Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          liskuOlLNKiYNi2Y6KOfD3slF8a9eQb1v2Wqgkl/oxg=
Subject key identifier:   B4:3F:B3:3F:11:28:FD:95:FC:F0:32:D0:7F:18:B9:A4:57:81:12:90
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       01940721DDDE702037AB4024150E38EE57A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0911
Signing time:             Fri 27 Dec 2024 08:00:47 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:47 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:47 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: Q+8/Y5G1jBeDGaAdoIRvlPi3xlYuWCFFAAYoxCjXPZc=)
                          2: cmOulCQwXeEwugEqHcG49N-vCs8.roa (hash: fhDelwHzpvCe4fW+/zSJE8UtlAXUg7HBji9Q2UUvFzU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:dd:de:70:20:37:ab:40:24:15:0e:38:ee:57:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Dec 27 08:00:47 2024 GMT
            Not After : Dec 28 08:00:47 2024 GMT
        Subject: CN=b43fb33f1128fd95fcf032d07f18b9a457811290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:67:83:b5:dd:af:4c:f0:27:0d:bb:da:58:35:
                    f1:24:ac:b7:64:c8:43:73:c8:bf:ba:d7:d5:02:df:
                    61:0e:99:5a:8e:04:25:ed:db:76:0c:50:de:7b:a4:
                    fc:96:de:bc:86:f4:0e:d1:f8:ac:9a:e3:0a:37:54:
                    55:51:be:bd:bc:19:ec:71:0d:aa:7c:20:68:25:a2:
                    e7:e5:42:02:cd:ac:ff:39:f5:7b:d9:33:d3:b8:c0:
                    ec:7f:42:27:cb:6a:d3:54:8a:17:11:ae:f4:fd:53:
                    79:9c:c8:cc:92:3c:5f:ed:23:67:b3:b7:07:da:3c:
                    75:31:1a:7b:7f:af:97:76:39:ea:4e:ce:76:39:b7:
                    9d:41:d0:12:5c:1d:6a:47:84:46:3f:3a:90:4b:f4:
                    78:d4:8e:b1:c2:9e:d6:4c:87:5b:0c:52:fd:f9:b7:
                    49:b0:53:ba:e3:79:72:3c:c3:62:2d:18:99:48:c4:
                    e9:5f:2f:78:5f:4b:6d:cc:ad:38:c0:db:00:dc:79:
                    cc:b7:b3:cd:e0:2c:fa:fa:12:66:f5:cc:ae:0c:32:
                    6c:c7:c2:6f:25:6a:89:0c:12:cc:e6:ca:ea:22:f1:
                    09:4c:37:fd:26:45:b5:74:4b:e4:bf:30:e2:4c:51:
                    63:f6:38:16:8b:f8:ae:ef:01:eb:53:7c:c0:dd:8c:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3F:B3:3F:11:28:FD:95:FC:F0:32:D0:7F:18:B9:A4:57:81:12:90
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:64:88:85:7a:d8:ab:47:07:58:d2:5f:ff:8b:07:89:25:
         03:98:aa:8d:13:4e:d3:fe:5b:4e:88:01:5a:d5:1c:e4:14:04:
         97:de:51:cd:a6:f6:f4:47:35:a8:d9:b4:36:1c:7f:77:b0:eb:
         1d:50:81:f1:96:84:a0:6b:eb:bc:d1:ef:f3:55:a9:5a:8f:20:
         df:d6:2d:b6:a8:f3:af:df:d8:b8:d2:5a:c8:47:2d:73:47:c9:
         05:a0:f5:5f:60:d4:e4:d9:30:9c:8c:9c:bb:60:47:1e:fe:f8:
         f7:84:8d:e6:e5:28:36:4a:f8:db:ce:c0:ac:92:c6:04:cb:49:
         58:74:a8:89:cb:89:3a:9b:a3:fc:7f:dc:ab:a6:02:e3:5f:34:
         4a:ba:c1:81:2e:d4:8d:dc:bf:55:93:61:6a:c0:cb:88:8e:1c:
         28:b7:67:9b:87:db:99:2e:3b:17:c1:40:34:41:18:37:56:ef:
         32:59:cb:7f:2c:a0:55:3f:04:07:c1:ba:de:d6:7b:ea:d5:f5:
         ec:45:90:55:6b:bf:21:8d:72:76:10:07:32:a2:d1:65:f0:5d:
         e6:00:ed:64:5b:b8:9d:4b:c6:6c:7d:4b:83:35:58:e5:e4:9b:
         8a:60:47:d9:05:64:9c:87:28:a3:5e:1b:cb:28:02:2b:d1:a1:
         3b:e9:f7:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHId3ecCA3q0AkFQ447lehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk
MzFiMGQwHhcNMjQxMjI3MDgwMDQ3WhcNMjQxMjI4MDgwMDQ3WjAzMTEwLwYDVQQD
EyhiNDNmYjMzZjExMjhmZDk1ZmNmMDMyZDA3ZjE4YjlhNDU3ODExMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WeDtd2vTPAnDbvaWDXxJKy3ZMhD
c8i/utfVAt9hDplajgQl7dt2DFDee6T8lt68hvQO0fismuMKN1RVUb69vBnscQ2q
fCBoJaLn5UICzaz/OfV72TPTuMDsf0Iny2rTVIoXEa70/VN5nMjMkjxf7SNns7cH
2jx1MRp7f6+XdjnqTs52ObedQdASXB1qR4RGPzqQS/R41I6xwp7WTIdbDFL9+bdJ
sFO643lyPMNiLRiZSMTpXy94X0ttzK04wNsA3HnMt7PN4Cz6+hJm9cyuDDJsx8Jv
JWqJDBLM5srqIvEJTDf9JkW1dEvkvzDiTFFj9jgWi/iu7wHrU3zA3YwcDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ/sz8RKP2V/PAy0H8YuaRXgRKQMB8GA1UdIwQY
MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt
MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk
LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrBkiIV6
2KtHB1jSX/+LB4klA5iqjRNO0/5bTogBWtUc5BQEl95Rzab29Ec1qNm0Nhx/d7Dr
HVCB8ZaEoGvrvNHv81WpWo8g39Yttqjzr9/YuNJayEctc0fJBaD1X2DU5NkwnIyc
u2BHHv7494SN5uUoNkr4287ArJLGBMtJWHSoicuJOpuj/H/cq6YC4180SrrBgS7U
jdy/VZNhasDLiI4cKLdnm4fbmS47F8FANEEYN1bvMlnLfyygVT8EB8G63tZ76tX1
7EWQVWu/IY1ydhAHMqLRZfBd5gDtZFu4nUvGbH1LgzVY5eSbimBH2QVknIcoo14b
yygCK9GhO+n3rA==
-----END CERTIFICATE-----
Generated at Fri Dec 27 09:59:59 2024 by rpki-client on console-ams.rpki-client.org