Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
File:                     b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft (raw, json)
Hash identifier:          eHk6jyuH5NxwASguBSYgb6Vo7rYQt9FhFVeY5pwQy58=
Subject key identifier:   BF:13:4E:7A:AA:B9:9E:9E:25:D4:64:81:14:55:6F:79:99:E8:5C:B5
Authority key identifier: 6F:70:16:F4:A4:CF:67:46:09:F0:62:A7:A6:95:CA:D1:E4:A0:3D:F5
Certificate issuer:       /CN=6f7016f4a4cf674609f062a7a695cad1e4a03df5
Certificate serial:       0193553F6901D474DFFA68CD321DC08C16E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
Manifest number:          06A7
Signing time:             Fri 22 Nov 2024 19:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:39 +0000
Files and hashes:         1: b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl (hash: V6L1r5o9VZGv9/qOGcdkpe/9wOfO8yJRDtyO80wE3o0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:69:01:d4:74:df:fa:68:cd:32:1d:c0:8c:16:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7016f4a4cf674609f062a7a695cad1e4a03df5
        Validity
            Not Before: Nov 22 19:00:39 2024 GMT
            Not After : Nov 23 19:00:39 2024 GMT
        Subject: CN=bf134e7aaab99e9e25d4648114556f7999e85cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:96:27:09:b0:af:45:d6:b0:07:6d:c1:7d:
                    55:5d:37:1a:16:4e:ed:22:32:e3:66:df:44:49:27:
                    77:bb:75:20:67:20:c7:0c:34:e1:33:4b:eb:c3:26:
                    b7:2d:22:a3:ad:e6:a3:24:d3:1f:b4:42:e6:4d:f7:
                    ca:6d:66:f4:f2:22:01:cf:39:43:cb:45:0f:a0:da:
                    29:e7:3c:b5:98:13:bc:ba:dc:b7:a9:79:2d:3f:bc:
                    53:c6:11:6c:8f:46:72:f4:f9:56:bf:1f:b3:77:8d:
                    82:b8:e0:7d:8a:73:19:68:2a:aa:58:7e:03:28:55:
                    78:1d:e0:b4:27:f5:55:f1:1a:fa:6c:ae:76:41:b8:
                    ea:c2:16:f8:f6:7a:34:d8:20:2d:5e:74:51:fa:04:
                    98:de:ca:29:91:a8:d1:c9:71:63:c0:cf:e4:08:fe:
                    fa:37:72:f7:f4:01:de:d6:62:d2:70:92:b6:e9:fd:
                    d4:4e:44:4d:23:17:76:00:42:19:ac:87:2f:cf:43:
                    5d:57:4f:8f:3b:2e:14:27:a0:02:d8:27:09:96:4c:
                    61:81:df:b5:24:5f:50:69:8b:7e:ca:cc:5e:db:6a:
                    f9:d7:17:6c:92:fb:54:f4:f4:4a:d6:ef:0e:34:ad:
                    8f:b4:34:b3:7b:37:55:d0:84:f2:ef:e8:fd:97:2b:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:13:4E:7A:AA:B9:9E:9E:25:D4:64:81:14:55:6F:79:99:E8:5C:B5
            X509v3 Authority Key Identifier:
                keyid:6F:70:16:F4:A4:CF:67:46:09:F0:62:A7:A6:95:CA:D1:E4:A0:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/41a53b-3543-46c7-a567-c95004f4b891/1/b3AW9KTPZ0YJ8GKnppXK0eSgPfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:47:ca:82:9c:3d:9b:27:22:73:ae:fb:d3:c8:94:b5:25:10:
