Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File:                     X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier:          SP+6OrtcvnFBQaEJ8avumYogjahHTSV45pnaz4YvbzE=
Subject key identifier:   4F:6F:D6:79:56:1F:12:D8:CE:45:64:8C:7A:23:8C:73:F5:64:3F:E8
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer:       /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial:       0193572DF376A9BCC123988BB610E27F27CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number:          0197
Signing time:             Sat 23 Nov 2024 04:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:49 +0000
Files and hashes:         1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: gJfqQVsfS6faD7lF4xN392jQdSr0KNaciazCO5q7yTU=)
                          2: mX2EAqULnh62sNzV_QSOgsxwIlg.roa (hash: Z05p0tGeztdpMriN5MI8EeJMUTdrEkEZ2k4isWqa0UI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:f3:76:a9:bc:c1:23:98:8b:b6:10:e2:7f:27:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
        Validity
            Not Before: Nov 23 04:00:49 2024 GMT
            Not After : Nov 24 04:00:49 2024 GMT
        Subject: CN=4f6fd679561f12d8ce45648c7a238c73f5643fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:84:1b:8b:73:4e:e9:08:a2:ed:47:ca:ae:
                    dc:72:ee:4f:a1:4d:d2:3a:98:5c:ff:6a:29:bc:97:
                    f4:4d:ed:27:19:64:17:b1:e9:fa:f8:bd:d1:85:10:
                    49:73:b4:2b:dd:68:92:50:ee:ad:27:6c:f4:d0:91:
                    21:52:6c:fa:9c:f7:81:93:53:ee:eb:ea:38:c7:7d:
                    51:93:c7:d9:c5:20:1b:db:6e:16:ea:c1:9d:80:bf:
                    3f:2e:a8:7a:0d:65:19:8b:72:38:91:72:24:23:1b:
                    36:3c:32:0f:bb:b2:36:c0:8d:8f:2e:2a:40:76:1a:
                    35:7e:a4:5b:2a:47:49:28:b9:2d:cf:71:b5:7f:52:
                    8a:5d:66:0c:c0:9f:08:81:ed:c9:2d:db:ca:58:74:
                    d3:03:e5:39:ec:0c:8f:2c:ca:0f:7e:d6:b8:09:b1:
                    6f:47:96:ee:98:9f:c8:41:df:5a:aa:2d:3f:28:2c:
                    67:7c:54:dc:58:14:95:ab:15:af:dd:66:89:5a:79:
                    9b:94:83:9e:f4:1e:7f:d2:44:a8:84:e7:c0:be:2a:
                    23:ab:25:b7:5d:39:1f:2f:2e:50:d0:22:ec:d9:4a:
                    bc:78:11:a4:77:9a:8d:05:a7:64:8d:9b:4e:30:95:
                    68:d6:b5:59:14:55:52:51:bf:0f:9f:28:ba:08:b1:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:D6:79:56:1F:12:D8:CE:45:64:8C:7A:23:8C:73:F5:64:3F:E8
            X509v3 Authority Key Identifier:
                keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:ea:6a:50:0e:75:3d:42:20:6e:13:a7:3b:f5:65:03:1f:
         11:26:e4:63:c4:12:12:d2:4a:ac:ee:07:98:8c:10:f1:82:e5:
         c6:04:92:75:f0:0d:89:61:14:62:89:ad:6e:62:6f:bb:f0:da:
         83:1e:2a:a2:22:74:03:1a:38:02:15:03:20:3c:85:e6:11:be:
         24:68:56:ad:08:3d:dc:b3:3f:38:62:08:4d:f6:83:0f:f9:e3:
         06:03:89:41:d1:10:62:78:ae:e2:79:a4:78:25:c4:f2:e5:b5:
         79:2a:09:52:7d:73:66:d5:b6:fe:9a:7f:81:52:13:1d:e1:48:
         71:c9:16:96:f0:e4:f6:a4:83:23:a4:92:da:81:d0:a8:fd:da:
         02:37:d9:1f:78:cf:9e:54:f2:96:ea:fa:57:c4:71:65:56:61:
         6b:cd:17:fd:c2:0e:8d:ea:37:73:7f:09:91:bd:3e:ac:29:58:
         b1:f2:e3:ba:4c:fb:82:f1:ca:17:74:a0:7b:89:c4:8c:cc:a1:
         5d:31:07:c4:11:2b:74:17:85:25:d5:3c:45:f5:78:9f:db:27:
         c0:24:9a:13:37:3f:95:cc:48:d0:b0:1d:75:b1:88:a0:c1:c3:
         ef:68:c8:44:5a:1a:3f:89:af:d7:da:09:dc:f9:c1:d2:08:5f:
         75:5d:79:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLfN2qbzBI5iLthDifyfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl
MDY3ZDEwHhcNMjQxMTIzMDQwMDQ5WhcNMjQxMTI0MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg0ZjZmZDY3OTU2MWYxMmQ4Y2U0NTY0OGM3YTIzOGM3M2Y1NjQzZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe+EG4tzTukIou1Hyq7ccu5PoU3S
Ophc/2opvJf0Te0nGWQXsen6+L3RhRBJc7Qr3WiSUO6tJ2z00JEhUmz6nPeBk1Pu
6+o4x31Rk8fZxSAb224W6sGdgL8/Lqh6DWUZi3I4kXIkIxs2PDIPu7I2wI2PLipA
dho1fqRbKkdJKLktz3G1f1KKXWYMwJ8Ige3JLdvKWHTTA+U57AyPLMoPfta4CbFv
R5bumJ/IQd9aqi0/KCxnfFTcWBSVqxWv3WaJWnmblIOe9B5/0kSohOfAviojqyW3
XTkfLy5Q0CLs2Uq8eBGkd5qNBadkjZtOMJVo1rVZFFVSUb8Pnyi6CLFrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9v1nlWHxLYzkVkjHojjHP1ZD/oMB8GA1UdIwQY
MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct
Yzk1M2E4OGJiZmEzLzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz
LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdPqalAO
dT1CIG4Tpzv1ZQMfESbkY8QSEtJKrO4HmIwQ8YLlxgSSdfANiWEUYomtbmJvu/Da
gx4qoiJ0Axo4AhUDIDyF5hG+JGhWrQg93LM/OGIITfaDD/njBgOJQdEQYniu4nmk
eCXE8uW1eSoJUn1zZtW2/pp/gVITHeFIcckWlvDk9qSDI6SS2oHQqP3aAjfZH3jP
nlTylur6V8RxZVZha80X/cIOjeo3c38Jkb0+rClYsfLjukz7gvHKF3Sge4nEjMyh
XTEHxBErdBeFJdU8RfV4n9snwCSaEzc/lcxI0LAddbGIoMHD72jIRFoaP4mv19oJ
3PnB0ghfdV15LQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:12 2024 by rpki-client on console-fra.rpki-client.org