Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File:                     0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier:          i3TVrDWPT9VcORt70BzTKFrvOJsnMB1hu9IfzSal8Do=
Subject key identifier:   4B:97:E9:F7:7D:5C:3A:D9:9A:2E:40:A5:FC:D1:9C:9E:C2:2C:93:12
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer:       /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial:       019369D96DDF4685755005E6AA1072E9D9FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number:          107A
Signing time:             Tue 26 Nov 2024 19:01:17 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:17 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:17 +0000
Files and hashes:         1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: mG8Bi5lxs3z9U9xb9NZW3fu/2Zf8IhB7mXkHAdWYi1I=)
                          2: 7bWN83AiOiXrbYrHmmKgJ46Z7JY.roa (hash: lLGdGfI3FNEwOOO8w8i/DJaTXwBtLPCFfwHacgkHPCk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:6d:df:46:85:75:50:05:e6:aa:10:72:e9:d9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
        Validity
            Not Before: Nov 26 19:01:17 2024 GMT
            Not After : Nov 27 19:01:17 2024 GMT
        Subject: CN=4b97e9f77d5c3ad99a2e40a5fcd19c9ec22c9312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a7:44:a6:a2:38:64:fb:71:7e:14:59:e7:90:
                    74:a0:c3:84:8e:99:0f:39:bb:97:c6:cf:2e:88:10:
                    53:9c:98:57:a4:b6:26:cc:87:3e:2e:74:85:fd:c7:
                    e9:9b:82:5e:32:8c:70:f0:41:4f:57:e7:05:85:e5:
                    73:e4:3c:0e:5d:37:b2:ba:6a:49:68:6f:ff:98:71:
                    7d:6f:0b:80:f8:9d:37:dc:34:dd:b2:84:3e:9e:07:
                    f9:5c:b0:c4:56:9d:5d:71:e2:1b:1d:ae:06:2a:92:
                    dc:d1:08:2c:83:7c:e3:7a:68:85:09:a9:a5:9b:cf:
                    b7:61:4e:0e:0e:2e:b0:5f:63:34:c6:e7:e2:ac:53:
                    e4:92:4f:8f:18:0e:40:30:2b:b3:1c:33:90:b3:66:
                    dc:ba:82:3c:d2:67:46:2d:46:2b:93:f6:2c:9a:ab:
                    50:38:c7:1e:a1:64:bd:73:32:fa:28:24:a6:70:54:
                    a6:81:1d:4d:df:88:44:9b:ff:d4:74:49:60:21:7e:
                    28:ca:eb:7c:8d:b0:86:94:cd:93:1e:07:37:35:ca:
                    6e:2e:b3:77:da:ee:30:bc:16:f3:f3:b8:65:b6:e2:
                    1b:dc:e0:12:5f:7d:e8:60:b5:68:d2:bd:6e:9a:d1:
                    dd:85:59:90:11:e5:8f:86:5c:be:38:52:a2:63:4c:
                    3f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:97:E9:F7:7D:5C:3A:D9:9A:2E:40:A5:FC:D1:9C:9E:C2:2C:93:12
            X509v3 Authority Key Identifier:
                keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b7:cd:21:a5:0d:44:a8:b3:77:f6:e3:69:13:0b:6f:a2:7f:
         05:f9:1b:d5:35:0b:74:0a:46:73:f3:95:5e:6d:9d:5b:17:b8:
         62:50:e3:fd:7a:51:30:5a:46:3e:63:08:ad:92:df:5a:33:5b:
         11:dd:02:ae:23:08:20:6a:1c:2c:0d:b8:6f:be:aa:e7:e8:c2:
         31:68:3b:4c:d2:56:22:bb:26:ab:b0:17:ca:80:da:4c:20:d0:
         bb:de:e1:0b:6e:8e:35:ac:92:69:8c:0a:41:73:e8:c1:21:e0:
         e7:94:8f:b8:cf:7f:95:84:a5:69:87:83:4d:9f:ac:a0:26:ca:
         6b:b2:f2:aa:28:eb:2b:05:51:ba:ec:4e:ef:fd:cc:18:71:78:
         92:b7:d0:80:2c:78:cd:22:92:7a:cc:1c:d7:b6:4a:c6:f9:29:
         33:57:59:0e:ac:f6:09:9d:9b:11:aa:f7:51:f7:0a:90:ff:16:
         06:1f:73:2d:7a:a1:61:11:09:20:05:7a:6a:b1:a4:a2:41:98:
         03:82:01:a9:90:01:c1:ef:51:1d:14:fc:4b:50:b5:d0:c9:79:
         63:38:44:b6:7b:07:e7:ee:0d:fc:dc:a4:75:51:d2:96:23:95:
         80:5a:49:cc:be:68:e4:88:2d:3e:7d:27:ff:77:e8:ec:77:db:
         11:e4:a6:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2W3fRoV1UAXmqhBy6dn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWFmMjg3MmMzZjU1MDMwNzM4NjZkZmZlZjQ4OGI3MTc4
M2RhYjYwHhcNMjQxMTI2MTkwMTE3WhcNMjQxMTI3MTkwMTE3WjAzMTEwLwYDVQQD
Eyg0Yjk3ZTlmNzdkNWMzYWQ5OWEyZTQwYTVmY2QxOWM5ZWMyMmM5MzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86dEpqI4ZPtxfhRZ55B0oMOEjpkP
ObuXxs8uiBBTnJhXpLYmzIc+LnSF/cfpm4JeMoxw8EFPV+cFheVz5DwOXTeyumpJ
aG//mHF9bwuA+J033DTdsoQ+ngf5XLDEVp1dceIbHa4GKpLc0Qgsg3zjemiFCaml
m8+3YU4ODi6wX2M0xufirFPkkk+PGA5AMCuzHDOQs2bcuoI80mdGLUYrk/YsmqtQ
OMceoWS9czL6KCSmcFSmgR1N34hEm//UdElgIX4oyut8jbCGlM2THgc3NcpuLrN3
2u4wvBbz87hltuIb3OASX33oYLVo0r1umtHdhVmQEeWPhly+OFKiY0w/iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuX6fd9XDrZmi5ApfzRnJ7CLJMSMB8GA1UdIwQY
MBaAFNMa8ocsP1UDBzhm3/70iLcXg9q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82OGI3NWMtODNkZi00NzRlLWE5ZmUt
MDFiZjFmMTQ1YzI2LzEvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82OGI3NWMtODNkZi00NzRlLWE5ZmUtMDFiZjFmMTQ1YzI2
LzEvMHhyeWh5d19WUU1IT0diZl92U0l0eGVEMnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrfNIaUN
RKizd/bjaRMLb6J/Bfkb1TULdApGc/OVXm2dWxe4YlDj/XpRMFpGPmMIrZLfWjNb
Ed0CriMIIGocLA24b76q5+jCMWg7TNJWIrsmq7AXyoDaTCDQu97hC26ONaySaYwK
QXPowSHg55SPuM9/lYSlaYeDTZ+soCbKa7LyqijrKwVRuuxO7/3MGHF4krfQgCx4
zSKSeswc17ZKxvkpM1dZDqz2CZ2bEar3UfcKkP8WBh9zLXqhYREJIAV6arGkokGY
A4IBqZABwe9RHRT8S1C10Ml5YzhEtnsH5+4N/NykdVHSliOVgFpJzL5o5IgtPn0n
/3fo7HfbEeSmYg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:30 2024 by rpki-client on console-fra.rpki-client.org