Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File:                     4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier:          6EkTyh93ZH1Op3EF9CLQaPJYgOa2+4Adp9XtZl7bpe4=
Subject key identifier:   96:70:C3:46:B0:36:3D:48:8B:A2:F4:35:56:CF:B4:A5:44:89:1B:F0
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer:       /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial:       019376B8A97651231CC6BE28422100BF9974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number:          AA
Signing time:             Fri 29 Nov 2024 07:00:33 +0000
Manifest this update:     Fri 29 Nov 2024 07:00:33 +0000
Manifest next update:     Sat 30 Nov 2024 07:00:33 +0000
Files and hashes:         1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: BwBM4HQIzCgtBa/o/7LHrabfpd4aFWfqWpIVQAZ5a9E=)
                          2: jOVsgC8VK1dhdsVgsgRFudogFgo.roa (hash: hW5t0ux6/i561qQQg2OcFUevKAcNCYad/Ww/v8jbiYM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 30 Nov 2024 07:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:76:b8:a9:76:51:23:1c:c6:be:28:42:21:00:bf:99:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
        Validity
            Not Before: Nov 29 07:00:33 2024 GMT
            Not After : Nov 30 07:00:33 2024 GMT
        Subject: CN=9670c346b0363d488ba2f43556cfb4a544891bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:86:38:8d:82:7a:c7:ff:3c:fe:8b:c5:bc:
                    95:fc:15:d7:b0:16:91:f6:df:78:e2:87:8a:c0:a2:
                    41:63:d9:c4:19:d9:75:9c:8f:dd:24:e0:8c:e6:ec:
                    ff:7f:93:67:67:8a:97:05:d7:d4:14:e3:c0:3b:9d:
                    b7:ab:1a:02:7b:6a:67:aa:ca:27:2d:c3:b9:7a:af:
                    98:1a:47:0e:fd:26:e8:fd:54:2e:ff:01:f5:d0:01:
                    c4:79:17:bf:d5:b1:b2:b0:88:55:05:01:48:bd:97:
                    20:46:e9:19:d5:8a:7f:61:20:b8:67:1f:8d:71:5a:
                    68:36:db:cd:d8:a1:2c:9e:86:de:29:ea:e7:9e:d8:
                    41:ab:7d:ab:c8:01:d5:81:65:73:d3:82:0e:f1:be:
                    71:f3:dc:9e:60:1c:a5:a2:e1:c2:78:23:a3:31:61:
                    8b:c1:60:85:df:cf:a9:1c:59:63:5c:c9:4b:79:7f:
                    2d:9d:e0:8f:f0:65:09:f0:0a:6f:30:14:35:93:f6:
                    d9:a9:59:dc:a8:29:6b:e2:28:f8:f5:f1:37:ed:27:
                    14:8d:9f:4b:60:ce:f2:89:27:f0:ce:ae:9f:e7:65:
                    14:7c:7c:a3:7a:d4:9a:6b:a1:a5:40:5a:71:7c:02:
                    31:46:78:93:f2:21:d6:55:74:b9:94:25:4d:34:a3:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:70:C3:46:B0:36:3D:48:8B:A2:F4:35:56:CF:B4:A5:44:89:1B:F0
            X509v3 Authority Key Identifier:
                keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:d8:8f:5b:09:31:45:f8:92:a7:64:fe:f6:b6:69:12:18:
         c2:a2:09:7c:fd:b6:f7:b9:ab:29:52:c2:af:03:9a:dc:59:4a:
         33:23:fd:75:43:7a:84:ed:8b:be:b1:ad:7a:10:41:1c:ee:90:
         06:3e:c1:29:8d:b6:33:05:a4:af:ae:5f:f2:b7:c9:93:e3:4e:
         fd:59:70:72:5b:80:6f:44:29:42:d0:2e:72:c4:31:92:19:6b:
         ee:5f:45:52:2a:16:16:79:9d:66:24:1e:1f:f8:a6:43:02:2a:
         49:2e:98:c4:ef:20:1c:48:68:4a:c0:06:2d:17:2a:3b:dd:8a:
         5d:57:bd:6f:04:8a:50:e6:5e:3e:ca:b1:7f:ea:78:0d:0a:fd:
         0d:2c:f9:52:2c:78:38:f7:dd:c7:ad:8f:41:8c:e7:bc:24:e5:
         3c:ef:4c:eb:75:bb:5e:26:27:71:53:f1:20:d4:48:f2:8f:85:
         0e:0f:67:e2:b8:2d:5a:db:4c:e0:bc:ce:1b:ef:32:d9:d0:f6:
         76:54:77:75:0b:90:81:d2:43:9f:06:63:0d:d0:d9:9b:2c:c7:
         6c:27:f6:99:c1:1a:c1:b6:14:7b:ec:e2:d6:9a:00:d1:41:f0:
         6d:c9:63:2f:08:a9:d8:f6:92:b3:a1:7d:0a:b2:b3:a3:52:04:
         47:b4:05:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZN2uKl2USMcxr4oQiEAv5l0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzFiOWVmNDFhNTM4Mjg1OGNkOWVlZjk4YTdmYjlkMTI2
YWE0YWUwHhcNMjQxMTI5MDcwMDMzWhcNMjQxMTMwMDcwMDMzWjAzMTEwLwYDVQQD
Eyg5NjcwYzM0NmIwMzYzZDQ4OGJhMmY0MzU1NmNmYjRhNTQ0ODkxYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcCGOI2Cesf/PP6LxbyV/BXXsBaR
9t944oeKwKJBY9nEGdl1nI/dJOCM5uz/f5NnZ4qXBdfUFOPAO523qxoCe2pnqson
LcO5eq+YGkcO/Sbo/VQu/wH10AHEeRe/1bGysIhVBQFIvZcgRukZ1Yp/YSC4Zx+N
cVpoNtvN2KEsnobeKernnthBq32ryAHVgWVz04IO8b5x89yeYBylouHCeCOjMWGL
wWCF38+pHFljXMlLeX8tneCP8GUJ8ApvMBQ1k/bZqVncqClr4ij49fE37ScUjZ9L
YM7yiSfwzq6f52UUfHyjetSaa6GlQFpxfAIxRniT8iHWVXS5lCVNNKN0GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZww0awNj1Ii6L0NVbPtKVEiRvwMB8GA1UdIwQY
MBaAFOBxue9BpTgoWM2e75in+50SaqSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWIt
YmIzODBiY2FiZDI4LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iODE0NjAtZTA2Yy00MzUyLWFiMWItYmIzODBiY2FiZDI4
LzEvNEhHNTcwR2xPQ2hZelo3dm1LZjduUkpxcEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmzYj1sJ
MUX4kqdk/va2aRIYwqIJfP2297mrKVLCrwOa3FlKMyP9dUN6hO2LvrGtehBBHO6Q
Bj7BKY22MwWkr65f8rfJk+NO/VlwcluAb0QpQtAucsQxkhlr7l9FUioWFnmdZiQe
H/imQwIqSS6YxO8gHEhoSsAGLRcqO92KXVe9bwSKUOZePsqxf+p4DQr9DSz5Uix4
OPfdx62PQYznvCTlPO9M63W7XiYncVPxINRI8o+FDg9n4rgtWttM4LzOG+8y2dD2
dlR3dQuQgdJDnwZjDdDZmyzHbCf2mcEawbYUe+zi1poA0UHwbcljLwip2PaSs6F9
CrKzo1IER7QF0A==
-----END CERTIFICATE-----
Generated at Fri Nov 29 13:45:09 2024 by rpki-client on console-ams.rpki-client.org