Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
File:                     _nISS20yFGPp8Qvh-0IriSRi6J8.mft (raw, json)
Hash identifier:          qg46V4z39uae3itLNgWojfXJuwfg+1D8FnfPRlNgj2o=
Subject key identifier:   7E:9C:D1:3D:E9:94:29:58:8A:D3:45:D8:B7:B5:CD:68:85:12:51:2B
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Certificate issuer:       /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial:       0191F93478B856C1492C50128E31AB74A27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
Manifest number:          CE
Signing time:             Mon 16 Sep 2024 05:00:51 +0000
Manifest this update:     Mon 16 Sep 2024 05:00:51 +0000
Manifest next update:     Tue 17 Sep 2024 05:00:51 +0000
Files and hashes:         1: _nISS20yFGPp8Qvh-0IriSRi6J8.crl (hash: tDwTuuxnYNq3vBVkCBQAjdAOGBg9OoPeka43lbbit6g=)
                          2: yMjH_QOfr6tNUBoPMxmBeUOAOFc.roa (hash: a5ax7WYN2ubiqCVcM+z9hVFnACJ11XeevU2yYkixyrs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:78:b8:56:c1:49:2c:50:12:8e:31:ab:74:a2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
        Validity
            Not Before: Sep 16 05:00:51 2024 GMT
            Not After : Sep 17 05:00:51 2024 GMT
        Subject: CN=7e9cd13de99429588ad345d8b7b5cd688512512b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:7c:3c:c6:98:62:e5:1d:38:0d:f1:f3:c6:
                    ec:f1:c6:93:f9:e0:21:18:1e:61:3d:e6:4d:ac:1d:
                    82:ef:08:0f:c4:db:04:89:11:83:11:57:3c:04:a5:
                    24:c0:f8:95:d6:e0:ad:81:9f:cd:c0:73:b9:f4:f2:
                    81:ba:56:b9:98:a4:b6:a9:57:70:8f:06:6f:8d:e5:
                    73:e6:b3:0d:c1:6d:c6:3b:e7:6e:6c:e4:75:71:0d:
                    a8:9f:9f:19:3f:88:80:32:fb:36:22:70:e3:29:fc:
                    43:06:91:14:4e:87:73:8a:30:49:b8:e2:8c:a7:41:
                    77:97:76:07:a1:d7:0a:fe:bb:7e:ad:ee:80:e8:27:
                    e8:94:f1:6b:3f:c1:22:59:19:fe:59:b0:a4:29:15:
                    ac:d2:63:d5:f5:09:ee:25:53:dc:a5:ae:ff:cc:a9:
                    6e:67:99:8b:35:c9:e9:09:93:42:33:73:09:55:d0:
                    95:56:7e:c8:4e:fc:79:54:a2:8b:48:07:4d:ea:1c:
                    ea:2c:10:ea:38:8b:0d:ed:dc:90:ff:a4:25:76:6d:
                    3a:ab:43:3b:9f:98:81:a5:d5:e8:c6:78:12:f6:69:
                    9d:3d:bf:c6:4d:7e:26:6c:c1:09:f8:a9:60:d7:00:
                    a7:06:30:94:c0:04:66:3b:b6:95:3d:09:81:64:5b:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:D1:3D:E9:94:29:58:8A:D3:45:D8:B7:B5:CD:68:85:12:51:2B
