Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File:                     IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier:          RVBojQbClXZLjXA0G46MO7hKe7O+SKML3f3Se4vEpmQ=
Subject key identifier:   47:1A:67:F1:0C:61:59:E4:26:9E:3A:51:C3:5B:EA:63:FA:1A:A0:5D
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer:       /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial:       0193579B7B56CD1B14B2421EB54FB380EA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number:          01BA
Signing time:             Sat 23 Nov 2024 06:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:27 +0000
Files and hashes:         1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: nF4dIGWfNo99lrjX2ZvnM3/ZqjfSe9eibcFRNoPCTjM=)
                          2: vu3dCCR7azflVMq8KbpuQPe1V_8.roa (hash: +FC1NwUd6rT+LrpNdEkpnRgX2T4q/hlBwoH0k5+xD/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:7b:56:cd:1b:14:b2:42:1e:b5:4f:b3:80:ea:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
        Validity
            Not Before: Nov 23 06:00:27 2024 GMT
            Not After : Nov 24 06:00:27 2024 GMT
        Subject: CN=471a67f10c6159e4269e3a51c35bea63fa1aa05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:ee:57:a0:65:af:f1:f7:4a:20:c0:c8:c4:
                    03:6f:d9:b9:32:3a:b9:59:5c:f2:01:c9:25:9d:6a:
                    2d:93:53:5b:a9:4a:7e:0d:d7:b3:6f:45:1d:e1:e3:
                    54:06:50:0c:c3:d7:a7:38:2f:50:04:87:86:9b:c6:
                    e5:4c:ad:e4:f3:d0:57:ba:9e:c0:9b:45:12:43:ed:
                    eb:99:4b:dc:5a:61:76:5c:5c:54:15:1d:8c:7e:2c:
                    c6:9d:1b:4e:8b:2a:f3:94:04:a1:13:18:03:b5:9b:
                    6f:d8:ce:e1:c4:2b:ef:c9:e3:3f:32:48:dd:97:42:
                    fa:5d:cd:92:91:14:6e:cf:d4:97:7a:b4:8a:8d:d2:
                    e2:64:c9:88:d5:c2:39:74:21:76:ea:8c:1a:d9:61:
                    1a:05:bc:c2:3b:ba:30:92:bd:6d:c1:93:07:f3:11:
                    37:d1:d3:a3:75:a7:56:a9:3a:58:de:75:06:22:52:
                    b0:ec:c6:d7:3a:a1:56:3b:fb:17:65:6b:7e:58:db:
                    0c:99:f1:12:9d:21:f9:78:8e:fa:87:34:25:5d:10:
                    1e:51:69:87:40:7b:02:ca:bc:9a:db:47:1c:57:16:
                    c9:e3:05:08:b4:4e:3d:59:c0:5c:d8:31:a9:51:e0:
                    ac:0d:ab:63:ea:8e:c7:79:ca:7c:05:df:ef:56:f2:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1A:67:F1:0C:61:59:E4:26:9E:3A:51:C3:5B:EA:63:FA:1A:A0:5D
            X509v3 Authority Key Identifier:
                keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f8:b1:e8:c3:dc:8d:2e:4d:d7:ce:e7:4d:d1:6a:c5:ab:96:
         7d:6a:4e:23:0d:09:26:cf:8a:1d:cb:99:11:12:f5:44:24:e6:
         84:83:7f:14:27:ec:31:0b:bb:ae:00:cc:c9:3c:e8:e4:38:bd:
         83:06:8e:eb:42:cb:73:cd:93:1e:15:4f:25:38:c3:4c:83:72:
         1f:2b:f9:0e:5b:73:ad:f3:b4:01:9b:02:e3:81:59:32:4e:5a:
         00:ce:2e:86:27:1f:db:5a:63:30:83:7b:20:83:2f:1c:b3:9c:
         2d:7a:d1:35:56:00:d3:c0:2b:7c:03:3e:23:34:44:55:87:df:
         62:eb:b3:6e:ee:f0:d0:33:1d:cf:7e:c7:ba:2b:a9:57:fb:f0:
         4e:c7:6d:8c:45:5c:ab:8d:63:57:ed:60:bf:52:47:77:d2:21:
         46:56:d6:c8:a3:80:5f:c9:d2:7d:73:24:f1:42:6e:44:d2:32:
         d9:7c:12:e3:ca:41:d2:7d:60:a8:53:eb:a6:f1:9d:e6:b0:8f:
         57:b3:f5:b4:7b:a3:14:a0:be:de:42:20:4f:4e:4e:88:4c:a4:
         6c:85:ba:e2:38:5c:d6:17:1a:90:86:db:c0:f8:80:82:0d:36:
         47:0d:eb:f3:03:1c:eb:4c:4b:06:20:c4:af:eb:8f:02:47:bf:
         25:6e:fa:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm3tWzRsUskIetU+zgOozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRkNmMwNjE4YmJmZWZmMWE4NGM5NGZkNjQxODllMTg0
NWIxODgwHhcNMjQxMTIzMDYwMDI3WhcNMjQxMTI0MDYwMDI3WjAzMTEwLwYDVQQD
Eyg0NzFhNjdmMTBjNjE1OWU0MjY5ZTNhNTFjMzViZWE2M2ZhMWFhMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrbuV6Blr/H3SiDAyMQDb9m5Mjq5
WVzyAcklnWotk1NbqUp+Ddezb0Ud4eNUBlAMw9enOC9QBIeGm8blTK3k89BXup7A
m0USQ+3rmUvcWmF2XFxUFR2MfizGnRtOiyrzlAShExgDtZtv2M7hxCvvyeM/Mkjd
l0L6Xc2SkRRuz9SXerSKjdLiZMmI1cI5dCF26owa2WEaBbzCO7owkr1twZMH8xE3
0dOjdadWqTpY3nUGIlKw7MbXOqFWO/sXZWt+WNsMmfESnSH5eI76hzQlXRAeUWmH
QHsCyrya20ccVxbJ4wUItE49WcBc2DGpUeCsDatj6o7Hecp8Bd/vVvKfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcaZ/EMYVnkJp46UcNb6mP6GqBdMB8GA1UdIwQY
MBaAFCGN1sBhi7/v8ahMlP1kGJ4YRbGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEt
OWJiNmJiMjgxZWE3LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEtOWJiNmJiMjgxZWE3
LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvix6MPc
jS5N187nTdFqxauWfWpOIw0JJs+KHcuZERL1RCTmhIN/FCfsMQu7rgDMyTzo5Di9
gwaO60LLc82THhVPJTjDTINyHyv5DltzrfO0AZsC44FZMk5aAM4uhicf21pjMIN7
IIMvHLOcLXrRNVYA08ArfAM+IzREVYffYuuzbu7w0DMdz37HuiupV/vwTsdtjEVc
q41jV+1gv1JHd9IhRlbWyKOAX8nSfXMk8UJuRNIy2XwS48pB0n1gqFPrpvGd5rCP
V7P1tHujFKC+3kIgT05OiEykbIW64jhc1hcakIbbwPiAgg02Rw3r8wMc60xLBiDE
r+uPAke/JW762g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:42 2024 by rpki-client on console-fra.rpki-client.org