1:ac:0e:bf:b4:db:
                    28:82:5f:ca:ab:6b:74:40:16:79:34:d6:a2:16:1c:
                    b9:ac:2a:e4:32:ec:f6:03:3c:b5:c0:13:57:18:7f:
                    97:fe:ac:6f:01:e8:0e:b0:e3:50:7b:70:06:ef:e8:
                    71:4a:64:a9:0e:15:cd:fc:02:69:db:ff:d1:7d:fa:
                    26:f1:5a:7e:db:10:9c:28:ab:5e:70:a0:fa:b4:b0:
                    2b:f9:6d:ca:2c:5f:9f:17:c6:83:61:36:db:bf:be:
                    18:6c:34:46:00:d4:28:77:ef:af:8a:d2:9f:2f:44:
                    aa:ca:21:52:61:eb:fa:2c:d6:e8:62:eb:9d:a6:e8:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:23:7E:3C:CF:00:35:D3:11:F2:84:EB:04:0E:1C:0F:86:FE:65
            X509v3 Authority Key Identifier:
                keyid:F6:1F:CB:4D:10:2A:19:97:22:A0:CD:6A:70:97:CF:3B:92:1C:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9h_LTRAqGZcioM1qcJfPO5Ic7mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9532cf-42d8-48c9-a104-b3f070db819a/1/9h_LTRAqGZcioM1qcJfPO5Ic7mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2f:6c:de:f7:20:c7:37:7f:99:6d:b6:05:60:f7:4d:b7:66:
         c3:3e:30:db:4c:d1:1a:62:0c:6b:3a:9d:e9:a5:5e:6a:d7:47:
         87:ca:50:47:2c:b5:dc:47:3b:12:7a:9b:57:39:13:4c:6e:ea:
         c5:f3:bf:8b:1b:26:b1:db:82:92:f1:1d:4d:77:16:b5:47:d1:
         c9:f6:f1:2b:fd:4e:76:18:41:b2:52:3c:cf:56:1d:0c:2e:ce:
         e7:0c:e4:b3:ed:06:e7:88:69:5e:b3:bd:34:53:b5:c1:2b:df:
         90:83:2f:60:e9:1d:0a:f2:29:da:5e:65:d8:e2:6a:08:16:ce:
         78:b4:a1:bf:b5:3a:31:86:2f:1d:ba:f5:6b:28:b5:47:16:2a:
         20:a2:68:66:0e:58:93:ca:ea:b9:1b:e9:76:3d:c1:02:8a:ff:
         a3:ab:7b:9f:a5:08:73:b0:36:e3:d6:1c:a5:79:f6:68:f6:fa:
         4c:ba:d4:10:11:95:1e:1d:f7:a8:1e:9e:2f:44:16:53:6d:52:
         05:ec:7f:a1:0d:a9:af:8c:ad:49:2c:83:a3:08:35:74:21:ec:
         5a:93:4e:8d:41:e8:2b:bb:f9:cf:cb:45:92:8e:d8:bb:81:a7:
         5e:a8:6f:0f:92:f3:8d:70:e8:ef:22:e2:76:94:43:68:29:ee:
         70:ef:c0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqrBe0TuNi4ur1f+VljXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MWZjYjRkMTAyYTE5OTcyMmEwY2Q2YTcwOTdjZjNiOTIx
Y2VlNjIwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
EygwZWM0MjM3ZTNjY2YwMDM1ZDMxMWYyODRlYjA0MGUxYzBmODZmZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDCw2k6XMibnl0bqDdguvdQQLpwl
5VFB2TIo1fmP/mKgHh5Fi5nvAyb9kqyXGS4Ie6TB0SXOJwdNqXA38w5XoHV4JydF
Jyl/X0BrygAANO5JTyQNy1tG9zm/KE3k27ltewNVslu44mRdgYd2kj5fS0rC8ZUu
VErldEZUeFbQHk2xrA6/tNsogl/Kq2t0QBZ5NNaiFhy5rCrkMuz2Azy1wBNXGH+X
/qxvAegOsONQe3AG7+hxSmSpDhXN/AJp2//Rffom8Vp+2xCcKKtecKD6tLAr+W3K
LF+fF8aDYTbbv74YbDRGANQod++vitKfL0SqyiFSYev6LNboYuudpujksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7EI348zwA10xHyhOsEDhwPhv5lMB8GA1UdIwQY
MBaAFPYfy00QKhmXIqDNanCXzzuSHO5iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWhfTFRSQXFHWmNpb00xcWNKZlBPNUljN21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85NTMyY2YtNDJkOC00OGM5LWExMDQt
YjNmMDcwZGI4MTlhLzEvOWhfTFRSQXFHWmNpb00xcWNKZlBPNUljN21JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85NTMyY2YtNDJkOC00OGM5LWExMDQtYjNmMDcwZGI4MTlh
LzEvOWhfTFRSQXFHWmNpb00xcWNKZlBPNUljN21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy9s3vcg
xzd/mW22BWD3Tbdmwz4w20zRGmIMazqd6aVeatdHh8pQRyy13Ec7EnqbVzkTTG7q
xfO/ixsmsduCkvEdTXcWtUfRyfbxK/1OdhhBslI8z1YdDC7O5wzks+0G54hpXrO9
NFO1wSvfkIMvYOkdCvIp2l5l2OJqCBbOeLShv7U6MYYvHbr1ayi1RxYqIKJoZg5Y
k8rquRvpdj3BAor/o6t7n6UIc7A249YcpXn2aPb6TLrUEBGVHh33qB6eL0QWU21S
Bex/oQ2pr4ytSSyDowg1dCHsWpNOjUHoK7v5z8tFko7Yu4GnXqhvD5LzjXDo7yLi
dpRDaCnucO/A/g==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:04 2025 by rpki-client on console-fra.rpki-client.org