Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File:                     eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier:          IQRHhm4MIkBlPh2V4zbySPw509kEcH2AJ6zp8HUA/Cg=
Subject key identifier:   39:04:85:BB:5E:69:8F:4C:1C:B8:16:60:66:D3:BF:2E:AE:99:CD:9E
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer:       /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial:       0193579BAC239E722AA9B643D1DC4390AE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number:          01DF
Signing time:             Sat 23 Nov 2024 06:00:40 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:40 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:40 +0000
Files and hashes:         1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: 34yXkVAP+g05CSGzo0K99ZacYSrQf2xLX0zaHm4B4KA=)
                          2: eo11uUX2R0XcIF6_EAbrV6mwoEk.roa (hash: F3ALbWe1m+JdmfejyqFpyI8rgRPCMjPMZKS4Fw6GLCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:ac:23:9e:72:2a:a9:b6:43:d1:dc:43:90:ae:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
        Validity
            Not Before: Nov 23 06:00:40 2024 GMT
            Not After : Nov 24 06:00:40 2024 GMT
        Subject: CN=390485bb5e698f4c1cb8166066d3bf2eae99cd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:2f:76:5c:63:41:86:0d:bc:13:52:55:7e:
                    8d:f8:6a:08:0d:21:ff:c1:5a:13:ac:0c:59:dd:96:
                    56:7d:df:c3:7d:0d:91:77:e5:22:94:c2:1a:15:35:
                    e9:e4:42:e1:4d:34:e3:86:03:3a:e4:31:fa:a0:9c:
                    0e:87:9f:27:45:a3:c7:bf:c8:2b:f1:26:77:6f:d3:
                    41:bc:44:2e:6c:08:7a:75:74:f2:50:e3:e5:49:f2:
                    7d:7d:d4:61:94:d7:02:50:e3:5d:f4:a1:c0:cb:4f:
                    c1:85:a6:1f:7b:3a:eb:e3:13:42:87:48:df:e5:ba:
                    48:ba:a3:41:b7:a3:a1:9a:f2:b2:36:8a:9b:3a:aa:
                    83:94:15:2a:dc:00:d3:d2:11:f8:4a:22:14:d5:50:
                    f2:97:c4:df:6d:b2:b7:2b:ba:91:7a:d1:be:9f:87:
                    6d:1c:94:c4:44:d7:c5:e8:8d:15:bc:c1:db:33:77:
                    b6:7f:7e:e2:db:29:09:be:c6:09:8b:77:4b:59:98:
                    e4:88:55:af:6f:8f:b9:38:35:98:fc:a1:df:84:d7:
                    0c:4e:7c:6a:0f:18:f5:48:68:55:11:13:25:41:7d:
                    f7:e2:ee:0a:a1:da:af:66:af:06:d4:1d:37:5a:2b:
                    74:4d:c7:e1:4c:2a:1f:fa:e1:82:71:de:ec:30:a1:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:04:85:BB:5E:69:8F:4C:1C:B8:16:60:66:D3:BF:2E:AE:99:CD:9E
            X509v3 Authority Key Identifier:
                keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:38:55:c1:2d:ea:72:3e:f1:18:3e:1f:c0:5e:47:1b:9e:c4:
         2e:4c:84:d4:fc:d8:c2:7c:cc:f0:b8:8e:1d:e8:59:8d:3d:7c:
         57:d4:6b:91:36:1a:51:7a:25:1a:6b:4d:9b:bb:b8:68:48:63:
         a4:b6:bf:8b:63:54:7d:75:8c:1f:f5:5a:eb:c7:de:41:fc:cd:
         78:95:95:81:dc:4e:61:c6:63:be:53:2d:38:62:4a:9a:94:ea:
         28:b4:e2:f5:f1:04:4a:08:e2:9a:bc:13:51:d3:6d:30:1c:66:
         b5:d6:1d:42:c2:78:cc:2a:67:35:30:1a:e5:f7:21:de:be:7f:
         81:b3:12:ed:a1:6d:ab:8f:b4:05:ae:44:7f:5c:6e:64:a0:38:
         d8:58:ed:cb:61:e8:79:89:8c:e2:85:5a:0e:80:11:00:37:b0:
         07:df:78:f1:0d:88:ed:18:df:b6:d2:d8:29:f1:da:7f:6b:4e:
         1b:9b:01:47:fb:6a:38:96:45:1f:e3:2e:14:85:86:b8:47:fd:
         1d:da:2e:53:b1:84:d2:ad:0a:09:42:94:6a:c8:61:ac:e8:0b:
         6f:50:a7:a1:2a:fb:fa:c3:5b:05:97:7c:21:47:14:51:c3:0c:
         85:44:a9:ad:1a:fc:22:37:7d:d0:00:1b:f0:c9:07:a9:36:d6:
         83:d9:6c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXm6wjnnIqqbZD0dxDkK4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTFkMGVhNzMwZmNmY2IyMTQ5OTk1Yzc4Mjg5YmYyZDZk
MTg2ZmMwHhcNMjQxMTIzMDYwMDQwWhcNMjQxMTI0MDYwMDQwWjAzMTEwLwYDVQQD
EygzOTA0ODViYjVlNjk4ZjRjMWNiODE2NjA2NmQzYmYyZWFlOTljZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbQvdlxjQYYNvBNSVX6N+GoIDSH/
wVoTrAxZ3ZZWfd/DfQ2Rd+UilMIaFTXp5ELhTTTjhgM65DH6oJwOh58nRaPHv8gr
8SZ3b9NBvEQubAh6dXTyUOPlSfJ9fdRhlNcCUONd9KHAy0/BhaYfezrr4xNCh0jf
5bpIuqNBt6OhmvKyNoqbOqqDlBUq3ADT0hH4SiIU1VDyl8TfbbK3K7qRetG+n4dt
HJTERNfF6I0VvMHbM3e2f37i2ykJvsYJi3dLWZjkiFWvb4+5ODWY/KHfhNcMTnxq
Dxj1SGhVERMlQX334u4KodqvZq8G1B03Wit0TcfhTCof+uGCcd7sMKG4SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkEhbteaY9MHLgWYGbTvy6umc2eMB8GA1UdIwQY
MBaAFHmh0OpzD8/LIUmZXHgom/LW0Yb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEt
ODBhOTFhZjQyYTY1LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mNGM0N2ItOWRlZS00ZTcxLWE2ZGEtODBhOTFhZjQyYTY1
LzEvZWFIUTZuTVB6OHNoU1psY2VDaWI4dGJSaHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzhVwS3q
cj7xGD4fwF5HG57ELkyE1PzYwnzM8LiOHehZjT18V9RrkTYaUXolGmtNm7u4aEhj
pLa/i2NUfXWMH/Va68feQfzNeJWVgdxOYcZjvlMtOGJKmpTqKLTi9fEESgjimrwT
UdNtMBxmtdYdQsJ4zCpnNTAa5fch3r5/gbMS7aFtq4+0Ba5Ef1xuZKA42Fjty2Ho
eYmM4oVaDoARADewB9948Q2I7RjfttLYKfHaf2tOG5sBR/tqOJZFH+MuFIWGuEf9
HdouU7GE0q0KCUKUashhrOgLb1CnoSr7+sNbBZd8IUcUUcMMhUSprRr8Ijd90AAb
8MkHqTbWg9lsHg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:47 2024 by rpki-client on console-ams.rpki-client.org