Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          bTqit79YFrCuh0N+iRoIU05paKUTspNVeZoQ/TLs7tk=
Subject key identifier:   C8:21:68:CD:C4:C5:44:4F:DE:41:F7:0C:76:75:7E:66:30:A8:AC:B6
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       01936557874DB78FB6893A61A215F8CA5F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          0A04
Signing time:             Mon 25 Nov 2024 22:00:55 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:55 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:55 +0000
Files and hashes:         1: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: nfcOR/JYMx5MvaJpKBWhZyDYQ3xuZsArbUHw7EMTczU=)
                          2: qY_KiWcFkaoGBm31kUgk-q_fcZM.roa (hash: yFCaQr8YTorqEavE/RjwGh6MLMDH5Wo3ZXMISFtQrnQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:87:4d:b7:8f:b6:89:3a:61:a2:15:f8:ca:5f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Nov 25 22:00:55 2024 GMT
            Not After : Nov 26 22:00:55 2024 GMT
        Subject: CN=c82168cdc4c5444fde41f70c76757e6630a8acb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:06:93:df:b2:ed:cd:f6:f0:b6:48:25:e0:
                    a0:1a:b6:71:d7:a3:6b:ac:c9:80:53:90:f3:f8:43:
                    77:35:31:12:ff:10:ce:d5:b4:42:fc:cb:51:9f:17:
                    9d:f6:ec:3d:c2:74:b2:fe:dc:33:1a:3e:2b:49:c8:
                    a7:c9:ea:6e:9a:e8:ed:44:67:de:5e:03:bf:55:b2:
                    61:7b:7b:38:7d:bc:c8:d6:32:24:dc:1f:fa:fc:9d:
                    a0:72:83:e1:66:46:67:4c:1d:01:00:5e:74:a6:43:
                    dc:af:98:9b:99:a3:51:bb:0d:91:ef:bd:43:b5:6a:
                    6e:a9:a8:e1:3d:b2:bd:61:5c:0b:7b:56:68:3a:f4:
                    7e:cd:63:7d:37:06:95:e1:f0:64:b8:32:18:bf:d5:
                    dd:f5:93:0d:2a:3d:c5:48:10:36:49:00:8e:40:9d:
                    d2:3d:70:0c:4f:db:c9:81:6d:70:ea:5c:1e:62:ea:
                    aa:df:01:c1:57:33:45:89:7b:de:5d:c6:e3:b2:da:
                    a1:e7:b0:f0:27:dd:0c:11:7b:bc:7a:dd:39:0d:5d:
                    8e:3f:16:37:22:6f:ea:2b:d9:c5:d8:93:42:8e:48:
                    5f:91:9b:b2:61:26:76:1b:17:20:75:65:29:9c:19:
                    3f:a9:ec:99:c6:78:95:82:70:04:b9:fb:e2:ad:37:
                    d9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:21:68:CD:C4:C5:44:4F:DE:41:F7:0C:76:75:7E:66:30:A8:AC:B6
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:23:54:5e:85:8d:66:62:d4:f1:b2:d0:9a:ab:f9:cf:8a:
         aa:99:62:2a:b6:36:c7:f8:13:16:3f:90:eb:c3:a1:94:6e:c5:
         8b:a1:10:e1:a2:41:da:05:79:2d:dd:ea:c5:db:21:d5:0e:2c:
         4b:b2:a3:1e:ff:b2:36:19:a1:7a:5c:d8:db:93:fb:42:57:16:
         fe:d1:7a:31:d6:8a:08:7a:a1:95:f6:d9:b4:90:ba:80:33:4f:
         b7:59:09:96:bb:70:89:06:36:b4:99:90:94:de:8c:b5:c9:3e:
         30:50:b2:dd:2b:39:9e:f5:c2:88:53:fa:b9:b8:19:a8:f5:99:
         d2:02:3f:04:b2:41:e9:48:be:21:13:f7:bf:6e:3e:5a:f3:75:
         4b:17:a7:e2:29:e5:fd:29:d6:dc:fa:e3:9f:a2:c1:0e:c7:61:
         ea:1e:c7:1c:49:0b:f2:3c:2e:d3:7a:93:02:d0:8c:ea:27:c8:
         27:57:30:a5:47:be:62:9c:2b:5d:f9:12:d1:40:f3:bc:26:15:
         27:d0:87:5c:04:1e:6d:27:32:55:ff:8e:8b:1a:68:4d:60:a0:
         05:dd:ac:d7:f9:f4:a1:03:a5:c3:7f:59:59:23:32:63:ea:90:
         3b:48:56:f6:a2:e0:df:b3:fe:df:5c:c7:70:10:39:b6:38:fa:
         35:ee:2e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlV4dNt4+2iTphohX4yl8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1
NmRjMzYwHhcNMjQxMTI1MjIwMDU1WhcNMjQxMTI2MjIwMDU1WjAzMTEwLwYDVQQD
EyhjODIxNjhjZGM0YzU0NDRmZGU0MWY3MGM3Njc1N2U2NjMwYThhY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkUGk9+y7c328LZIJeCgGrZx16Nr
rMmAU5Dz+EN3NTES/xDO1bRC/MtRnxed9uw9wnSy/twzGj4rScinyepumujtRGfe
XgO/VbJhe3s4fbzI1jIk3B/6/J2gcoPhZkZnTB0BAF50pkPcr5ibmaNRuw2R771D
tWpuqajhPbK9YVwLe1ZoOvR+zWN9NwaV4fBkuDIYv9Xd9ZMNKj3FSBA2SQCOQJ3S
PXAMT9vJgW1w6lweYuqq3wHBVzNFiXveXcbjstqh57DwJ90MEXu8et05DV2OPxY3
Im/qK9nF2JNCjkhfkZuyYSZ2GxcgdWUpnBk/qeyZxniVgnAEufvirTfZowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMghaM3ExURP3kH3DHZ1fmYwqKy2MB8GA1UdIwQY
MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt
MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5
LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7QjVF6F
jWZi1PGy0Jqr+c+KqpliKrY2x/gTFj+Q68OhlG7Fi6EQ4aJB2gV5Ld3qxdsh1Q4s
S7KjHv+yNhmhelzY25P7QlcW/tF6MdaKCHqhlfbZtJC6gDNPt1kJlrtwiQY2tJmQ
lN6Mtck+MFCy3Ss5nvXCiFP6ubgZqPWZ0gI/BLJB6Ui+IRP3v24+WvN1Sxen4inl
/SnW3Prjn6LBDsdh6h7HHEkL8jwu03qTAtCM6ifIJ1cwpUe+YpwrXfkS0UDzvCYV
J9CHXAQebScyVf+OixpoTWCgBd2s1/n0oQOlw39ZWSMyY+qQO0hW9qLg37P+31zH
cBA5tjj6Ne4ubg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:51:34 2024 by rpki-client on console-fra.rpki-client.org