Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File:                     nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier:          72ucWpB2qoMxPwaGzccnAVR2udiYEcgCvrHUkdHPQzA=
Subject key identifier:   AF:A4:73:E3:93:EF:FA:BF:F6:57:BC:59:5A:81:A5:DB:11:F2:F3:EF
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer:       /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial:       019359532DC4F33D5A662B94DCAEF38E7752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number:          1304
Signing time:             Sat 23 Nov 2024 14:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:43 +0000
Files and hashes:         1: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: nqIh+nusceJofTk7+tDeF0wwngkq182xplzAIC/9s+A=)
                          2: uzyYi33mvfWZ6v5pYk4Uaz54rIc.roa (hash: MetcWPr/T5uelctwyuNHR7ICegUrXzGOkBcYMnSt5nQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:2d:c4:f3:3d:5a:66:2b:94:dc:ae:f3:8e:77:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
        Validity
            Not Before: Nov 23 14:00:43 2024 GMT
            Not After : Nov 24 14:00:43 2024 GMT
        Subject: CN=afa473e393effabff657bc595a81a5db11f2f3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:aa:cf:e2:90:c6:73:4a:5e:80:b4:0d:8d:
                    68:31:03:3c:c4:f3:78:a6:a3:54:ac:b2:d1:c8:13:
                    31:61:8e:ac:d4:46:2c:c9:74:56:7c:43:e4:d5:9c:
                    c3:c1:e9:16:66:98:85:0b:2e:20:f8:d6:6a:7b:4d:
                    9d:d3:11:13:69:5c:47:8d:5b:dc:e4:f4:cb:f6:96:
                    7f:b1:5b:55:5d:b9:45:d1:7a:f1:f1:a2:d9:0c:a9:
                    0a:9e:0a:75:83:93:46:00:8c:8a:27:fe:60:fa:7e:
                    cd:d3:7d:4c:c7:f3:e6:07:c8:6e:34:39:95:1a:63:
                    d4:b7:f4:d4:a9:dc:e3:60:4f:7b:17:dd:0c:c4:9b:
                    30:30:1e:b4:21:c1:ee:5e:fc:e9:00:54:65:a7:00:
                    c4:fa:ad:9c:92:62:cc:5f:fb:32:07:62:42:c4:b3:
                    8a:dc:21:3f:85:8a:9c:11:54:b9:6e:61:fa:12:24:
                    9b:c9:88:91:66:16:76:4d:7a:02:4a:f6:7d:95:d7:
                    a8:bc:ed:a8:76:42:4a:79:29:1c:a7:ef:d8:63:5c:
                    2a:58:98:ae:bc:f8:a3:ce:a2:e1:0b:2e:db:14:24:
                    77:36:28:1b:87:b3:8d:bc:4f:98:3f:7b:3f:c6:4a:
                    8c:34:f7:04:14:30:89:8c:ad:56:ad:da:b8:d1:0c:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:73:E3:93:EF:FA:BF:F6:57:BC:59:5A:81:A5:DB:11:F2:F3:EF
            X509v3 Authority Key Identifier:
                keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:ad:24:e3:62:cc:60:2b:66:f7:a7:14:f9:0f:59:a8:7a:
         2b:4a:6d:8c:b6:10:66:7f:6a:17:1c:e4:92:91:68:fc:56:a4:
         e5:77:39:d3:14:cf:6b:e8:d8:c2:8e:e8:35:3b:8b:04:a9:56:
         9e:49:6f:39:65:fc:b0:d9:5d:ec:dc:8b:cc:06:3d:12:de:fb:
         6e:1e:e9:7a:22:6b:67:1f:31:69:9b:58:cf:70:d0:5a:40:98:
         d2:5f:9e:2b:06:89:f0:51:3d:9a:1c:51:d2:24:6a:c4:ab:49:
         4a:9f:63:ea:6b:45:db:4c:0c:49:7c:ee:41:b9:c4:3f:e1:da:
         75:78:d1:0b:58:63:89:53:df:ba:59:f8:94:6f:db:d7:8e:21:
         d4:5d:ef:78:8e:bf:4b:47:6e:00:1e:8a:b2:06:45:75:68:4e:
         0c:09:67:82:2c:a6:53:77:0a:78:ec:48:c3:1f:21:a6:b9:6d:
         45:94:37:3e:46:8d:f2:ba:98:72:d0:26:fe:4f:0c:1f:18:25:
         b7:48:62:15:79:d5:db:6c:bc:67:84:ab:84:d3:8b:5a:2b:d8:
         02:a0:a4:12:64:3e:ce:99:a6:47:d8:3c:28:48:41:1b:d3:e5:
         36:e7:e9:8c:99:89:20:f1:31:ef:5e:42:e9:35:ed:55:78:20:
         d9:4c:d1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNZUy3E8z1aZiuU3K7zjndSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjQxMTIzMTQwMDQzWhcNMjQxMTI0MTQwMDQzWjAzMTEwLwYDVQQD
EyhhZmE0NzNlMzkzZWZmYWJmZjY1N2JjNTk1YTgxYTVkYjExZjJmM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9aqz+KQxnNKXoC0DY1oMQM8xPN4
pqNUrLLRyBMxYY6s1EYsyXRWfEPk1ZzDwekWZpiFCy4g+NZqe02d0xETaVxHjVvc
5PTL9pZ/sVtVXblF0Xrx8aLZDKkKngp1g5NGAIyKJ/5g+n7N031Mx/PmB8huNDmV
GmPUt/TUqdzjYE97F90MxJswMB60IcHuXvzpAFRlpwDE+q2ckmLMX/syB2JCxLOK
3CE/hYqcEVS5bmH6EiSbyYiRZhZ2TXoCSvZ9ldeovO2odkJKeSkcp+/YY1wqWJiu
vPijzqLhCy7bFCR3Nigbh7ONvE+YP3s/xkqMNPcEFDCJjK1Wrdq40Qw/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+kc+OT7/q/9le8WVqBpdsR8vPvMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojmtJONi
zGArZvenFPkPWah6K0ptjLYQZn9qFxzkkpFo/Fak5Xc50xTPa+jYwo7oNTuLBKlW
nklvOWX8sNld7NyLzAY9Et77bh7peiJrZx8xaZtYz3DQWkCY0l+eKwaJ8FE9mhxR
0iRqxKtJSp9j6mtF20wMSXzuQbnEP+HadXjRC1hjiVPfuln4lG/b144h1F3veI6/
S0duAB6KsgZFdWhODAlngiymU3cKeOxIwx8hprltRZQ3PkaN8rqYctAm/k8MHxgl
t0hiFXnV22y8Z4SrhNOLWivYAqCkEmQ+zpmmR9g8KEhBG9PlNufpjJmJIPEx715C
6TXtVXgg2UzRqw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:19:42 2024 by rpki-client on console-fra.rpki-client.org