Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File:                     DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier:          AfNbUZBVP5a1PRKHiBLBQjB17iRydjI3E1VvY4OD880=
Subject key identifier:   C3:FD:CB:72:22:6A:46:B1:04:D6:EC:E9:05:6A:4B:47:0F:87:C0:8D
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer:       /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial:       01936B9009A42C1E2833757416668C8100B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number:          02D6
Signing time:             Wed 27 Nov 2024 03:00:21 +0000
Manifest this update:     Wed 27 Nov 2024 03:00:21 +0000
Manifest next update:     Thu 28 Nov 2024 03:00:21 +0000
Files and hashes:         1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: TlrX4R+Lifbe+XxWYVlrTJmRnV56+COGfsgxRzVzW+Q=)
                          2: w9VbXBpTSsEWu2o1WzRk1bXc6tg.roa (hash: SG3bc1iRUxiUMNHhx1BVKE5QcCSpfD6SvMpZZZ0/wpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:90:09:a4:2c:1e:28:33:75:74:16:66:8c:81:00:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
        Validity
            Not Before: Nov 27 03:00:21 2024 GMT
            Not After : Nov 28 03:00:21 2024 GMT
        Subject: CN=c3fdcb72226a46b104d6ece9056a4b470f87c08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:57:82:a0:f1:c5:12:a5:41:ae:29:07:f4:
                    5c:af:0b:f5:2d:60:4f:80:9a:54:4e:39:20:fb:e0:
                    82:ca:da:20:e7:73:16:df:ca:db:c4:52:51:5f:1d:
                    5f:9b:19:5b:97:55:95:4a:69:4e:fb:11:ce:fd:39:
                    79:07:65:94:ac:a3:be:03:55:1a:82:81:3d:75:2b:
                    7b:3b:c4:98:e0:4d:6a:23:5f:63:1a:f1:b0:d8:5a:
                    7f:ed:9a:22:62:a7:3f:c4:2e:2b:78:89:32:3b:43:
                    d7:4b:cb:80:17:da:0b:7d:cf:6f:8b:b5:e7:5e:c5:
                    8c:df:c5:64:37:64:a6:67:13:6f:f5:c3:c7:e1:f3:
                    79:0f:6d:bc:7e:1d:34:bd:6b:76:ba:a2:36:c9:30:
                    aa:01:cd:6d:e2:27:90:00:30:4f:34:d3:38:1c:d8:
                    a4:89:6b:b3:ce:1a:d7:c7:95:a1:78:92:ab:d3:f9:
                    5c:53:4a:3f:33:cc:24:57:6e:51:92:3e:a8:f1:5e:
                    dc:5c:b7:df:d6:7b:c5:4c:e7:b0:f8:40:0b:14:e8:
                    aa:ba:9f:ee:09:35:05:1f:eb:b6:39:b8:85:43:17:
                    69:a3:a7:1e:c2:16:8d:a3:e4:69:5e:5d:a8:38:42:
                    1d:f9:cf:7c:df:85:1b:50:1e:d3:58:a4:b4:02:76:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FD:CB:72:22:6A:46:B1:04:D6:EC:E9:05:6A:4B:47:0F:87:C0:8D
            X509v3 Authority Key Identifier:
                keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:9b:47:ac:d7:c3:06:6a:f7:cb:65:34:c2:ee:c1:21:d9:
         bf:e5:74:73:e4:af:6d:ef:7e:e0:e5:b0:f0:e9:69:52:6c:ee:
         a1:49:e5:55:3d:76:fa:ae:49:75:04:2a:84:1a:b2:2d:82:5a:
         48:ed:91:cc:eb:32:0a:55:e3:f7:0b:8d:5a:28:e6:1c:54:a4:
         42:49:27:51:26:0d:60:a2:cb:ee:29:2e:9a:bf:c4:68:8f:6a:
         e2:8c:62:f1:c7:93:9e:14:d0:ac:a7:41:06:62:52:2f:ba:44:
         0d:01:e4:77:13:d2:ec:4c:f7:b0:9c:bd:30:a4:c1:0d:2a:77:
         c6:7d:77:78:35:6d:a2:73:fb:51:9e:d8:64:21:85:23:ac:f2:
         3a:f8:c9:75:e2:06:46:2f:fb:82:1d:15:c2:5a:4f:e9:c5:f4:
         5c:c3:0b:d4:e2:1d:75:d7:ec:a3:18:60:db:ff:da:bc:09:8c:
         41:0a:95:23:1e:4a:2b:0e:4c:9d:b7:95:ba:96:7d:e1:63:79:
         64:e7:8e:21:a4:07:b8:ce:af:a1:05:ed:27:8f:cc:b5:33:77:
         ca:64:12:f4:69:0f:0f:d6:ed:df:33:60:73:50:79:bf:d6:f4:
         8a:c7:c1:cc:d2:c5:ab:26:76:c8:66:9c:62:89:c9:a8:15:04:
         3a:bd:5b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrkAmkLB4oM3V0FmaMgQCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMmY4MWI4YzE3ZjU1ZGNkZGRlYzU0YzhjY2VhZGQ2OTVk
MjhmMDcwHhcNMjQxMTI3MDMwMDIxWhcNMjQxMTI4MDMwMDIxWjAzMTEwLwYDVQQD
EyhjM2ZkY2I3MjIyNmE0NmIxMDRkNmVjZTkwNTZhNGI0NzBmODdjMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoERXgqDxxRKlQa4pB/Rcrwv1LWBP
gJpUTjkg++CCytog53MW38rbxFJRXx1fmxlbl1WVSmlO+xHO/Tl5B2WUrKO+A1Ua
goE9dSt7O8SY4E1qI19jGvGw2Fp/7ZoiYqc/xC4reIkyO0PXS8uAF9oLfc9vi7Xn
XsWM38VkN2SmZxNv9cPH4fN5D228fh00vWt2uqI2yTCqAc1t4ieQADBPNNM4HNik
iWuzzhrXx5WheJKr0/lcU0o/M8wkV25Rkj6o8V7cXLff1nvFTOew+EALFOiqup/u
CTUFH+u2ObiFQxdpo6cewhaNo+RpXl2oOEId+c9834UbUB7TWKS0AnZP1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP9y3IiakaxBNbs6QVqS0cPh8CNMB8GA1UdIwQY
MBaAFA0vgbjBf1Xc3d7FTIzOrdaV0o8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODct
NjhmMmZhMDAxZmE3LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODctNjhmMmZhMDAxZmE3
LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcqbR6zX
wwZq98tlNMLuwSHZv+V0c+Svbe9+4OWw8OlpUmzuoUnlVT12+q5JdQQqhBqyLYJa
SO2RzOsyClXj9wuNWijmHFSkQkknUSYNYKLL7ikumr/EaI9q4oxi8ceTnhTQrKdB
BmJSL7pEDQHkdxPS7Ez3sJy9MKTBDSp3xn13eDVtonP7UZ7YZCGFI6zyOvjJdeIG
Ri/7gh0VwlpP6cX0XMML1OIdddfsoxhg2//avAmMQQqVIx5KKw5MnbeVupZ94WN5
ZOeOIaQHuM6voQXtJ4/MtTN3ymQS9GkPD9bt3zNgc1B5v9b0isfBzNLFqyZ2yGac
YonJqBUEOr1bzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 08:43:13 2024 by rpki-client on console-fra.rpki-client.org