Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
File:                     F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json)
Hash identifier:          VXwtSGMY1m8972kX6hk38B6fVJk0qxo3UyRfRquZzsA=
Subject key identifier:   6D:34:16:01:D4:CB:3A:B6:23:06:1E:9D:F8:1D:94:39:A5:6D:CF:FE
Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4
Certificate issuer:       /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
Certificate serial:       019369A17ABCC0DEC094CAFC0B96A1A600A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
Manifest number:          9A
Signing time:             Tue 26 Nov 2024 18:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:10 +0000
Files and hashes:         1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: fRrnazWKg5xr0H7UmQCyOW1VS+jWrMSYRBT834QNRGc=)
                          2: l68uui-ZT9IAy1Nk-pK0EHkR_7s.roa (hash: gQ71nzJQ6Pt0LeMsW+CikhMTHvRB63oKtWhHT1zNxc4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:7a:bc:c0:de:c0:94:ca:fc:0b:96:a1:a6:00:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4
        Validity
            Not Before: Nov 26 18:00:10 2024 GMT
            Not After : Nov 27 18:00:10 2024 GMT
        Subject: CN=6d341601d4cb3ab623061e9df81d9439a56dcffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:f7:39:f9:cf:b9:c7:f6:cf:fb:f4:45:35:
                    8b:6f:64:73:47:c1:b6:7b:7f:90:56:20:03:f9:63:
                    3e:b4:d6:b3:99:68:bb:32:db:8c:60:a1:8d:20:c2:
                    82:cf:c9:9a:fd:22:c4:23:7c:c9:64:8c:f8:3f:a4:
                    ac:52:38:10:fb:c9:03:51:6f:93:8e:3b:1f:5f:c9:
                    a7:05:d2:ec:b7:a9:fb:06:46:fd:0c:b4:7e:3b:e5:
                    5e:3e:7e:7d:34:85:b8:e7:bd:62:38:dd:ae:b9:01:
                    ad:bf:53:af:91:76:ec:5a:e0:a5:e4:a7:9e:89:41:
                    d3:26:24:77:5e:9c:17:0f:07:39:a9:99:5a:f7:64:
                    2e:59:2a:95:10:2a:c9:3c:44:25:66:a1:50:37:c1:
                    1b:a5:d7:57:88:dc:2f:ee:2e:40:8f:b1:bb:89:f9:
                    cb:78:fd:2d:01:dd:af:52:ed:4c:42:e8:84:71:7c:
                    ce:37:f0:3e:e0:a7:2e:f6:68:07:a5:ea:df:12:28:
                    f6:f8:b3:c8:e3:6a:46:9f:9f:40:0b:82:98:51:85:
                    38:0a:8f:68:eb:67:31:be:a6:92:da:08:6f:33:df:
                    c0:e2:21:90:91:04:7d:72:9c:7a:cf:86:d4:58:fb:
                    f8:3e:7a:a9:cf:50:ea:cf:6e:06:ed:ec:6d:78:24:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:16:01:D4:CB:3A:B6:23:06:1E:9D:F8:1D:94:39:A5:6D:CF:FE
            X509v3 Authority Key Identifier:
                keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:82:fd:64:58:17:44:f6:be:31:9f:42:90:71:31:05:4d:26:
         b0:5e:5a:8d:b2:2c:eb:d5:d7:09:53:b9:a1:88:7f:d9:d7:fa:
         51:bf:04:b7:aa:c2:87:4b:fb:85:31:9b:40:a7:b9:e1:c8:b1:
         f8:83:ae:f5:cc:8d:7c:a2:6e:7c:ad:08:b5:86:4c:c5:33:76:
         fd:6b:c4:4f:5a:c6:a1:57:f6:05:08:d7:9b:14:50:d6:d6:f6:
         fb:e2:78:69:e3:a6:13:e7:6b:af:27:a6:8e:bb:c5:da:8b:f4:
         44:2e:ce:6e:0e:7b:cb:fe:35:73:d9:c9:27:a7:ca:91:e8:34:
         de:4c:7c:f2:b3:1d:05:56:9d:28:fb:02:c4:cb:b6:7e:fc:65:
         80:59:cd:19:7a:09:73:6e:11:7e:59:98:98:af:e7:01:a7:11:
         5a:8c:f8:55:d5:ef:dd:c6:1d:4d:a9:6d:3f:05:ea:2c:d6:ca:
         1d:36:1e:54:e7:5e:e8:92:f4:67:06:d2:38:18:80:db:c1:37:
         a3:4b:6e:c1:58:67:4e:de:7d:93:cb:ae:be:81:04:8a:4d:40:
         e0:ab:73:f7:69:d2:f3:14:d6:55:e2:37:39:ab:dc:98:f1:66:
         a0:bd:d0:f9:2c:ed:13:86:8f:e9:ec:9a:1c:25:c3:20:c4:47:
         0b:69:0e:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpoXq8wN7AlMr8C5ahpgChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OWViODdiZGMzMjc5M2RiZmVkMTg0YTZmZmJjMTRlZDE1
ZDMyYTQwHhcNMjQxMTI2MTgwMDEwWhcNMjQxMTI3MTgwMDEwWjAzMTEwLwYDVQQD
Eyg2ZDM0MTYwMWQ0Y2IzYWI2MjMwNjFlOWRmODFkOTQzOWE1NmRjZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNv3OfnPucf2z/v0RTWLb2RzR8G2
e3+QViAD+WM+tNazmWi7MtuMYKGNIMKCz8ma/SLEI3zJZIz4P6SsUjgQ+8kDUW+T
jjsfX8mnBdLst6n7Bkb9DLR+O+VePn59NIW4571iON2uuQGtv1OvkXbsWuCl5Kee
iUHTJiR3XpwXDwc5qZla92QuWSqVECrJPEQlZqFQN8EbpddXiNwv7i5Aj7G7ifnL
eP0tAd2vUu1MQuiEcXzON/A+4Kcu9mgHperfEij2+LPI42pGn59AC4KYUYU4Co9o
62cxvqaS2ghvM9/A4iGQkQR9cpx6z4bUWPv4Pnqpz1Dqz24G7exteCS/RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG00FgHUyzq2IwYenfgdlDmlbc/+MB8GA1UdIwQY
MBaAFBeeuHvcMnk9v+0YSm/7wU7RXTKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUt
ZWYxNTkxYWZhYTg2LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUtZWYxNTkxYWZhYTg2
LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoL9ZFgX
RPa+MZ9CkHExBU0msF5ajbIs69XXCVO5oYh/2df6Ub8Et6rCh0v7hTGbQKe54cix
+IOu9cyNfKJufK0ItYZMxTN2/WvET1rGoVf2BQjXmxRQ1tb2++J4aeOmE+drryem
jrvF2ov0RC7Obg57y/41c9nJJ6fKkeg03kx88rMdBVadKPsCxMu2fvxlgFnNGXoJ
c24RflmYmK/nAacRWoz4VdXv3cYdTaltPwXqLNbKHTYeVOde6JL0ZwbSOBiA28E3
o0tuwVhnTt59k8uuvoEEik1A4Ktz92nS8xTWVeI3OavcmPFmoL3Q+SztE4aP6eya
HCXDIMRHC2kOhA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:57 2024 by rpki-client on console-fra.rpki-client.org