Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File:                     akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier:          cu1ewXLA/SEnXPvR9dvS47YmJ6xV/Q1jHp7YvuACH5E=
Subject key identifier:   41:1D:B7:82:44:D3:86:8E:90:25:3B:92:41:8D:4B:F1:E2:2D:FE:DE
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer:       /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial:       019356BFC184C533BD512797111B28C839DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 02:00:27 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:27 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:27 +0000
Files and hashes:         1: 4sOOq4hv7ESFKsPlnC9WGwxhjEo.roa (hash: vUuBBPgUG06UwRDXUDvgfvTaCVncCLZkfq9a5gtDbok=)
                          2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: NyKx8Syh7uNXv4NFVDQ4iJ3aC3k4+j6gQbaXZ/7wmRs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:c1:84:c5:33:bd:51:27:97:11:1b:28:c8:39:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
        Validity
            Not Before: Nov 23 02:00:27 2024 GMT
            Not After : Nov 24 02:00:27 2024 GMT
        Subject: CN=411db78244d3868e90253b92418d4bf1e22dfede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:5f:e0:13:18:d1:e3:d1:05:36:c3:37:ba:
                    6a:7a:2c:50:75:a9:c3:4d:e2:db:8d:bc:2e:a0:4b:
                    a5:50:5e:1c:97:75:e4:20:94:c2:36:a1:bb:1b:21:
                    e5:9e:41:64:48:00:ef:10:52:5b:2e:bf:af:a4:a2:
                    e1:09:a3:40:5e:71:f4:96:31:d6:4c:cd:96:f9:70:
                    46:a1:26:ff:c2:d2:90:6f:0e:b2:5e:e5:dd:95:7f:
                    ce:04:b1:38:e4:60:03:bb:c3:d4:8b:47:bf:22:c6:
                    f9:f5:95:f0:9e:be:7e:7d:b4:c7:0c:1b:e5:4f:0d:
                    09:5d:bf:94:6c:92:07:83:0d:5b:1c:92:54:7e:97:
                    ff:a4:32:44:4b:c0:70:5e:8e:09:d9:4f:b5:42:75:
                    ef:82:79:ea:8e:0b:23:c7:26:8a:ee:a2:39:41:d7:
                    84:37:68:91:42:ae:de:49:7a:b1:ae:b6:f8:9c:f6:
                    67:d7:1f:ba:7e:d0:b0:59:73:80:21:b3:c2:49:9a:
                    18:f8:3a:b9:34:d7:e0:30:e3:f9:df:b8:e7:a4:9c:
                    59:e4:46:2c:7f:3e:0c:2d:3b:8f:5e:b8:b1:8a:68:
                    b7:5b:e5:77:af:4b:9c:41:08:fc:04:e0:98:8c:bc:
                    71:74:58:aa:4e:8a:32:c9:57:e4:1c:9f:fc:43:b0:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:B7:82:44:D3:86:8E:90:25:3B:92:41:8D:4B:F1:E2:2D:FE:DE
            X509v3 Authority Key Identifier:
                keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:18:cf:87:f6:66:c9:fd:ef:a2:78:f2:79:fd:69:78:62:
         43:55:49:d0:d8:20:91:0f:6a:7f:75:72:82:3b:b7:14:55:8f:
         e4:dd:12:35:90:b3:5b:13:6b:73:6b:07:02:e6:33:61:6d:30:
         59:6e:c9:12:7e:de:ee:17:7e:41:b0:6c:c7:cf:6a:e9:2e:66:
         b0:c0:11:2c:17:a9:9b:47:ac:b1:f7:3c:b3:30:d5:64:15:fb:
         7e:f1:0c:a2:7c:78:99:e6:67:32:51:1a:38:e4:40:d9:bb:35:
         7f:5a:58:69:8d:74:bb:f8:bd:da:59:d9:20:de:80:cf:29:42:
         19:e3:22:7f:fb:5a:ab:8a:5d:a3:b3:6c:f1:00:b5:34:48:14:
         2d:fb:09:fe:26:c1:7d:d2:60:3b:03:e9:68:93:a1:5c:15:ea:
         4d:90:3e:8d:f3:02:a9:a7:e7:e8:bc:5c:df:f5:60:86:11:6a:
         27:74:55:78:0b:f1:d7:74:dd:93:e2:da:3a:54:75:1f:c3:84:
         33:98:7f:25:f5:be:cd:58:04:3d:62:48:86:88:e2:82:0e:3b:
         19:2d:7d:dc:65:bc:55:cd:dd:47:88:70:34:ad:bf:81:39:5a:
         2e:3b:55:8c:cd:1c:bd:65:4a:18:ba:ec:32:6c:08:2a:40:00:
         bb:db:85:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWv8GExTO9USeXERsoyDnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNGFiZThhOGZhMzc4OTUxYWZhNjg1OTczNWJiZTZiMTgx
NDhiNTcwHhcNMjQxMTIzMDIwMDI3WhcNMjQxMTI0MDIwMDI3WjAzMTEwLwYDVQQD
Eyg0MTFkYjc4MjQ0ZDM4NjhlOTAyNTNiOTI0MThkNGJmMWUyMmRmZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMBf4BMY0ePRBTbDN7pqeixQdanD
TeLbjbwuoEulUF4cl3XkIJTCNqG7GyHlnkFkSADvEFJbLr+vpKLhCaNAXnH0ljHW
TM2W+XBGoSb/wtKQbw6yXuXdlX/OBLE45GADu8PUi0e/Isb59ZXwnr5+fbTHDBvl
Tw0JXb+UbJIHgw1bHJJUfpf/pDJES8BwXo4J2U+1QnXvgnnqjgsjxyaK7qI5QdeE
N2iRQq7eSXqxrrb4nPZn1x+6ftCwWXOAIbPCSZoY+Dq5NNfgMOP537jnpJxZ5EYs
fz4MLTuPXriximi3W+V3r0ucQQj8BOCYjLxxdFiqTooyyVfkHJ/8Q7CLSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEdt4JE04aOkCU7kkGNS/HiLf7eMB8GA1UdIwQY
MBaAFGpKvoqPo3iVGvpoWXNbvmsYFItXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTIt
ODdlYjQ0OGU5MmVkLzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMDI4YjYtNDc4Mi00YzdmLWI2YTItODdlYjQ0OGU5MmVk
LzEvYWtxLWlvLWplSlVhLW1oWmMxdS1heGdVaTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPsYz4f2
Zsn976J48nn9aXhiQ1VJ0NggkQ9qf3Vygju3FFWP5N0SNZCzWxNrc2sHAuYzYW0w
WW7JEn7e7hd+QbBsx89q6S5msMARLBepm0essfc8szDVZBX7fvEMonx4meZnMlEa
OORA2bs1f1pYaY10u/i92lnZIN6AzylCGeMif/taq4pdo7Ns8QC1NEgULfsJ/ibB
fdJgOwPpaJOhXBXqTZA+jfMCqafn6Lxc3/VghhFqJ3RVeAvx13Tdk+LaOlR1H8OE
M5h/JfW+zVgEPWJIhojigg47GS193GW8Vc3dR4hwNK2/gTlaLjtVjM0cvWVKGLrs
MmwIKkAAu9uF7Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:52 2024 by rpki-client on console-fra.rpki-client.org