Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
File:                     Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json)
Hash identifier:          IXCCfhB7LMF42DQJbb7zXOGCdFLTVv1wJrkJq9dI7bE=
Subject key identifier:   6D:1A:A3:2D:B7:E3:E0:ED:F2:81:2A:DD:C7:B5:C4:6E:46:25:19:D1
Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA
Certificate issuer:       /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
Certificate serial:       019406B392B51AF97D8E65E6529ABB249AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 06:00:19 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:19 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:19 +0000
Files and hashes:         1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: ChV9h1bkT+HTiyprhGE+XbXiXBQudioC+yPR5IRkiYc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:92:b5:1a:f9:7d:8e:65:e6:52:9a:bb:24:9a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba
        Validity
            Not Before: Dec 27 06:00:19 2024 GMT
            Not After : Dec 28 06:00:19 2024 GMT
        Subject: CN=6d1aa32db7e3e0edf2812addc7b5c46e462519d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:ba:f6:72:ee:8f:4d:6b:c3:8b:5c:65:c5:
                    09:aa:45:90:5e:a9:6c:0f:62:7b:92:03:31:e4:19:
                    c9:42:e7:5d:f9:a6:72:50:13:78:51:c0:f3:78:4e:
                    0e:53:20:33:be:da:5e:4a:e6:3e:1a:b2:67:61:9c:
                    d0:c1:af:2a:08:3d:fa:cd:e3:15:ee:6c:64:5b:12:
                    7a:67:b3:11:f2:31:9a:b7:1d:94:b7:86:5e:ea:90:
                    f0:33:ad:f3:fb:d1:b6:44:30:68:cc:a3:d5:2f:40:
                    d8:ac:d1:81:4e:4f:a7:f7:d9:14:83:a5:4e:8a:19:
                    67:d3:94:b2:e6:c0:e8:a0:47:ea:ec:99:ee:ce:48:
                    ff:1b:1c:6e:a7:0d:5b:06:b4:25:0e:9e:e7:9c:76:
                    03:05:f3:51:1f:aa:a5:11:d1:f6:2a:85:3b:17:cf:
                    6d:2f:11:ee:72:a5:37:fd:ac:6f:eb:67:6c:e5:0a:
                    20:ed:c5:31:f4:a2:00:40:1d:65:07:9c:4e:fd:4b:
                    f1:5c:dc:de:09:9b:da:7f:7a:98:49:48:57:73:e5:
                    36:90:cc:20:fe:24:bc:52:84:1a:e2:df:4e:44:f6:
                    8f:c0:28:4e:b9:3c:a0:d3:eb:31:dd:27:6e:ee:39:
                    7a:30:c4:ae:c3:95:68:67:aa:93:4f:a0:59:45:9f:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:A3:2D:B7:E3:E0:ED:F2:81:2A:DD:C7:B5:C4:6E:46:25:19:D1
            X509v3 Authority Key Identifier:
                keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0f:fd:34:cb:9c:e2:6f:ee:31:4f:de:d1:85:c7:51:ab:ec:
         f5:d0:f3:4f:f0:6a:46:4c:03:ff:b9:5d:d3:54:83:cd:0e:de:
         ee:3d:83:6a:3f:4d:07:33:0b:26:a3:e7:d9:c4:dc:4b:84:1d:
         80:f6:eb:54:bd:89:38:c4:a5:7f:7b:3e:4b:81:96:e9:ed:30:
         52:8d:a5:77:6f:87:e0:72:d3:a0:2f:94:fc:f0:8a:c6:16:c2:
         b2:7b:7f:3f:68:bd:f1:2e:af:da:a4:85:aa:59:a6:fc:3f:15:
         6a:aa:5f:ea:de:97:35:1f:b9:ab:6d:ae:fe:34:61:28:c5:87:
         03:64:9c:e9:1c:1a:f7:93:5c:83:e3:b7:36:59:0b:5a:85:45:
         43:05:32:8d:b8:04:95:86:69:69:30:87:5d:80:91:9b:ca:ba:
         ab:73:fa:a0:60:da:90:b6:e0:8c:ac:f2:8b:92:4f:79:9e:13:
         c7:48:66:a1:e5:f6:4d:39:16:3a:70:ad:48:c2:03:91:7c:53:
         ef:1f:21:7b:d6:34:57:a5:b6:9d:71:23:4d:96:d1:74:de:ec:
         45:15:14:c0:e6:d6:bf:8b:e5:d3:48:5f:61:f4:24:e7:ee:03:
         0b:4a:8c:a3:09:28:36:fe:89:38:54:c0:ed:39:4e:aa:26:98:
         bb:59:8b:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGs5K1Gvl9jmXmUpq7JJrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MWUwZWFlNzdhOThjMzYyM2QxNzgxZjlhZjQ1NTdkMzU0
MWQyYmEwHhcNMjQxMjI3MDYwMDE5WhcNMjQxMjI4MDYwMDE5WjAzMTEwLwYDVQQD
Eyg2ZDFhYTMyZGI3ZTNlMGVkZjI4MTJhZGRjN2I1YzQ2ZTQ2MjUxOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAG69nLuj01rw4tcZcUJqkWQXqls
D2J7kgMx5BnJQudd+aZyUBN4UcDzeE4OUyAzvtpeSuY+GrJnYZzQwa8qCD36zeMV
7mxkWxJ6Z7MR8jGatx2Ut4Ze6pDwM63z+9G2RDBozKPVL0DYrNGBTk+n99kUg6VO
ihln05Sy5sDooEfq7Jnuzkj/Gxxupw1bBrQlDp7nnHYDBfNRH6qlEdH2KoU7F89t
LxHucqU3/axv62ds5Qog7cUx9KIAQB1lB5xO/UvxXNzeCZvaf3qYSUhXc+U2kMwg
/iS8UoQa4t9ORPaPwChOuTyg0+sx3Sdu7jl6MMSuw5VoZ6qTT6BZRZ9wcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0aoy234+Dt8oEq3ce1xG5GJRnRMB8GA1UdIwQY
MBaAFBYeDq53qYw2I9F4H5r0VX01QdK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmg0T3JuZXBqRFlqMFhnZm12UlZmVFZCMHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85Njk3MDgtZTRiOS00YWIyLWI1MGIt
MjlkYzk1MzYyMGMxLzEvRmg0T3JuZXBqRFlqMFhnZm12UlZmVFZCMHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85Njk3MDgtZTRiOS00YWIyLWI1MGItMjlkYzk1MzYyMGMx
LzEvRmg0T3JuZXBqRFlqMFhnZm12UlZmVFZCMHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw/9NMuc
4m/uMU/e0YXHUavs9dDzT/BqRkwD/7ld01SDzQ7e7j2Daj9NBzMLJqPn2cTcS4Qd
gPbrVL2JOMSlf3s+S4GW6e0wUo2ld2+H4HLToC+U/PCKxhbCsnt/P2i98S6v2qSF
qlmm/D8Vaqpf6t6XNR+5q22u/jRhKMWHA2Sc6Rwa95Ncg+O3NlkLWoVFQwUyjbgE
lYZpaTCHXYCRm8q6q3P6oGDakLbgjKzyi5JPeZ4Tx0hmoeX2TTkWOnCtSMIDkXxT
7x8he9Y0V6W2nXEjTZbRdN7sRRUUwObWv4vl00hfYfQk5+4DC0qMowkoNv6JOFTA
7TlOqiaYu1mLZA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:29 2024 by rpki-client on console-ams.rpki-client.org