Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
File:                     6CLYReFTmSp46PRFIyZNJhSxe50.mft (raw, json)
Hash identifier:          OsCREkYbt+RgSGuT0CqdjDSV/YBFPpoMhVjX2C6C4tU=
Subject key identifier:   B9:56:A6:FA:54:4E:C6:5A:B2:71:9E:D0:44:07:AF:18:EA:AB:13:07
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Certificate issuer:       /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial:       01935764F7A54B9E55D5DB58D16DB7ECBAAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
Manifest number:          0305
Signing time:             Sat 23 Nov 2024 05:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:55 +0000
Files and hashes:         1: 6CLYReFTmSp46PRFIyZNJhSxe50.crl (hash: VwrAXD47CTAKyXwXUbufAh/5QrUhc5uBPdCvRR3cFqo=)
                          2: VxVb4J3bu8oOJ0VLy9-RvTvgJQQ.roa (hash: HUYrdKlU8D10XrUOAwv+xK3k9UaCvV6zD11NLNX8puQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:f7:a5:4b:9e:55:d5:db:58:d1:6d:b7:ec:ba:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
        Validity
            Not Before: Nov 23 05:00:55 2024 GMT
            Not After : Nov 24 05:00:55 2024 GMT
        Subject: CN=b956a6fa544ec65ab2719ed04407af18eaab1307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:29:0e:96:2f:6e:5b:2c:8d:a4:2a:27:6b:
                    1e:fb:51:04:ed:fa:64:80:f3:a3:88:5e:5c:db:65:
                    36:2e:4d:43:64:f4:61:6e:45:d1:a7:90:dd:35:32:
                    7f:1f:d2:05:b8:66:59:3d:eb:c3:1b:09:5c:93:07:
                    91:95:35:cb:55:c3:c2:60:e3:80:55:81:9b:3e:a4:
                    57:ec:cc:e6:64:aa:a3:7d:35:aa:e2:8c:94:f3:e6:
                    c9:a1:90:81:22:36:da:6a:96:a1:ba:7c:42:63:7b:
                    f6:ff:fc:a7:d5:31:0f:7a:13:a0:e4:a6:af:e4:4b:
                    39:82:6a:b1:1b:9f:fe:31:86:ff:9d:64:6d:1a:6c:
                    3a:5d:96:13:a8:6f:fb:ec:39:56:bd:e1:8b:da:86:
                    d3:57:52:ff:c2:6f:ca:9c:00:14:8f:b7:d5:b9:ed:
                    44:0f:74:e3:8b:e8:f9:bd:a5:74:e2:a7:81:ae:38:
                    6b:3a:12:23:8f:b4:a7:84:04:38:0e:16:e0:b2:ed:
                    ef:c6:be:0f:4a:f1:4e:7e:9e:1f:2c:37:0a:79:9d:
                    7e:e0:3d:52:f2:92:8c:17:0a:b5:b2:6a:9f:80:64:
                    fa:20:ab:29:91:74:31:73:4d:67:48:70:f1:a8:f3:
                    27:f6:69:91:71:59:52:e1:ea:32:5b:84:b9:a5:77:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:56:A6:FA:54:4E:C6:5A:B2:71:9E:D0:44:07:AF:18:EA:AB:13:07
            X509v3 Authority Key Identifier:
                keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ac:a6:fa:c4:1e:8b:f5:e9:a5:40:72:96:e1:fa:7a:4a:bd:
         02:00:e7:62:e7:75:20:cc:b0:f7:ec:22:af:af:64:b6:bc:9d:
         4d:03:ae:79:3f:e2:2d:40:b9:50:59:7b:0b:c3:6b:49:e0:09:
         a9:e7:1b:02:a9:e8:d0:cc:04:9f:08:24:16:dc:22:44:77:3d:
         f7:51:13:63:61:a9:c5:72:c4:0e:d4:94:df:00:5b:85:ac:2f:
         83:3b:dd:76:01:7b:f0:d8:cf:ae:92:92:6f:c7:5f:b0:77:14:
         10:13:b3:83:55:40:28:8a:31:57:68:71:46:fa:df:ac:25:e2:
         a0:bf:b2:70:d2:ef:d4:e9:89:88:d5:3c:ec:15:32:d9:20:f6:
         55:b2:d9:bf:32:18:1f:90:22:93:0e:a3:a8:a0:33:29:61:fa:
         9a:17:36:8c:55:5b:78:77:1f:a1:c2:7d:2c:0c:19:35:1a:9a:
         82:bb:73:04:d0:30:32:5f:f6:6e:39:a7:9b:62:3e:ba:ef:31:
         60:28:52:a1:b4:03:80:70:83:47:c5:c9:9d:80:12:0f:a5:2e:
         31:0b:ad:5c:e7:35:28:7b:db:ad:13:71:1f:d3:9f:ed:96:cf:
         e7:35:f4:e6:ca:28:87:71:42:c4:c7:1e:45:bf:c1:b9:02:8b:
         ca:45:72:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZPelS55V1dtY0W237LqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MjJkODQ1ZTE1Mzk5MmE3OGU4ZjQ0NTIzMjY0ZDI2MTRi
MTdiOWQwHhcNMjQxMTIzMDUwMDU1WhcNMjQxMTI0MDUwMDU1WjAzMTEwLwYDVQQD
EyhiOTU2YTZmYTU0NGVjNjVhYjI3MTllZDA0NDA3YWYxOGVhYWIxMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf8pDpYvblssjaQqJ2se+1EE7fpk
gPOjiF5c22U2Lk1DZPRhbkXRp5DdNTJ/H9IFuGZZPevDGwlckweRlTXLVcPCYOOA
VYGbPqRX7MzmZKqjfTWq4oyU8+bJoZCBIjbaapahunxCY3v2//yn1TEPehOg5Kav
5Es5gmqxG5/+MYb/nWRtGmw6XZYTqG/77DlWveGL2obTV1L/wm/KnAAUj7fVue1E
D3Tji+j5vaV04qeBrjhrOhIjj7SnhAQ4Dhbgsu3vxr4PSvFOfp4fLDcKeZ1+4D1S
8pKMFwq1smqfgGT6IKspkXQxc01nSHDxqPMn9mmRcVlS4eoyW4S5pXcnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlWpvpUTsZasnGe0EQHrxjqqxMHMB8GA1UdIwQY
MBaAFOgi2EXhU5kqeOj0RSMmTSYUsXudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDIt
MWQ0MjQ2ZDdmMTU1LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDItMWQ0MjQ2ZDdmMTU1
LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6ym+sQe
i/XppUByluH6ekq9AgDnYud1IMyw9+wir69ktrydTQOueT/iLUC5UFl7C8NrSeAJ
qecbAqno0MwEnwgkFtwiRHc991ETY2GpxXLEDtSU3wBbhawvgzvddgF78NjPrpKS
b8dfsHcUEBOzg1VAKIoxV2hxRvrfrCXioL+ycNLv1OmJiNU87BUy2SD2VbLZvzIY
H5Aikw6jqKAzKWH6mhc2jFVbeHcfocJ9LAwZNRqagrtzBNAwMl/2bjmnm2I+uu8x
YChSobQDgHCDR8XJnYASD6UuMQutXOc1KHvbrRNxH9Of7ZbP5zX05sooh3FCxMce
Rb/BuQKLykVywA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:24 2024 by rpki-client on console-fra.rpki-client.org