Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File:                     CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier:          +m3LchsqXBdXCRdSP0vPkN1RpWe0zAY5ypEdKo3LaJs=
Subject key identifier:   4A:18:9C:59:75:D2:61:77:B9:AE:E7:05:83:77:1D:29:66:A7:7D:79
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer:       /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial:       01935576913ACD98A5874C5531D6254B2225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 20:00:54 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:54 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:54 +0000
Files and hashes:         1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: VELHz/C8s8VQb2voF+uca7U5mQmSCIl4jvzdTCG2X7I=)
                          2: jWEb6HFxdq59z6JgnBMx_VT6_vY.roa (hash: HbmMTxL0QfP0AXYjUhHWzjtJ7ayA4C0E5X3Q/CSu1xQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:91:3a:cd:98:a5:87:4c:55:31:d6:25:4b:22:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
        Validity
            Not Before: Nov 22 20:00:54 2024 GMT
            Not After : Nov 23 20:00:54 2024 GMT
        Subject: CN=4a189c5975d26177b9aee70583771d2966a77d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:64:17:24:db:b9:f1:18:65:c2:b3:b6:fa:
                    cd:f0:a9:a0:60:fd:17:14:bb:d4:cd:ac:f2:89:8f:
                    cc:d0:c5:a0:ac:de:17:e1:f8:ea:59:53:a2:35:95:
                    b2:ff:7d:e9:76:16:fb:c5:89:34:5a:f4:26:1d:b3:
                    bc:19:ed:f0:c7:e2:fb:ad:24:d5:d9:fb:37:ef:eb:
                    11:58:2b:74:17:14:b2:47:f2:f9:71:d9:35:3b:6d:
                    a7:53:7f:0e:aa:87:b7:e6:92:7f:92:5e:72:04:1a:
                    e3:67:2f:47:0c:dc:e7:a7:03:a8:4d:5e:1e:64:27:
                    da:b3:ef:3d:0b:d5:00:82:63:8a:91:97:5a:0f:8e:
                    d8:f1:90:7c:d1:f0:bd:2f:f0:d3:d4:d5:84:6b:f1:
                    76:d8:d1:13:3d:d1:8f:a7:eb:04:48:f4:66:df:11:
                    dc:f4:ab:ca:c0:ec:72:a0:51:66:10:84:69:60:42:
                    da:60:08:4c:fa:f0:d9:2e:3d:97:f5:a4:4b:3b:91:
                    ef:f8:56:60:cb:d4:b8:94:a8:a3:7c:8d:73:c9:7e:
                    eb:6c:86:10:f2:3a:eb:95:17:f6:ac:c1:ba:60:ca:
                    19:4a:34:37:d5:f6:62:0f:cc:0b:b3:2a:5d:e1:d9:
                    c9:61:89:63:ed:2b:5e:20:2a:17:9e:08:ab:c6:bb:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:9C:59:75:D2:61:77:B9:AE:E7:05:83:77:1D:29:66:A7:7D:79
            X509v3 Authority Key Identifier:
                keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:58:46:ba:03:1e:bd:75:03:11:c1:6b:e4:a0:05:44:3e:6e:
         25:64:9e:b6:b7:2d:5a:b0:85:32:63:a1:5d:da:04:fe:ab:88:
         98:51:68:15:77:ad:9f:99:40:af:63:d5:5e:e2:6c:8d:9a:82:
         3e:29:56:50:1d:18:e5:30:8a:d4:53:2a:9d:85:92:2d:e1:8e:
         32:cc:ae:51:41:19:16:47:39:93:69:f1:b4:e4:f0:59:d1:67:
         7e:8e:52:49:30:28:da:23:49:9e:ca:ed:62:b9:fd:4e:22:25:
         29:30:d2:fa:94:5a:d0:f1:28:4d:39:67:f9:70:13:69:ee:6e:
         20:f6:a8:9c:c2:30:d2:6c:84:23:22:cf:a0:25:0f:55:42:29:
         17:74:c6:c6:57:46:25:b4:b6:d5:48:25:77:93:45:f6:e8:e7:
         4e:f5:ef:e8:39:39:f2:45:40:8d:71:19:2f:b7:fd:14:03:17:
         59:96:e1:94:b5:bb:a2:b5:ac:1c:9e:cd:cc:cb:49:60:f1:c8:
         31:f1:e5:1c:9d:c7:6a:1a:97:5d:9e:b1:11:73:ff:92:ed:7b:
         81:89:6d:08:57:ed:4a:99:8d:6a:d9:91:1f:8d:f0:78:f2:ed:
         46:bf:54:fb:30:38:c7:7d:dd:31:c5:32:90:04:7b:e5:98:06:
         76:9f:df:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdpE6zZilh0xVMdYlSyIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0
NTE1ZTkwHhcNMjQxMTIyMjAwMDU0WhcNMjQxMTIzMjAwMDU0WjAzMTEwLwYDVQQD
Eyg0YTE4OWM1OTc1ZDI2MTc3YjlhZWU3MDU4Mzc3MWQyOTY2YTc3ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHdkFyTbufEYZcKztvrN8KmgYP0X
FLvUzazyiY/M0MWgrN4X4fjqWVOiNZWy/33pdhb7xYk0WvQmHbO8Ge3wx+L7rSTV
2fs37+sRWCt0FxSyR/L5cdk1O22nU38Oqoe35pJ/kl5yBBrjZy9HDNznpwOoTV4e
ZCfas+89C9UAgmOKkZdaD47Y8ZB80fC9L/DT1NWEa/F22NETPdGPp+sESPRm3xHc
9KvKwOxyoFFmEIRpYELaYAhM+vDZLj2X9aRLO5Hv+FZgy9S4lKijfI1zyX7rbIYQ
8jrrlRf2rMG6YMoZSjQ31fZiD8wLsypd4dnJYYlj7SteICoXngirxrtGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoYnFl10mF3ua7nBYN3HSlmp315MB8GA1UdIwQY
MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt
YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5
LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6VhGugMe
vXUDEcFr5KAFRD5uJWSetrctWrCFMmOhXdoE/quImFFoFXetn5lAr2PVXuJsjZqC
PilWUB0Y5TCK1FMqnYWSLeGOMsyuUUEZFkc5k2nxtOTwWdFnfo5SSTAo2iNJnsrt
Yrn9TiIlKTDS+pRa0PEoTTln+XATae5uIPaonMIw0myEIyLPoCUPVUIpF3TGxldG
JbS21Ugld5NF9ujnTvXv6Dk58kVAjXEZL7f9FAMXWZbhlLW7orWsHJ7NzMtJYPHI
MfHlHJ3HahqXXZ6xEXP/ku17gYltCFftSpmNatmRH43wePLtRr9U+zA4x33dMcUy
kAR75ZgGdp/fTg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:50 2024 by rpki-client on console-fra.rpki-client.org