Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File:                     RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier:          MRetMefq+aNYpF/L+ir5HIizaw4NqUN2rxSHthKl3+E=
Subject key identifier:   EC:31:8A:C3:50:05:DE:CE:EF:F0:37:7F:4A:8C:AC:F5:E6:18:12:74
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer:       /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial:       01936557822BE05F88DFF035DF9FA45AA06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number:          037D
Signing time:             Mon 25 Nov 2024 22:00:53 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:53 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:53 +0000
Files and hashes:         1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: 6fJJA5RPzjTgKVdTgbEt5DO4Rmiq3sSlElucNQJ+4k0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:82:2b:e0:5f:88:df:f0:35:df:9f:a4:5a:a0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
        Validity
            Not Before: Nov 25 22:00:53 2024 GMT
            Not After : Nov 26 22:00:53 2024 GMT
        Subject: CN=ec318ac35005deceeff0377f4a8cacf5e6181274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:36:4a:50:49:e4:56:6e:b0:b9:9f:1a:72:
                    45:ef:13:51:6d:9c:76:c1:bd:70:b2:81:32:78:63:
                    8d:7b:38:97:a4:f5:b0:3b:16:2d:ee:16:d4:1f:1a:
                    35:7c:28:00:e5:3d:81:ce:79:2e:25:5c:14:4b:d8:
                    ee:f3:3d:fe:2c:47:e3:a7:e7:bc:90:0a:00:ae:b9:
                    e4:8b:b8:97:b7:c2:3d:57:70:66:96:81:b2:68:8f:
                    26:7a:dd:d1:f1:e7:6c:d8:3b:03:ca:d4:3b:73:59:
                    cf:f9:18:20:99:f5:57:34:cf:a0:d8:1c:80:d5:72:
                    ec:73:1e:a7:e7:1f:a6:af:fe:ab:e7:5c:3b:4b:6a:
                    e5:aa:7b:a6:08:16:6b:cf:68:6c:db:03:86:b1:6b:
                    ac:21:3a:0e:9c:f0:b7:1c:75:c8:cd:3c:00:a5:12:
                    db:01:43:8c:64:d7:62:c0:c7:14:99:53:97:37:5e:
                    dc:87:ae:06:36:45:99:e9:f1:1e:40:a0:c9:07:7b:
                    2e:aa:75:1c:8c:a7:fb:84:c9:47:11:7c:62:70:3e:
                    92:2a:42:ba:84:e2:db:a9:a9:6c:4c:92:ce:a7:2a:
                    75:fa:63:80:84:b3:b4:a2:a6:76:2f:c1:44:bd:cd:
                    b8:65:ec:d6:21:36:ba:a9:28:06:cf:e0:b9:71:93:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:8A:C3:50:05:DE:CE:EF:F0:37:7F:4A:8C:AC:F5:E6:18:12:74
            X509v3 Authority Key Identifier:
                keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:c6:5d:63:eb:c9:e1:c8:89:00:9e:de:63:bf:c8:f6:88:
         27:60:79:35:39:a2:00:df:62:06:0f:ae:84:c7:de:f2:c0:b3:
         8d:d8:67:2d:ab:59:eb:71:1e:c2:0e:32:7d:16:c6:d2:ad:34:
         96:28:17:96:5e:e9:14:27:4f:83:0a:e8:07:4a:42:cf:f9:1a:
         90:52:bb:d1:a4:2b:14:ed:8c:ce:e0:70:d6:dd:6e:e1:4b:4d:
         3c:d0:e8:29:c6:ae:53:df:0f:b4:af:a3:a4:c1:ba:31:8e:c7:
         d6:37:39:88:4a:0e:62:8e:4d:4e:c0:1d:2e:79:31:2b:f0:7b:
         64:68:d7:08:49:d7:13:cb:35:fb:09:27:81:56:bb:32:47:7a:
         a7:eb:b3:2e:41:2d:aa:2a:fe:f1:1c:25:5a:9d:84:2a:c5:f5:
         f5:8e:6a:1e:1d:fe:8f:e1:a8:d0:94:5d:d8:b7:7b:3b:e5:1f:
         2a:ca:5e:82:b6:06:be:0c:60:82:18:66:28:14:0a:31:18:8c:
         a5:51:1e:5c:fc:a1:b8:ce:d8:5c:1f:29:61:1c:9e:95:7c:d7:
         40:2a:bc:1c:2c:ee:db:15:ff:13:03:b4:17:26:c3:48:cf:2d:
         cd:01:d2:4f:d8:90:c8:40:df:bd:c5:9f:50:2a:98:a2:fc:99:
         c1:68:10:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlV4Ir4F+I3/A135+kWqBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODY0NGI5MmYzOTRjYWYzNjY3YmRiNmFmM2UzODY5OWM1
NGYzMTUwHhcNMjQxMTI1MjIwMDUzWhcNMjQxMTI2MjIwMDUzWjAzMTEwLwYDVQQD
EyhlYzMxOGFjMzUwMDVkZWNlZWZmMDM3N2Y0YThjYWNmNWU2MTgxMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysQ2SlBJ5FZusLmfGnJF7xNRbZx2
wb1wsoEyeGONeziXpPWwOxYt7hbUHxo1fCgA5T2BznkuJVwUS9ju8z3+LEfjp+e8
kAoArrnki7iXt8I9V3BmloGyaI8met3R8eds2DsDytQ7c1nP+RggmfVXNM+g2ByA
1XLscx6n5x+mr/6r51w7S2rlqnumCBZrz2hs2wOGsWusIToOnPC3HHXIzTwApRLb
AUOMZNdiwMcUmVOXN17ch64GNkWZ6fEeQKDJB3suqnUcjKf7hMlHEXxicD6SKkK6
hOLbqalsTJLOpyp1+mOAhLO0oqZ2L8FEvc24ZezWITa6qSgGz+C5cZMXewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwxisNQBd7O7/A3f0qMrPXmGBJ0MB8GA1UdIwQY
MBaAFEaGRLkvOUyvNme9tq8+OGmcVPMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYt
YTVlMTNiNGZiMTJiLzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYtYTVlMTNiNGZiMTJi
LzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMrGXWPr
yeHIiQCe3mO/yPaIJ2B5NTmiAN9iBg+uhMfe8sCzjdhnLatZ63Eewg4yfRbG0q00
ligXll7pFCdPgwroB0pCz/kakFK70aQrFO2MzuBw1t1u4UtNPNDoKcauU98PtK+j
pMG6MY7H1jc5iEoOYo5NTsAdLnkxK/B7ZGjXCEnXE8s1+wkngVa7Mkd6p+uzLkEt
qir+8RwlWp2EKsX19Y5qHh3+j+Go0JRd2Ld7O+UfKspegrYGvgxgghhmKBQKMRiM
pVEeXPyhuM7YXB8pYRyelXzXQCq8HCzu2xX/EwO0FybDSM8tzQHST9iQyEDfvcWf
UCqYovyZwWgQdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:16 2024 by rpki-client on console-fra.rpki-client.org