Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File:                     DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier:          Cml+3eY+6seUWdk0OQix/k3+bd7caVhPXcqQcdSVwsM=
Subject key identifier:   A8:4A:23:E3:97:78:9D:DF:CA:E6:15:55:94:CB:86:01:C2:0E:A6:81
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer:       /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial:       01935952F286E95E1ADFAC826478A50E8B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number:          12B5
Signing time:             Sat 23 Nov 2024 14:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:28 +0000
Files and hashes:         1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: HZEOWkA9QOK64aH4nKtvlTLnlXDgLpiwS+Qxr0mqEo8=)
                          2: tvfgUvtcFUvHCqRkTLoiggshnsg.roa (hash: CVcf/QqkE4iTDeLHjhmSd+wFRY4VP2GWULVl2K/QuqY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:f2:86:e9:5e:1a:df:ac:82:64:78:a5:0e:8b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
        Validity
            Not Before: Nov 23 14:00:28 2024 GMT
            Not After : Nov 24 14:00:28 2024 GMT
        Subject: CN=a84a23e397789ddfcae6155594cb8601c20ea681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:34:f8:af:f6:a6:5d:62:ca:cc:56:f6:76:
                    7d:a3:e4:e6:57:01:f8:87:52:e5:71:fd:09:ee:e2:
                    26:d8:1e:72:71:2a:4b:04:87:14:cc:ec:bb:34:b4:
                    ee:49:f8:52:13:da:da:a4:da:3f:66:ef:62:1d:3c:
                    06:9c:08:46:ad:60:7d:cb:24:50:1f:7d:e5:67:8d:
                    eb:fa:cc:ce:1b:f7:05:83:4a:b4:b5:cc:80:dd:34:
                    f6:93:35:f5:e9:5c:8c:4c:52:f1:9a:33:2f:cc:b1:
                    0f:1f:44:2e:59:27:5b:1c:65:d3:c6:0f:a9:82:cd:
                    77:a3:75:54:8e:a8:4d:9d:ef:60:74:c0:5d:00:b8:
                    38:cb:d4:b7:1d:62:9c:dd:f3:3c:50:18:1a:80:e7:
                    7e:72:92:4e:25:3f:7f:78:61:d9:40:1b:ee:ee:2f:
                    d1:d9:4f:d3:7e:ce:92:71:0c:69:ac:a8:35:16:b6:
                    66:b8:22:b5:83:02:5b:f2:33:16:7f:16:b0:1e:85:
                    6e:b3:33:55:4f:0e:08:3d:ed:81:7d:15:4b:b0:ae:
                    28:a4:fe:04:88:7e:58:92:aa:5d:fc:49:66:33:b1:
                    28:e0:d2:9d:e7:f7:8b:a4:3e:b9:5d:68:cc:14:47:
                    4e:49:fc:7d:12:d8:64:cf:6b:da:b9:60:92:d5:c8:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:23:E3:97:78:9D:DF:CA:E6:15:55:94:CB:86:01:C2:0E:A6:81
            X509v3 Authority Key Identifier:
                keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:29:61:88:f4:7a:d7:09:77:1e:a6:b5:47:29:8d:00:ee:
         6e:56:02:24:8c:35:9d:23:cf:79:50:4b:b2:4f:63:ee:38:dc:
         64:d5:84:8e:3e:9e:fb:8b:48:3f:27:30:18:6d:ea:1e:67:97:
         35:3c:9b:1b:3f:cf:c9:c3:02:e2:1b:a3:16:1e:7d:ab:1c:da:
         66:4c:ef:13:8c:6a:78:f9:ff:32:0e:6f:91:a1:79:cc:cd:9f:
         97:83:66:07:6a:dd:35:e8:ac:80:00:ff:7d:e1:a1:61:1f:1e:
         ff:e3:df:ef:38:a5:ea:c0:de:0c:db:aa:54:d0:25:58:0e:ec:
         a7:ee:22:7c:7c:61:2f:92:be:19:11:5d:d6:08:fe:66:58:f2:
         ce:a8:78:ed:7b:b2:31:2b:2e:15:06:b8:42:14:d7:c7:c9:a4:
         5a:71:3e:27:0d:d4:42:1f:dc:09:37:f2:8f:28:1a:dd:79:54:
         74:e6:62:fc:c9:d3:53:df:bd:0f:ea:ae:6e:d1:a6:9f:57:93:
         ba:48:38:13:6a:2a:f6:23:fd:01:28:ca:57:e1:7a:6e:5b:4a:
         ed:70:43:c4:52:2b:04:5d:24:9c:0e:89:43:de:10:a1:cd:31:
         a9:3b:4e:53:db:95:f6:42:db:c6:c8:70:34:60:e3:58:73:7e:
         ba:aa:71:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUvKG6V4a36yCZHilDos0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE0YTVmMDhmYjQ3NzExZDcxNjBiMDI3Zjk5NmRmYjYx
MmYwNDUwHhcNMjQxMTIzMTQwMDI4WhcNMjQxMTI0MTQwMDI4WjAzMTEwLwYDVQQD
EyhhODRhMjNlMzk3Nzg5ZGRmY2FlNjE1NTU5NGNiODYwMWMyMGVhNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw80+K/2pl1iysxW9nZ9o+TmVwH4
h1Llcf0J7uIm2B5ycSpLBIcUzOy7NLTuSfhSE9rapNo/Zu9iHTwGnAhGrWB9yyRQ
H33lZ43r+szOG/cFg0q0tcyA3TT2kzX16VyMTFLxmjMvzLEPH0QuWSdbHGXTxg+p
gs13o3VUjqhNne9gdMBdALg4y9S3HWKc3fM8UBgagOd+cpJOJT9/eGHZQBvu7i/R
2U/Tfs6ScQxprKg1FrZmuCK1gwJb8jMWfxawHoVuszNVTw4IPe2BfRVLsK4opP4E
iH5Ykqpd/ElmM7Eo4NKd5/eLpD65XWjMFEdOSfx9Ethkz2vauWCS1cg+awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhKI+OXeJ3fyuYVVZTLhgHCDqaBMB8GA1UdIwQY
MBaAFA2BSl8I+0dxHXFgsCf5lt+2EvBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYt
Y2U3OTg1YjU2MDkzLzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYtY2U3OTg1YjU2MDkz
LzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSUpYYj0
etcJdx6mtUcpjQDublYCJIw1nSPPeVBLsk9j7jjcZNWEjj6e+4tIPycwGG3qHmeX
NTybGz/PycMC4hujFh59qxzaZkzvE4xqePn/Mg5vkaF5zM2fl4NmB2rdNeisgAD/
feGhYR8e/+Pf7zil6sDeDNuqVNAlWA7sp+4ifHxhL5K+GRFd1gj+Zljyzqh47Xuy
MSsuFQa4QhTXx8mkWnE+Jw3UQh/cCTfyjyga3XlUdOZi/MnTU9+9D+qubtGmn1eT
ukg4E2oq9iP9ASjKV+F6bltK7XBDxFIrBF0knA6JQ94Qoc0xqTtOU9uV9kLbxshw
NGDjWHN+uqpxcg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:07:09 2024 by rpki-client on console-fra.rpki-client.org