Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File:                     C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier:          1fNe0ZvYeRvrZTWRX7N1WNJIrj7CFQrkE2+QZtRMaxU=
Subject key identifier:   79:7A:55:9F:FD:9F:65:61:9A:EC:00:42:C4:1F:BB:FE:42:04:A8:90
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer:       /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial:       01936669E39AFAF2BEE76DBA2B7E32A78074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number:          03A6
Signing time:             Tue 26 Nov 2024 03:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:35 +0000
Files and hashes:         1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: X8j82q/C0PbGMG6hHph6x8Wy1hSx4cwMsrYdMdSv6lQ=)
                          2: IuD1AHrVEBdTBrw8BWbRVyAxFU0.roa (hash: gU2XArbTRfv8jWfbdk1t+W+BVwskH1xGIjz2yg2t83E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:e3:9a:fa:f2:be:e7:6d:ba:2b:7e:32:a7:80:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
        Validity
            Not Before: Nov 26 03:00:35 2024 GMT
            Not After : Nov 27 03:00:35 2024 GMT
        Subject: CN=797a559ffd9f65619aec0042c41fbbfe4204a890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:66:d7:26:d7:a5:78:aa:83:71:65:14:fa:3f:
                    16:1e:b7:aa:14:8f:27:1f:44:3c:45:fd:f2:07:4b:
                    63:51:5a:3b:12:7a:f2:cc:8d:7d:7e:7c:04:d0:53:
                    4f:d5:6b:11:b8:17:d2:47:51:d0:1c:98:93:bf:56:
                    a4:8e:05:68:a6:23:84:08:42:d5:33:8a:5c:ce:88:
                    ee:7e:1b:2c:96:ad:64:c4:69:aa:65:6b:82:79:4b:
                    1c:39:35:88:48:81:2d:6c:bc:1b:fe:14:92:5e:08:
                    83:2d:15:a3:7f:69:4a:69:26:04:f4:01:e0:0b:a1:
                    c3:8d:bb:55:fa:74:8c:3c:1e:31:96:98:80:b6:2f:
                    27:6c:14:e0:50:47:32:3f:22:03:d1:c8:7a:58:e0:
                    1e:79:19:c8:7c:96:91:4b:b0:a8:16:aa:9a:65:bb:
                    04:5e:10:90:7c:13:15:49:fa:1e:36:95:0d:64:84:
                    d8:37:d5:2f:50:07:ce:43:49:56:c1:55:27:03:a3:
                    2d:eb:a9:1e:7b:ac:4e:0b:39:e6:f5:b8:1a:05:a4:
                    7c:f0:73:5b:e7:d7:a9:7a:10:29:97:0d:74:bf:ba:
                    da:f9:af:58:5d:c3:b9:61:cc:25:80:60:36:82:0a:
                    5e:89:7e:cd:37:68:96:1d:6c:83:b5:f9:43:7c:9c:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7A:55:9F:FD:9F:65:61:9A:EC:00:42:C4:1F:BB:FE:42:04:A8:90
            X509v3 Authority Key Identifier:
                keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:b8:b6:98:f0:66:f9:d6:e1:16:21:60:98:7c:cd:4c:03:
         53:3f:45:4f:c2:44:2e:18:a0:a9:a9:2e:35:71:92:7b:9e:34:
         f5:b9:01:0d:9e:21:65:4e:b9:11:9a:1a:cf:3d:20:b5:5b:2f:
         a1:5a:a4:41:fe:51:79:eb:65:0b:58:4c:65:74:b3:5d:12:d5:
         9e:4e:34:86:4d:5f:9b:2d:ff:a0:11:c6:34:9c:24:ec:7a:87:
         ca:35:79:91:18:f3:2f:14:83:18:81:f7:d9:c8:02:3b:bf:8e:
         df:88:c3:e6:6d:1d:84:9b:6c:80:21:23:d8:5a:40:89:ef:40:
         42:59:ef:38:70:bd:0f:0a:5b:dd:a6:59:e5:c5:cc:cd:0d:8e:
         64:13:a2:dd:3d:73:68:a6:0c:5d:cf:fd:d0:4c:cb:00:40:9d:
         bc:b5:e4:cf:38:cf:b8:f9:ca:e9:27:a1:06:11:47:43:85:60:
         13:a8:b7:37:a0:91:8a:46:b4:d4:d4:9f:81:1b:ba:82:5a:86:
         87:a2:d8:eb:15:1a:0b:3a:f6:7a:ca:66:75:a3:42:ba:d3:8a:
         33:dc:b6:d9:99:0b:1f:b3:97:bf:0c:79:64:02:c8:61:f5:48:
         2a:bd:5d:ab:09:1b:0f:cb:7a:a8:2b:46:1f:e3:10:0a:62:15:
         30:e3:e2:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNmaeOa+vK+5226K34yp4B0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNThjOTIxY2IzZTljODFkZGMzMTZmZjAzOWNiOWMzNmQy
YTQzOTAwHhcNMjQxMTI2MDMwMDM1WhcNMjQxMTI3MDMwMDM1WjAzMTEwLwYDVQQD
Eyg3OTdhNTU5ZmZkOWY2NTYxOWFlYzAwNDJjNDFmYmJmZTQyMDRhODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2bXJteleKqDcWUU+j8WHreqFI8n
H0Q8Rf3yB0tjUVo7EnryzI19fnwE0FNP1WsRuBfSR1HQHJiTv1akjgVopiOECELV
M4pczojufhsslq1kxGmqZWuCeUscOTWISIEtbLwb/hSSXgiDLRWjf2lKaSYE9AHg
C6HDjbtV+nSMPB4xlpiAti8nbBTgUEcyPyID0ch6WOAeeRnIfJaRS7CoFqqaZbsE
XhCQfBMVSfoeNpUNZITYN9UvUAfOQ0lWwVUnA6Mt66kee6xOCznm9bgaBaR88HNb
59epehAplw10v7ra+a9YXcO5YcwlgGA2ggpeiX7NN2iWHWyDtflDfJzPBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHl6VZ/9n2VhmuwAQsQfu/5CBKiQMB8GA1UdIwQY
MBaAFAtYySHLPpyB3cMW/wOcucNtKkOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMt
NDkxNzgyOTZkZTg2LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMtNDkxNzgyOTZkZTg2
LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/q4tpjw
ZvnW4RYhYJh8zUwDUz9FT8JELhigqakuNXGSe5409bkBDZ4hZU65EZoazz0gtVsv
oVqkQf5ReetlC1hMZXSzXRLVnk40hk1fmy3/oBHGNJwk7HqHyjV5kRjzLxSDGIH3
2cgCO7+O34jD5m0dhJtsgCEj2FpAie9AQlnvOHC9Dwpb3aZZ5cXMzQ2OZBOi3T1z
aKYMXc/90EzLAECdvLXkzzjPuPnK6SehBhFHQ4VgE6i3N6CRika01NSfgRu6glqG
h6LY6xUaCzr2espmdaNCutOKM9y22ZkLH7OXvwx5ZALIYfVIKr1dqwkbD8t6qCtG
H+MQCmIVMOPiOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 05:36:10 2024 by rpki-client on console-ams.rpki-client.org