Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File:                     L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier:          d6QFwZrRkb33HozxnTJfqJRnwC6otetYkqhFvPVZ4a0=
Subject key identifier:   74:E2:CF:41:5F:2C:4E:F2:35:F4:7E:E8:77:A7:23:AE:81:9F:1E:16
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer:       /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial:       0193568965826888987D497719B9E32A0146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:04 +0000
Files and hashes:         1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: 1thYh9tI2LUGn2c0HhVAzHtDn64rlpZDoty154cRbBc=)
                          2: q0S2JKhPWU0nKYQYQ4aLM1sQrQI.roa (hash: PNBzPS9/9e99UCzcF1j/kcGteP3girm7x054QUNP620=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:65:82:68:88:98:7d:49:77:19:b9:e3:2a:01:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
        Validity
            Not Before: Nov 23 01:01:04 2024 GMT
            Not After : Nov 24 01:01:04 2024 GMT
        Subject: CN=74e2cf415f2c4ef235f47ee877a723ae819f1e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:d5:bf:c8:3c:c1:60:be:10:d2:80:5a:e7:
                    5f:f0:3b:47:36:15:e7:e3:71:1e:f6:78:59:f6:09:
                    5e:4f:1b:a0:0f:1d:e2:71:a0:5f:05:fe:05:6b:b6:
                    22:5a:37:95:7d:78:11:91:95:2a:c9:24:66:48:4a:
                    66:bf:10:95:26:2c:a7:3c:65:87:46:a8:5e:fb:ed:
                    c1:81:d9:94:e8:41:a7:7f:ff:7f:8d:36:fe:ec:ef:
                    7d:0c:1b:a0:05:26:ae:aa:be:05:f7:8a:f9:d0:b7:
                    2c:e2:4e:46:b0:76:e4:1b:05:19:ec:ef:0d:8b:97:
                    ec:f6:16:59:5e:91:90:11:f7:af:0e:d3:6d:13:f6:
                    81:6c:54:b9:33:af:e6:0c:cc:e9:2e:ee:a2:ae:2a:
                    1f:a2:6b:f5:aa:4e:26:4d:1e:6b:d8:9e:50:a0:e9:
                    99:92:a7:f4:c3:48:7f:f9:19:7b:6c:8c:2d:4e:92:
                    c7:3e:df:2d:72:9e:bd:30:c7:57:a5:2f:e2:ce:69:
                    07:e5:39:f3:58:b0:21:4f:64:e9:91:19:9f:56:f6:
                    72:36:72:d1:67:16:47:1d:8e:88:cb:a3:18:f7:be:
                    f8:7e:18:34:bd:82:c0:5c:4e:23:54:88:af:d0:8c:
                    29:44:0f:8f:bf:a9:10:e8:33:aa:2e:77:ba:e1:30:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:CF:41:5F:2C:4E:F2:35:F4:7E:E8:77:A7:23:AE:81:9F:1E:16
            X509v3 Authority Key Identifier:
                keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:23:19:19:3e:78:33:f5:29:eb:d4:0c:fe:07:ea:0b:bb:af:
         47:d9:02:e1:40:4c:4e:2a:e6:8b:81:73:11:6d:ad:f9:08:02:
         7e:eb:cb:f0:3a:77:d4:25:da:d0:9f:ed:d0:94:9d:50:6f:ba:
         38:b9:cf:d9:49:81:d6:23:68:39:38:4d:24:bb:8c:21:e3:6f:
         d5:2f:38:f6:b5:e1:53:79:9d:cb:f9:c8:41:16:9d:34:04:85:
         0a:3c:fb:f5:90:57:a8:ad:6b:8f:c9:1a:c0:e6:52:ad:d4:6f:
         c8:52:3e:be:95:3f:af:40:68:98:d3:99:b4:0f:6a:5f:55:02:
         11:ab:b3:1e:52:5a:70:77:0b:2c:8e:10:1b:00:b9:90:c2:09:
         0a:6f:7a:76:a0:fc:78:97:02:c6:8f:db:3b:63:02:c0:95:a6:
         61:aa:cf:f3:9c:9b:95:da:07:e4:66:4c:de:6d:ae:e5:f7:db:
         61:02:22:e0:a7:eb:8c:e5:b6:4c:44:0e:3d:60:e6:ac:52:1e:
         11:ee:82:41:61:df:96:3b:ed:34:50:20:49:00:77:b0:a9:7d:
         47:6f:4e:41:77:72:70:d5:e1:bf:89:b6:4d:8d:f4:7a:05:15:
         dc:bf:31:8d:3f:f3:d2:1c:08:17:a6:8c:e2:4a:73:04:23:a3:
         be:2c:99:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiWWCaIiYfUl3GbnjKgFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmYwN2NlYWQwNmE0ZjgxMTU0NzYwMGJhYzAyZmFmMGNj
MDg0YzkwHhcNMjQxMTIzMDEwMTA0WhcNMjQxMTI0MDEwMTA0WjAzMTEwLwYDVQQD
Eyg3NGUyY2Y0MTVmMmM0ZWYyMzVmNDdlZTg3N2E3MjNhZTgxOWYxZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3grVv8g8wWC+ENKAWudf8DtHNhXn
43Ee9nhZ9gleTxugDx3icaBfBf4Fa7YiWjeVfXgRkZUqySRmSEpmvxCVJiynPGWH
Rqhe++3BgdmU6EGnf/9/jTb+7O99DBugBSauqr4F94r50Lcs4k5GsHbkGwUZ7O8N
i5fs9hZZXpGQEfevDtNtE/aBbFS5M6/mDMzpLu6iriofomv1qk4mTR5r2J5QoOmZ
kqf0w0h/+Rl7bIwtTpLHPt8tcp69MMdXpS/izmkH5TnzWLAhT2TpkRmfVvZyNnLR
ZxZHHY6Iy6MY9774fhg0vYLAXE4jVIiv0IwpRA+Pv6kQ6DOqLne64TDaqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTiz0FfLE7yNfR+6HenI66Bnx4WMB8GA1UdIwQY
MBaAFC9vB86tBqT4EVR2ALrAL68MwITJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAt
MDQ3Y2JjMzEwY2NiLzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lYWQ2YzQtOWZlMS00ZmVlLTk3NjAtMDQ3Y2JjMzEwY2Ni
LzEvTDI4SHpxMEdwUGdSVkhZQXVzQXZyd3pBaE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSMZGT54
M/Up69QM/gfqC7uvR9kC4UBMTirmi4FzEW2t+QgCfuvL8Dp31CXa0J/t0JSdUG+6
OLnP2UmB1iNoOThNJLuMIeNv1S849rXhU3mdy/nIQRadNASFCjz79ZBXqK1rj8ka
wOZSrdRvyFI+vpU/r0BomNOZtA9qX1UCEauzHlJacHcLLI4QGwC5kMIJCm96dqD8
eJcCxo/bO2MCwJWmYarP85ybldoH5GZM3m2u5ffbYQIi4KfrjOW2TEQOPWDmrFIe
Ee6CQWHfljvtNFAgSQB3sKl9R29OQXdycNXhv4m2TY30egUV3L8xjT/z0hwIF6aM
4kpzBCOjviyZnQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:26 2024 by rpki-client on console-fra.rpki-client.org