            X509v3 Authority Key Identifier:
                keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ff:3d:34:9b:61:41:82:5a:c3:1a:50:8c:3c:7f:98:83:e2:
         3d:bd:2f:7d:1e:01:53:96:7c:b8:38:5f:a3:09:66:be:a5:ba:
         5d:f3:54:37:fa:54:2c:12:91:31:ca:4c:cf:2e:46:21:d1:91:
         4c:41:af:2e:d0:a6:ec:b1:a1:9a:24:86:d0:f3:d7:d5:54:57:
         d3:8b:ca:8b:af:83:b3:9b:ea:79:26:d1:92:ec:c5:c6:53:2d:
         2a:9a:34:65:b3:3d:74:51:47:3a:92:1b:3e:6d:3c:c8:8f:8e:
         cb:f6:a7:f0:29:c6:79:c3:bd:34:37:44:1e:89:24:bf:bd:f0:
         a8:11:bf:c6:29:ce:4d:f1:9c:0c:69:66:0f:23:3e:b7:d0:46:
         33:e1:52:33:ec:46:08:2d:4c:f2:15:db:85:8b:a2:96:b6:72:
         d1:45:bb:57:19:a4:03:48:e2:86:a5:23:32:98:ec:bb:29:94:
         4b:f1:19:d6:86:56:64:e2:b1:48:30:49:d1:54:41:f3:8a:8a:
         5e:f9:38:37:9a:64:b0:26:6e:40:0d:7e:8c:15:6c:97:bc:74:
         9a:70:73:1f:73:05:cb:dc:33:dd:a2:34:28:2f:52:91:01:d6:
         7b:17:0c:1f:26:a6:1f:3e:78:5b:d1:ff:7f:07:c4:d0:9f:a9:
         ad:bb:3d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5NHi4VsFJLFASjjGrdKJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzIxMjRiNmQzMjE0NjNlOWYxMGJlMWZiNDIyYjg5MjQ2
MmU4OWYwHhcNMjQwOTE2MDUwMDUxWhcNMjQwOTE3MDUwMDUxWjAzMTEwLwYDVQQD
Eyg3ZTljZDEzZGU5OTQyOTU4OGFkMzQ1ZDhiN2I1Y2Q2ODg1MTI1MTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13x8PMaYYuUdOA3x88bs8caT+eAh
GB5hPeZNrB2C7wgPxNsEiRGDEVc8BKUkwPiV1uCtgZ/NwHO59PKBula5mKS2qVdw
jwZvjeVz5rMNwW3GO+dubOR1cQ2on58ZP4iAMvs2InDjKfxDBpEUTodzijBJuOKM
p0F3l3YHodcK/rt+re6A6CfolPFrP8EiWRn+WbCkKRWs0mPV9QnuJVPcpa7/zKlu
Z5mLNcnpCZNCM3MJVdCVVn7ITvx5VKKLSAdN6hzqLBDqOIsN7dyQ/6Qldm06q0M7
n5iBpdXoxngS9mmdPb/GTX4mbMEJ+Klg1wCnBjCUwARmO7aVPQmBZFu1nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6c0T3plClYitNF2Le1zWiFElErMB8GA1UdIwQY
MBaAFP5yEkttMhRj6fEL4ftCK4kkYuifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYt
N2JiODIwNDBlNWVlLzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kYzk5MDQtMGE1Yy00MTZiLTgwZWYtN2JiODIwNDBlNWVl
LzEvX25JU1MyMHlGR1BwOFF2aC0wSXJpU1JpNko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtf89NJth
QYJawxpQjDx/mIPiPb0vfR4BU5Z8uDhfowlmvqW6XfNUN/pULBKRMcpMzy5GIdGR
TEGvLtCm7LGhmiSG0PPX1VRX04vKi6+Ds5vqeSbRkuzFxlMtKpo0ZbM9dFFHOpIb
Pm08yI+Oy/an8CnGecO9NDdEHokkv73wqBG/xinOTfGcDGlmDyM+t9BGM+FSM+xG
CC1M8hXbhYuilrZy0UW7VxmkA0jihqUjMpjsuymUS/EZ1oZWZOKxSDBJ0VRB84qK
Xvk4N5pksCZuQA1+jBVsl7x0mnBzH3MFy9wz3aI0KC9SkQHWexcMHyamHz54W9H/
fwfE0J+prbs9GA==
-----END CERTIFICATE-----
Generated at Mon Sep 16 16:21:18 2024 by rpki-client on console-fra.rpki-client.org