         4a:a2:15:06:7a:c8:21:a8:7c:7d:6e:9f:e0:26:97:5f:23:93:
         53:9b:8d:42:43:4e:0d:b4:a5:e0:ba:e2:77:7e:01:ce:65:aa:
         07:2d:12:d1:83:31:36:96:9e:56:43:be:e8:55:b0:ca:b4:80:
         c1:9f:42:03:8e:f7:ef:73:2c:a2:aa:cf:bd:a4:66:ed:2e:15:
         40:5d:52:dc:c4:8b:c3:a2:fa:36:62:20:a0:7e:c7:dc:94:a9:
         50:c2:b6:2f:40:9d:c7:40:7d:39:ee:96:a1:fe:ec:12:a2:d2:
         fb:af:b5:56:43:9f:67:16:70:68:aa:c9:ba:49:f5:9d:1d:3c:
         e1:00:4d:98:66:c0:6b:6a:b4:09:90:34:23:e8:36:68:53:4e:
         3b:34:ba:d5:cf:80:e8:35:52:3d:61:a3:fa:8c:f5:2e:66:f2:
         28:d6:43:d4:21:84:aa:f0:b4:1f:b0:bd:68:e9:f8:3b:16:a7:
         a9:f7:8e:64:ca:d6:d8:6c:fa:ef:9a:0d:4d:18:b9:a6:0b:45:
         1b:b7:a9:57:c7:91:b8:d6:53:2f:e8:65:f4:71:2e:b5:1d:95:
         9c:12:bb:61:65:5f:de:a7:aa:bb:15:cd:f9:a0:fa:1f:76:f2:
         4d:f9:c5:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP2kB1HTf+mjNMh3AjBbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzAxNmY0YTRjZjY3NDYwOWYwNjJhN2E2OTVjYWQxZTRh
MDNkZjUwHhcNMjQxMTIyMTkwMDM5WhcNMjQxMTIzMTkwMDM5WjAzMTEwLwYDVQQD
EyhiZjEzNGU3YWFhYjk5ZTllMjVkNDY0ODExNDU1NmY3OTk5ZTg1Y2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYyWJwmwr0XWsAdtwX1VXTcaFk7t
IjLjZt9ESSd3u3UgZyDHDDThM0vrwya3LSKjreajJNMftELmTffKbWb08iIBzzlD
y0UPoNop5zy1mBO8uty3qXktP7xTxhFsj0Zy9PlWvx+zd42CuOB9inMZaCqqWH4D
KFV4HeC0J/VV8Rr6bK52Qbjqwhb49no02CAtXnRR+gSY3sopkajRyXFjwM/kCP76
N3L39AHe1mLScJK26f3UTkRNIxd2AEIZrIcvz0NdV0+POy4UJ6AC2CcJlkxhgd+1
JF9QaYt+ysxe22r51xdskvtU9PRK1u8ONK2PtDSzezdV0ITy7+j9lyvpDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8TTnqquZ6eJdRkgRRVb3mZ6Fy1MB8GA1UdIwQY
MBaAFG9wFvSkz2dGCfBip6aVytHkoD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNBVzlLVFBaMFlKOEdLbnBwWEswZVNnUGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80MWE1M2ItMzU0My00NmM3LWE1Njct
Yzk1MDA0ZjRiODkxLzEvYjNBVzlLVFBaMFlKOEdLbnBwWEswZVNnUGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80MWE1M2ItMzU0My00NmM3LWE1NjctYzk1MDA0ZjRiODkx
LzEvYjNBVzlLVFBaMFlKOEdLbnBwWEswZVNnUGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUfKgpw9
mycic67708iUtSUQSqIVBnrIIah8fW6f4CaXXyOTU5uNQkNODbSl4Lrid34BzmWq
By0S0YMxNpaeVkO+6FWwyrSAwZ9CA47373MsoqrPvaRm7S4VQF1S3MSLw6L6NmIg
oH7H3JSpUMK2L0Cdx0B9Oe6Wof7sEqLS+6+1VkOfZxZwaKrJukn1nR084QBNmGbA
a2q0CZA0I+g2aFNOOzS61c+A6DVSPWGj+oz1LmbyKNZD1CGEqvC0H7C9aOn4Oxan
qfeOZMrW2Gz675oNTRi5pgtFG7epV8eRuNZTL+hl9HEutR2VnBK7YWVf3qequxXN
+aD6H3byTfnFLg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:36 2024 by rpki-client on console-fra.rpki-client.org