Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File:                     V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier:          R9DrO07Wam11FesK47/j4ZIlinowciYRg95kFjg24WQ=
Subject key identifier:   90:2A:6C:D1:16:FF:00:33:68:6B:50:87:2C:60:E2:C3:A2:0B:CC:8B
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer:       /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial:       01936A46BF40B3E69591C9D8A337AE921C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number:          03A7
Signing time:             Tue 26 Nov 2024 21:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:41 +0000
Files and hashes:         1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: ju0LZblEZ9oe8uNCzFRyEWSyt6E5dhnQKSnXWascMNg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:bf:40:b3:e6:95:91:c9:d8:a3:37:ae:92:1c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
        Validity
            Not Before: Nov 26 21:00:41 2024 GMT
            Not After : Nov 27 21:00:41 2024 GMT
        Subject: CN=902a6cd116ff0033686b50872c60e2c3a20bcc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:64:10:c9:a0:89:35:fa:8a:f0:5e:fd:c3:
                    6b:d7:63:74:00:28:0d:80:df:d8:53:d5:f0:1b:08:
                    5f:2d:72:1f:b8:05:9c:90:d2:ea:83:a4:8d:b9:b9:
                    57:f9:24:eb:0a:5a:4a:66:e8:74:70:64:0a:23:43:
                    56:ad:e6:54:6b:cb:a0:48:b0:e7:dc:c4:b6:e0:d3:
                    94:b6:0d:67:7a:e9:75:0b:da:5f:12:73:0e:f8:c5:
                    b9:71:ad:8c:0f:87:aa:ac:3a:6c:ec:44:a2:dc:ed:
                    73:fd:de:1e:c4:a3:db:ff:a0:90:62:56:c0:8b:15:
                    2a:91:63:42:b8:38:35:61:57:de:85:d9:85:2d:a0:
                    2a:13:ee:94:16:04:82:1b:75:98:31:55:58:25:3c:
                    9e:4e:7e:6b:07:a6:7e:bf:b2:1a:aa:36:49:dd:62:
                    f7:16:b3:dc:68:6e:03:17:c6:16:ad:d4:c6:90:28:
                    7a:8b:da:1b:7c:bf:e8:dc:7a:0b:ff:d7:75:83:a8:
                    41:ce:d5:e5:c3:ca:72:11:00:be:3a:20:85:14:ad:
                    25:48:3d:e7:12:f5:e9:4e:a6:70:15:87:76:b8:47:
                    9a:7c:5b:76:ff:57:1b:42:22:e2:49:a7:35:cf:49:
                    12:cc:5b:c3:9f:b9:f1:1a:99:8d:f8:e4:ea:ed:94:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:6C:D1:16:FF:00:33:68:6B:50:87:2C:60:E2:C3:A2:0B:CC:8B
            X509v3 Authority Key Identifier:
                keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:c7:6c:6a:c0:65:38:68:2c:b7:06:ae:ab:f8:25:74:30:
         0b:d2:a1:a4:50:2d:d5:2d:a8:fd:c4:49:4d:ec:50:51:e9:14:
         10:8a:31:6f:f9:d3:cc:22:63:46:c0:d0:1b:d5:e2:91:4c:46:
         fb:32:32:c6:47:28:01:fe:79:ad:73:fc:77:9b:b9:a3:87:72:
         c6:43:d6:ac:50:65:31:18:26:9b:c8:57:2f:56:6b:93:95:6f:
         67:c0:84:82:36:2a:a8:ed:09:5d:81:42:63:bb:d4:0a:5b:a2:
         48:d0:44:4a:a3:8d:34:98:ef:9d:bc:8d:b0:8e:53:17:44:b0:
         d4:a0:ce:8f:18:8a:04:9e:3b:89:9d:98:57:fb:b5:09:18:bb:
         75:b4:42:03:48:01:f6:68:75:76:25:31:b5:27:f3:8f:75:82:
         b3:7b:72:b8:0d:75:b8:e3:03:b7:5e:f6:09:fa:11:fc:a4:b2:
         95:96:af:f6:58:35:b0:8f:a7:0f:a9:64:b8:5a:c3:23:de:81:
         49:5f:e7:4e:44:e5:9a:cc:28:fa:14:68:78:2b:b7:33:62:58:
         29:94:29:5f:a6:ef:1c:9b:c9:4a:1e:3f:7f:23:74:0f:cd:2c:
         49:23:79:30:0d:87:73:da:d0:7d:f3:b2:2b:bb:61:24:ab:5c:
         ee:96:13:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRr9As+aVkcnYozeukhxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzM1YmYyMGM3ZTQzMzEyYzJmMDhkZGVjN2E2ZGU4MTBk
ZGYzZTUwHhcNMjQxMTI2MjEwMDQxWhcNMjQxMTI3MjEwMDQxWjAzMTEwLwYDVQQD
Eyg5MDJhNmNkMTE2ZmYwMDMzNjg2YjUwODcyYzYwZTJjM2EyMGJjYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyalkEMmgiTX6ivBe/cNr12N0ACgN
gN/YU9XwGwhfLXIfuAWckNLqg6SNublX+STrClpKZuh0cGQKI0NWreZUa8ugSLDn
3MS24NOUtg1neul1C9pfEnMO+MW5ca2MD4eqrDps7ESi3O1z/d4exKPb/6CQYlbA
ixUqkWNCuDg1YVfehdmFLaAqE+6UFgSCG3WYMVVYJTyeTn5rB6Z+v7IaqjZJ3WL3
FrPcaG4DF8YWrdTGkCh6i9obfL/o3HoL/9d1g6hBztXlw8pyEQC+OiCFFK0lSD3n
EvXpTqZwFYd2uEeafFt2/1cbQiLiSac1z0kSzFvDn7nxGpmN+OTq7ZS2hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAqbNEW/wAzaGtQhyxg4sOiC8yLMB8GA1UdIwQY
MBaAFFfDW/IMfkMxLC8I3ex6begQ3fPlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhOYjhneC1RekVzTHdqZDdIcHQ2QkRkOC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hM2ZjNWYtNzM3OC00ZTJmLWExNTIt
ODEyOGIyMTNhNDcxLzEvVjhOYjhneC1RekVzTHdqZDdIcHQ2QkRkOC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hM2ZjNWYtNzM3OC00ZTJmLWExNTItODEyOGIyMTNhNDcx
LzEvVjhOYjhneC1RekVzTHdqZDdIcHQ2QkRkOC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhc/HbGrA
ZThoLLcGrqv4JXQwC9KhpFAt1S2o/cRJTexQUekUEIoxb/nTzCJjRsDQG9XikUxG
+zIyxkcoAf55rXP8d5u5o4dyxkPWrFBlMRgmm8hXL1Zrk5VvZ8CEgjYqqO0JXYFC
Y7vUCluiSNBESqONNJjvnbyNsI5TF0Sw1KDOjxiKBJ47iZ2YV/u1CRi7dbRCA0gB
9mh1diUxtSfzj3WCs3tyuA11uOMDt172CfoR/KSylZav9lg1sI+nD6lkuFrDI96B
SV/nTkTlmswo+hRoeCu3M2JYKZQpX6bvHJvJSh4/fyN0D80sSSN5MA2Hc9rQffOy
K7thJKtc7pYTFQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:54 2024 by rpki-client on console-fra.rpki-client.org