Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File:                     J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier:          V03IQ4IV1wytMLCrVXbD8tucUlHiPlPiJTLpj280pdE=
Subject key identifier:   34:B5:F7:CB:2F:97:49:95:F0:03:A8:C4:4B:62:BC:3F:6C:96:15:D9
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer:       /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial:       019356889E8EF11194427DADDD54CC73F6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number:          099F
Signing time:             Sat 23 Nov 2024 01:00:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:14 +0000
Files and hashes:         1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: zvF/AdDAMV4aNK6Ppyk23u1qJGaXZGCIsMuPsd2s/Qs=)
                          2: g7d8qIhbNnPANMMQbOcQrkP5XMM.roa (hash: PiR0FFy29ovFvlBoBQ/8WUHsfFT3mbXqdjXTkCErj/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:9e:8e:f1:11:94:42:7d:ad:dd:54:cc:73:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
        Validity
            Not Before: Nov 23 01:00:14 2024 GMT
            Not After : Nov 24 01:00:14 2024 GMT
        Subject: CN=34b5f7cb2f974995f003a8c44b62bc3f6c9615d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:b7:49:99:db:48:8d:83:49:0c:5b:a6:a8:
                    8b:7d:87:1c:13:6f:e9:d7:d6:52:0f:7f:20:0a:73:
                    c9:c7:fd:d7:17:c7:4b:ca:73:c0:87:d7:c2:76:51:
                    6e:f9:e5:4d:6d:1f:f5:67:0a:01:b5:1e:61:d1:e5:
                    af:04:81:e6:2c:6d:b8:1c:ab:14:c1:1a:31:aa:d6:
                    8e:fb:f2:29:78:7f:51:28:02:6d:0f:64:e6:af:97:
                    5f:a4:df:8d:2d:f3:47:48:7e:e1:bb:f9:42:da:ae:
                    76:0b:e3:b0:10:06:5f:79:e5:e7:4a:2b:d6:41:8e:
                    6d:d1:1e:be:63:f8:36:10:75:1e:13:ce:d1:1b:1d:
                    c4:a4:20:29:3b:d7:8a:51:cc:da:69:4a:50:14:fd:
                    51:13:49:ac:9d:8a:68:85:83:cb:d9:94:f2:bf:ee:
                    55:43:75:3a:48:50:58:c2:78:65:16:ab:a0:f1:d5:
                    d1:e6:83:6e:ee:ad:27:90:41:ad:d5:5e:28:d7:35:
                    8f:e7:68:10:42:2b:63:d9:76:a2:66:fd:60:50:72:
                    54:57:cd:28:b9:a4:ed:3f:3d:5a:d0:8f:da:94:b0:
                    93:7e:01:8d:83:ab:23:86:6e:38:44:b6:a4:96:15:
                    1d:a0:3d:c8:23:f2:d4:05:d9:0d:3d:c2:b7:90:8e:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:F7:CB:2F:97:49:95:F0:03:A8:C4:4B:62:BC:3F:6C:96:15:D9
            X509v3 Authority Key Identifier:
                keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:67:99:0a:0b:08:bb:c1:39:a8:16:2d:72:e8:16:c7:0e:
         6f:46:cc:d0:15:23:99:21:96:1f:e2:31:69:f7:00:99:db:8e:
         ce:42:42:a7:5a:37:f2:fb:71:30:1b:d5:bd:f8:63:d2:b4:02:
         bb:5b:84:49:d6:63:12:d3:82:64:fc:4f:bd:1c:fa:0d:b1:75:
         61:83:ab:c0:8e:b8:f1:c3:dd:7b:4d:26:f3:9a:d2:cc:04:25:
         d5:62:b8:6c:11:07:32:c3:5f:bd:ef:1b:22:71:33:50:bb:1d:
         4e:2b:f6:dd:ea:bc:f8:13:f3:8a:1f:12:17:86:45:9a:f2:d8:
         3f:53:f2:c2:da:f2:50:96:79:c3:7d:f2:7e:c1:af:18:18:26:
         e1:b8:d6:81:98:d5:a0:67:82:33:17:3d:0b:c4:c0:06:0f:ae:
         eb:23:3d:8d:46:6b:5b:01:37:14:9c:f6:88:db:2d:23:09:7f:
         0f:88:60:d3:fc:42:e8:aa:56:b9:91:2f:c4:b9:cc:5b:ba:e8:
         e1:17:0c:6d:7f:32:aa:15:6a:f8:20:17:1c:a5:95:8b:7c:e3:
         8a:79:68:4f:40:c1:51:9e:ed:cb:bd:2a:eb:ad:66:57:b7:b4:
         81:44:f1:81:cd:99:d5:39:74:10:33:6f:3f:23:f8:b1:f0:e3:
         a0:a1:34:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiJ6O8RGUQn2t3VTMc/agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NWFhYjdkZmJiMTUyYTY0NmFkZjMyNzNiMzFhYTVkZGU2
NGExZGYwHhcNMjQxMTIzMDEwMDE0WhcNMjQxMTI0MDEwMDE0WjAzMTEwLwYDVQQD
EygzNGI1ZjdjYjJmOTc0OTk1ZjAwM2E4YzQ0YjYyYmMzZjZjOTYxNWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq+3SZnbSI2DSQxbpqiLfYccE2/p
19ZSD38gCnPJx/3XF8dLynPAh9fCdlFu+eVNbR/1ZwoBtR5h0eWvBIHmLG24HKsU
wRoxqtaO+/IpeH9RKAJtD2Tmr5dfpN+NLfNHSH7hu/lC2q52C+OwEAZfeeXnSivW
QY5t0R6+Y/g2EHUeE87RGx3EpCApO9eKUczaaUpQFP1RE0msnYpohYPL2ZTyv+5V
Q3U6SFBYwnhlFqug8dXR5oNu7q0nkEGt1V4o1zWP52gQQitj2XaiZv1gUHJUV80o
uaTtPz1a0I/alLCTfgGNg6sjhm44RLaklhUdoD3II/LUBdkNPcK3kI5F8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS198svl0mV8AOoxEtivD9slhXZMB8GA1UdIwQY
MBaAFCdaq337sVKmRq3zJzsxql3eZKHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUt
MGQwZDdjMDE4OWFkLzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUtMGQwZDdjMDE4OWFk
LzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdRnmQoL
CLvBOagWLXLoFscOb0bM0BUjmSGWH+IxafcAmduOzkJCp1o38vtxMBvVvfhj0rQC
u1uESdZjEtOCZPxPvRz6DbF1YYOrwI648cPde00m85rSzAQl1WK4bBEHMsNfve8b
InEzULsdTiv23eq8+BPzih8SF4ZFmvLYP1PywtryUJZ5w33yfsGvGBgm4bjWgZjV
oGeCMxc9C8TABg+u6yM9jUZrWwE3FJz2iNstIwl/D4hg0/xC6KpWuZEvxLnMW7ro
4RcMbX8yqhVq+CAXHKWVi3zjinloT0DBUZ7ty70q661mV7e0gUTxgc2Z1Tl0EDNv
PyP4sfDjoKE0lQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:42 2024 by rpki-client on console-fra.rpki-client.org