Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          rU39csHb5cEWxXRndlrV67y4LvmYXXVh8c6QsvZLdpM=
Subject key identifier:   34:B1:67:92:CE:1C:59:65:F1:62:05:ED:46:DF:04:90:8B:3F:0D:82
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01935688DADF38395481AE50D7EBC15C28D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          03C4
Signing time:             Sat 23 Nov 2024 01:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:29 +0000
Files and hashes:         1: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: CEZ8rePUwDh5I6AXLzkc6G7WkxGaHpZPEtp18lxmOMU=)
                          2: pZwdkISjGUctI5b4de4Ze1s3Wqg.roa (hash: 0fBmF+2MAHL8V6Mu+kvBbbP/Ol8SZgDFbQqJQBS0748=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:da:df:38:39:54:81:ae:50:d7:eb:c1:5c:28:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Nov 23 01:00:29 2024 GMT
            Not After : Nov 24 01:00:29 2024 GMT
        Subject: CN=34b16792ce1c5965f16205ed46df04908b3f0d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:f6:18:b2:ba:18:bc:43:5f:67:d9:7a:d9:
                    0a:f7:0f:af:0a:4a:1d:cf:21:10:ad:2a:b2:e3:85:
                    6b:bc:bf:f1:1d:9d:fe:2d:0c:5e:8a:e8:42:5a:af:
                    f7:4b:ff:23:33:9c:f1:98:84:48:c8:26:71:e2:c8:
                    5b:6d:b8:b6:2f:7e:c5:e7:3f:bb:42:8a:c9:de:c3:
                    39:98:94:92:d4:33:01:4d:59:42:d5:a2:4c:dd:30:
                    92:b9:f9:4d:e4:c6:3c:bf:9a:60:d8:8a:c2:b7:8a:
                    3b:a0:32:8f:a3:b8:38:b3:ef:e7:62:b4:8c:21:8c:
                    d1:69:c1:83:c6:1a:24:f2:80:a4:a0:de:62:5c:70:
                    b1:85:d1:d5:66:5e:99:15:86:b2:bb:74:0d:d2:9e:
                    84:67:6a:34:60:30:1f:59:18:57:f1:c7:59:24:c8:
                    fc:94:de:28:ba:e2:48:87:4d:90:29:4d:3a:af:cc:
                    71:6d:dc:a5:a2:61:fb:53:37:17:d0:0c:84:9d:13:
                    b0:8c:02:42:53:54:d3:06:6f:96:cc:5e:5d:15:4a:
                    89:c5:b6:2b:d9:30:3d:a8:a7:05:52:1a:a5:f5:60:
                    ef:2d:4c:8a:bf:cb:56:66:9e:52:f4:91:4f:37:99:
                    ec:7c:16:a4:1a:3d:c9:dc:25:e8:d4:86:a5:5d:af:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B1:67:92:CE:1C:59:65:F1:62:05:ED:46:DF:04:90:8B:3F:0D:82
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:27:13:74:d0:21:28:11:07:31:74:ed:55:19:44:01:32:23:
         e1:17:42:22:2d:81:03:4a:c7:aa:11:eb:68:8e:34:ff:29:96:
         f2:e9:24:9a:60:e0:88:8e:df:c4:4a:0a:1d:f1:b0:28:85:e7:
         bc:39:94:c0:42:2f:4d:02:91:dd:cc:9f:03:e1:e5:47:37:d1:
         79:88:00:2d:5b:ee:19:8d:1b:78:f3:b3:39:74:9d:75:8c:24:
         8c:b9:01:0c:f7:40:dd:d6:35:14:3e:43:50:46:12:1f:68:16:
         96:96:67:ad:a2:5b:1b:7d:70:06:e6:5a:26:aa:a8:f0:6e:bd:
         d3:56:85:cd:71:29:22:0c:74:85:87:3e:ef:2e:9a:91:24:4f:
         a0:d8:2a:36:d9:0e:d2:dc:6e:93:ea:4f:98:41:b2:27:3c:84:
         30:51:41:05:c3:ce:7f:9a:3f:73:32:04:32:ed:da:5b:47:aa:
         43:1f:12:04:6b:8e:4d:1f:c2:e3:2b:cc:fa:dd:7d:53:a2:9b:
         c2:c6:ca:6a:38:c2:cd:38:04:9e:e8:78:42:a4:51:aa:2a:ab:
         ed:e0:02:64:8d:ac:aa:7f:c7:c1:dc:e1:87:dd:d5:ca:e4:70:
         7b:7f:8f:8b:82:50:76:65:21:b1:76:bd:a2:90:d9:d4:5c:b0:
         b1:82:e2:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiNrfODlUga5Q1+vBXCjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx
OGZkMDAwHhcNMjQxMTIzMDEwMDI5WhcNMjQxMTI0MDEwMDI5WjAzMTEwLwYDVQQD
EygzNGIxNjc5MmNlMWM1OTY1ZjE2MjA1ZWQ0NmRmMDQ5MDhiM2YwZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYf2GLK6GLxDX2fZetkK9w+vCkod
zyEQrSqy44VrvL/xHZ3+LQxeiuhCWq/3S/8jM5zxmIRIyCZx4shbbbi2L37F5z+7
QorJ3sM5mJSS1DMBTVlC1aJM3TCSuflN5MY8v5pg2IrCt4o7oDKPo7g4s+/nYrSM
IYzRacGDxhok8oCkoN5iXHCxhdHVZl6ZFYayu3QN0p6EZ2o0YDAfWRhX8cdZJMj8
lN4ouuJIh02QKU06r8xxbdylomH7UzcX0AyEnROwjAJCU1TTBm+WzF5dFUqJxbYr
2TA9qKcFUhql9WDvLUyKv8tWZp5S9JFPN5nsfBakGj3J3CXo1IalXa/d2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSxZ5LOHFll8WIF7UbfBJCLPw2CMB8GA1UdIwQY
MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct
Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh
LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbycTdNAh
KBEHMXTtVRlEATIj4RdCIi2BA0rHqhHraI40/ymW8ukkmmDgiI7fxEoKHfGwKIXn
vDmUwEIvTQKR3cyfA+HlRzfReYgALVvuGY0bePOzOXSddYwkjLkBDPdA3dY1FD5D
UEYSH2gWlpZnraJbG31wBuZaJqqo8G6901aFzXEpIgx0hYc+7y6akSRPoNgqNtkO
0txuk+pPmEGyJzyEMFFBBcPOf5o/czIEMu3aW0eqQx8SBGuOTR/C4yvM+t19U6Kb
wsbKajjCzTgEnuh4QqRRqiqr7eACZI2sqn/Hwdzhh93VyuRwe3+Pi4JQdmUhsXa9
opDZ1FywsYLiOg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:36 2024 by rpki-client on console-fra.rpki-client.org