Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File:                     YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier:          45oVYhuo0NOiwLwn+nl+2iMgiDIMURGXqTovTTwXOE0=
Subject key identifier:   41:D7:B2:67:99:AF:69:62:C2:39:5F:81:5F:0F:02:F6:7F:DC:E2:22
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer:       /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial:       019369DA902314A52318F081BADE86B837F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number:          130C
Signing time:             Tue 26 Nov 2024 19:02:31 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:31 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:31 +0000
Files and hashes:         1: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: 6kUx9U+Ubsv4l/5lLpZLrhPd/KEgjyxdu3MuH3Ds8NU=)
                          2: _1ZIlrcmPohzZFq8Npfban_cZPc.roa (hash: vu8BfLZaLHj/RqkNcQQk53rFUeQkUBhW1N4tKTI+7o8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:90:23:14:a5:23:18:f0:81:ba:de:86:b8:37:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
        Validity
            Not Before: Nov 26 19:02:31 2024 GMT
            Not After : Nov 27 19:02:31 2024 GMT
        Subject: CN=41d7b26799af6962c2395f815f0f02f67fdce222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:f7:c6:ce:e8:76:81:8e:95:36:26:64:19:
                    50:8f:19:8d:cb:c5:e0:37:0d:84:1a:b0:bc:e2:0c:
                    4b:c9:b5:c1:1f:6f:ba:8d:db:6f:53:7f:4f:af:02:
                    4b:00:5c:cf:cd:e7:da:05:7a:62:b2:2c:b6:42:df:
                    59:c9:c1:3b:2d:41:84:ed:64:6c:8d:07:c9:58:cd:
                    5c:ee:a1:82:ac:ee:6b:43:8a:78:29:0b:ba:6b:0c:
                    80:f2:86:7b:77:56:cc:c4:76:ff:46:b9:f0:70:e9:
                    87:54:a2:29:ab:13:0d:37:8b:98:bd:12:c3:a2:e2:
                    fe:2e:04:e5:fc:fd:ab:3b:be:00:a1:7d:fb:2a:7f:
                    f0:e4:9f:2d:e7:5e:a6:56:4b:3d:61:69:bc:7f:af:
                    36:75:2c:00:ef:68:e2:4b:10:53:6e:5f:4b:77:03:
                    7d:2a:8b:33:65:8b:21:f2:5e:14:94:40:77:fb:89:
                    be:6c:4c:68:d2:9b:bd:43:88:61:df:51:4b:12:d9:
                    a0:ae:4d:bc:57:48:10:d5:1b:f4:c6:59:ad:4b:58:
                    5f:22:89:81:fa:5b:d4:d3:3f:2a:43:3e:67:da:8b:
                    06:fa:21:c5:21:31:79:40:d0:6a:ea:ef:15:28:0e:
                    eb:55:e7:60:f5:79:62:13:5e:cc:16:41:11:20:63:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:B2:67:99:AF:69:62:C2:39:5F:81:5F:0F:02:F6:7F:DC:E2:22
            X509v3 Authority Key Identifier:
                keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:46:7b:6d:03:84:a9:dd:c9:80:18:23:fc:62:f8:f3:80:d8:
         72:e1:df:03:8b:52:ed:9b:30:18:33:95:82:c3:36:f5:fc:a0:
         e0:38:99:7a:c4:ba:ba:84:d8:1c:58:c3:63:6f:bb:bd:65:b9:
         ca:ea:ab:f9:2e:76:10:2c:a0:2f:62:a1:94:90:10:61:da:86:
         b4:98:db:02:72:1f:75:7b:eb:d7:90:26:f4:15:bc:8e:29:26:
         72:cd:d8:01:86:0e:67:f0:ee:03:22:98:d9:b0:ee:c1:0c:23:
         b8:19:d1:25:69:ba:13:7a:e3:fb:f7:46:29:bf:35:b3:e3:43:
         54:7a:f0:82:6a:af:fd:36:ed:ea:45:86:4e:6b:5b:7c:a0:b1:
         b7:c9:0f:af:7a:26:02:91:58:b9:86:3b:a0:40:85:00:db:51:
         e2:0d:e8:30:89:1f:57:bb:ca:54:20:00:55:68:14:d6:4d:62:
         e0:c8:d4:75:b8:be:5b:6b:ed:7d:d3:23:85:78:c3:ff:38:3c:
         aa:02:13:da:5d:00:25:18:b6:56:30:c8:77:48:06:be:8a:64:
         c0:a8:d7:24:6f:52:57:1f:08:5c:4c:23:df:a6:cb:b2:34:f7:
         c4:2e:a6:e7:c6:9c:4e:21:43:4c:2c:35:3a:a4:7d:db:18:6f:
         ab:4c:86:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2pAjFKUjGPCBut6GuDf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDk2ZTM3NDA5MmNjMzAwYmQwYmIwNmM0MTY0MDkzMmVj
ZjhiNDkwHhcNMjQxMTI2MTkwMjMxWhcNMjQxMTI3MTkwMjMxWjAzMTEwLwYDVQQD
Eyg0MWQ3YjI2Nzk5YWY2OTYyYzIzOTVmODE1ZjBmMDJmNjdmZGNlMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfb3xs7odoGOlTYmZBlQjxmNy8Xg
Nw2EGrC84gxLybXBH2+6jdtvU39PrwJLAFzPzefaBXpisiy2Qt9ZycE7LUGE7WRs
jQfJWM1c7qGCrO5rQ4p4KQu6awyA8oZ7d1bMxHb/RrnwcOmHVKIpqxMNN4uYvRLD
ouL+LgTl/P2rO74AoX37Kn/w5J8t516mVks9YWm8f682dSwA72jiSxBTbl9LdwN9
KoszZYsh8l4UlEB3+4m+bExo0pu9Q4hh31FLEtmgrk28V0gQ1Rv0xlmtS1hfIomB
+lvU0z8qQz5n2osG+iHFITF5QNBq6u8VKA7rVedg9XliE17MFkERIGMO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHXsmeZr2liwjlfgV8PAvZ/3OIiMB8GA1UdIwQY
MBaAFGAJbjdAkswwC9C7BsQWQJMuz4tJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODct
YzQ1ODUyYzdiZTIwLzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODctYzQ1ODUyYzdiZTIw
LzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkZ7bQOE
qd3JgBgj/GL484DYcuHfA4tS7ZswGDOVgsM29fyg4DiZesS6uoTYHFjDY2+7vWW5
yuqr+S52ECygL2KhlJAQYdqGtJjbAnIfdXvr15Am9BW8jikmcs3YAYYOZ/DuAyKY
2bDuwQwjuBnRJWm6E3rj+/dGKb81s+NDVHrwgmqv/Tbt6kWGTmtbfKCxt8kPr3om
ApFYuYY7oECFANtR4g3oMIkfV7vKVCAAVWgU1k1i4MjUdbi+W2vtfdMjhXjD/zg8
qgIT2l0AJRi2VjDId0gGvopkwKjXJG9SVx8IXEwj36bLsjT3xC6m58acTiFDTCw1
OqR92xhvq0yGmw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:33 2024 by rpki-client on console-ams.rpki-client.org