Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File:                     IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier:          R1uo8jj4PaWBcsMlB7+Zjq09hKNgnlMGceyPi3bWor8=
Subject key identifier:   B1:CB:0D:44:CE:62:1B:3F:8A:7A:5E:6B:6C:9C:51:2A:B0:BB:86:65
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer:       /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial:       0191FA47B0F53F4FCA03C510F7BA8ACB9401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number:          DD
Signing time:             Mon 16 Sep 2024 10:01:27 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:27 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:27 +0000
Files and hashes:         1: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: WPIrFdoHRmhZzaqtUgeTCVfIbW5jx1FP766F9N/AZrU=)
                          2: ayM0rD_U9IcY2n8V9JKhGa8uKus.roa (hash: eHOvtWAy6Z1aJ/dxuMxWnbTIvZQlf3HofITlWmh6uzg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:b0:f5:3f:4f:ca:03:c5:10:f7:ba:8a:cb:94:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
        Validity
            Not Before: Sep 16 10:01:27 2024 GMT
            Not After : Sep 17 10:01:27 2024 GMT
        Subject: CN=b1cb0d44ce621b3f8a7a5e6b6c9c512ab0bb8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a0:b8:d7:90:54:11:97:77:85:32:a0:00:cc:
                    f7:5f:ee:45:42:96:b0:af:ea:7c:e0:1f:b2:ab:34:
                    ab:fe:4f:6b:f6:9d:a8:a0:b0:5e:7e:2e:02:2b:69:
                    29:a1:de:88:8c:13:2e:6d:56:7c:9f:44:4a:f2:c8:
                    7a:38:ef:b6:f0:3e:dc:9d:fd:9b:8d:35:5c:2a:28:
                    6d:bb:93:f6:62:93:f8:6b:b2:26:ed:3d:51:10:40:
                    bc:c7:c7:54:36:8a:63:1b:44:be:8c:0d:a5:4b:c4:
                    2b:13:bc:37:0c:d2:2d:5a:af:98:08:6c:f5:2d:a4:
                    8f:cd:8a:60:e9:a1:5a:e8:f5:fd:9b:72:7b:45:5e:
                    1e:7f:67:23:c4:94:14:0b:e5:97:af:6a:0b:f7:50:
                    01:8d:5f:3d:d4:b2:75:2a:68:db:d1:9c:0a:c3:26:
                    23:25:cc:77:b5:02:db:8c:60:e2:52:d4:a9:cb:5f:
                    96:ea:f7:c1:35:6b:ef:7b:5f:0b:2a:00:ef:dc:e1:
                    e9:c3:97:cb:a7:56:cd:34:5d:2c:b6:5a:a4:e4:28:
                    32:b8:3d:ff:a3:62:d9:d6:a5:29:c1:81:00:63:5f:
                    38:99:84:2a:22:3a:d6:e8:f9:25:89:f0:9d:d9:5e:
                    ff:25:66:23:9e:5a:49:aa:76:02:d5:57:b2:ff:8d:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:0D:44:CE:62:1B:3F:8A:7A:5E:6B:6C:9C:51:2A:B0:BB:86:65
            X509v3 Authority Key Identifier:
                keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:33:cd:e4:72:ad:ed:ac:9e:8b:ae:68:d1:64:0c:3a:a5:
         4d:48:88:ca:ae:63:d0:89:94:cd:f6:bd:0e:06:a3:ca:1e:2e:
         5c:10:cc:97:62:e8:ae:2e:1c:21:0e:d4:0f:63:64:d3:0c:30:
         c1:f9:7b:38:cb:c9:5c:eb:75:8e:69:09:57:4b:65:a1:07:0c:
         26:3c:40:04:d1:4c:78:e4:4c:ab:2f:a9:d8:5e:4e:b4:d5:fa:
         41:93:98:48:cc:56:5b:f3:b8:d4:8a:83:9f:db:54:47:28:2e:
         13:4e:e7:3e:c5:a1:9f:e9:b9:99:4e:67:08:e6:e6:b1:b5:77:
         62:ed:d8:2b:3a:66:f0:ef:7f:2d:71:bd:aa:9d:c4:54:fe:17:
         8b:ee:df:7a:58:bf:9d:0d:13:b7:16:3f:b7:7e:c8:33:a0:91:
         9e:6a:2d:f1:d4:45:cb:e5:7c:a8:9a:42:10:59:8d:99:58:bc:
         2d:55:a8:b1:73:c0:03:2f:ed:19:91:a6:22:bd:91:d4:27:88:
         97:7e:56:c6:87:0e:82:a7:1e:7a:02:2a:7e:0a:44:96:f3:f4:
         42:ba:d0:2a:ed:59:3d:ad:0d:3e:2d:b7:3d:5f:f0:a9:d1:e4:
         7c:cd:b1:d2:49:5d:1d:b0:7e:57:10:7b:2a:a1:a3:f9:08:46:
         50:f3:60:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6R7D1P0/KA8UQ97qKy5QBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMGIzYjIzNDU3MTBhMDk2ZjZhMzRkN2YwODliZWIxZTNm
YzUzODgwHhcNMjQwOTE2MTAwMTI3WhcNMjQwOTE3MTAwMTI3WjAzMTEwLwYDVQQD
EyhiMWNiMGQ0NGNlNjIxYjNmOGE3YTVlNmI2YzljNTEyYWIwYmI4NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56C415BUEZd3hTKgAMz3X+5FQpaw
r+p84B+yqzSr/k9r9p2ooLBefi4CK2kpod6IjBMubVZ8n0RK8sh6OO+28D7cnf2b
jTVcKihtu5P2YpP4a7Im7T1REEC8x8dUNopjG0S+jA2lS8QrE7w3DNItWq+YCGz1
LaSPzYpg6aFa6PX9m3J7RV4ef2cjxJQUC+WXr2oL91ABjV891LJ1Kmjb0ZwKwyYj
Jcx3tQLbjGDiUtSpy1+W6vfBNWvve18LKgDv3OHpw5fLp1bNNF0stlqk5CgyuD3/
o2LZ1qUpwYEAY184mYQqIjrW6PklifCd2V7/JWYjnlpJqnYC1Vey/41WlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHLDUTOYhs/inpea2ycUSqwu4ZlMB8GA1UdIwQY
MBaAFCALOyNFcQoJb2o01/CJvrHj/FOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFzN0kwVnhDZ2x2YWpUWDhJbS1zZVA4VTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjlhNGMtNzlmZS00MDA0LTk0MTMt
NGI0N2U4ZjhjODZmLzEvSUFzN0kwVnhDZ2x2YWpUWDhJbS1zZVA4VTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZjlhNGMtNzlmZS00MDA0LTk0MTMtNGI0N2U4ZjhjODZm
LzEvSUFzN0kwVnhDZ2x2YWpUWDhJbS1zZVA4VTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAej8zzeRy
re2snouuaNFkDDqlTUiIyq5j0ImUzfa9Dgajyh4uXBDMl2Lori4cIQ7UD2Nk0www
wfl7OMvJXOt1jmkJV0tloQcMJjxABNFMeORMqy+p2F5OtNX6QZOYSMxWW/O41IqD
n9tURyguE07nPsWhn+m5mU5nCObmsbV3Yu3YKzpm8O9/LXG9qp3EVP4Xi+7feli/
nQ0TtxY/t37IM6CRnmot8dRFy+V8qJpCEFmNmVi8LVWosXPAAy/tGZGmIr2R1CeI
l35WxocOgqceegIqfgpElvP0QrrQKu1ZPa0NPi23PV/wqdHkfM2x0kldHbB+VxB7
KqGj+QhGUPNg8Q==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:20:42 2024 by rpki-client on console-fra.rpki-client.org