Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
File:                     6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft (raw, json)
Hash identifier:          VSYxyJblnn80EEQ6L/r5HjoB92dXhryUJgLxfy6IHrE=
Subject key identifier:   9B:A2:2F:24:36:2B:60:6A:7F:1D:1B:80:77:8E:A6:16:05:32:29:38
Authority key identifier: E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68
Certificate issuer:       /CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
Certificate serial:       019357D267577F574D04A6491B30DFE1BF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
Manifest number:          02BB
Signing time:             Sat 23 Nov 2024 07:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:26 +0000
Files and hashes:         1: 6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl (hash: osbZsNdQXmEEaVE3Uo6xjsVMrVRYmzhVfDCjfznR8bI=)
                          2: jflriOIWtJ0usNwQqKc8yv2Vqx4.roa (hash: EltEH73j2kV0bMzkQS5yzjkog7gFZCD+oK59vFnS15c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:67:57:7f:57:4d:04:a6:49:1b:30:df:e1:bf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b21afe1b0916f55eea6d5bdc1dbf2e73a3c68
        Validity
            Not Before: Nov 23 07:00:26 2024 GMT
            Not After : Nov 24 07:00:26 2024 GMT
        Subject: CN=9ba22f24362b606a7f1d1b80778ea61605322938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:ce:2d:a7:a3:78:d4:66:92:09:42:d5:ca:
                    d6:c3:8b:f1:ad:54:83:c9:7c:61:ef:15:05:30:4d:
                    5a:4c:31:2b:42:fd:1e:93:7c:64:54:c6:c0:b6:59:
                    86:1f:5e:f1:29:67:be:6a:90:26:ce:2b:71:be:b7:
                    51:3a:f5:bd:74:b7:2a:3f:21:65:d6:c1:21:45:85:
                    f3:f8:46:5f:20:dd:c0:aa:03:72:dd:5e:1a:6e:7d:
                    23:bd:df:4a:7e:4e:0a:f6:af:9b:c6:21:b9:6d:77:
                    18:ee:ca:50:3b:8a:22:b8:42:88:80:09:1a:48:0e:
                    4e:4e:eb:42:0c:3f:72:a7:18:15:08:79:62:a9:64:
                    01:74:0e:8a:24:2f:dd:2d:15:06:f4:50:cd:ea:80:
                    d6:3b:80:97:05:93:03:49:7b:ed:5b:b5:17:f9:9a:
                    2f:d3:7e:c7:32:3f:92:e7:a3:97:5d:fc:be:cb:bc:
                    05:2a:a7:45:52:76:01:7a:32:3c:9d:0b:d6:14:9f:
                    12:e6:f2:a4:f7:79:8f:73:bb:91:4b:4a:b8:12:1e:
                    34:fd:08:ae:b8:a9:39:c5:5d:54:56:2e:78:df:ca:
                    dd:71:88:a9:f5:00:54:08:cd:22:4c:b7:1d:7b:8e:
                    ad:69:b9:1c:f3:22:40:3d:f4:39:2b:bc:70:91:63:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:2F:24:36:2B:60:6A:7F:1D:1B:80:77:8E:A6:16:05:32:29:38
            X509v3 Authority Key Identifier:
                keyid:E8:5B:21:AF:E1:B0:91:6F:55:EE:A6:D5:BD:C1:DB:F2:E7:3A:3C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fshr-GwkW9V7qbVvcHb8uc6PGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/4b4748-5af0-4513-aca9-0b41234cb0ce/1/6Fshr-GwkW9V7qbVvcHb8uc6PGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:eb:e7:c1:f8:49:f2:e8:9d:88:01:ce:88:59:9a:74:2d:
         a4:c4:74:a8:55:e6:20:1c:84:a3:8c:85:66:e6:a7:32:40:f5:
         86:e4:c5:88:57:e6:5f:b5:7c:28:0c:ac:5e:90:1d:8a:b3:c7:
         c2:4f:06:d1:3d:4b:c8:cf:1e:89:61:69:3c:3b:20:96:cc:98:
         c6:70:de:bf:9e:45:39:ce:60:dc:f3:fb:9e:f5:e2:d5:08:bd:
         5a:05:ce:a1:50:c3:ad:c7:d2:89:ea:a1:1d:43:0a:02:15:02:
         93:50:5f:da:8a:3f:4f:5b:e5:4b:17:8f:6c:44:26:ff:f5:67:
         9f:8b:b1:5f:a7:bd:cd:5b:a7:c3:36:68:b0:03:05:14:8b:06:
         3f:3d:3b:7c:76:d0:2f:b7:23:b1:3a:f9:49:13:08:62:ba:6a:
         cd:90:d0:4a:09:d6:fd:00:79:d7:85:6b:1e:66:5e:dc:8f:24:
         db:c9:12:82:3f:52:b4:73:13:9f:00:69:8c:3d:55:2e:34:33:
         3a:55:f1:77:f2:5c:cf:a2:0f:a4:1c:a9:38:c6:3f:81:13:6b:
         a4:15:39:5f:45:5b:50:21:d6:f5:f6:cf:6b:21:09:3f:f3:11:
         33:7f:29:29:f4:6c:36:9e:e6:53:df:15:a7:c7:b8:71:c0:36:
         b6:9b:72:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0mdXf1dNBKZJGzDf4b+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWIyMWFmZTFiMDkxNmY1NWVlYTZkNWJkYzFkYmYyZTcz
YTNjNjgwHhcNMjQxMTIzMDcwMDI2WhcNMjQxMTI0MDcwMDI2WjAzMTEwLwYDVQQD
Eyg5YmEyMmYyNDM2MmI2MDZhN2YxZDFiODA3NzhlYTYxNjA1MzIyOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmPOLaejeNRmkglC1crWw4vxrVSD
yXxh7xUFME1aTDErQv0ek3xkVMbAtlmGH17xKWe+apAmzitxvrdROvW9dLcqPyFl
1sEhRYXz+EZfIN3AqgNy3V4abn0jvd9Kfk4K9q+bxiG5bXcY7spQO4oiuEKIgAka
SA5OTutCDD9ypxgVCHliqWQBdA6KJC/dLRUG9FDN6oDWO4CXBZMDSXvtW7UX+Zov
037HMj+S56OXXfy+y7wFKqdFUnYBejI8nQvWFJ8S5vKk93mPc7uRS0q4Eh40/Qiu
uKk5xV1UVi5438rdcYip9QBUCM0iTLcde46tabkc8yJAPfQ5K7xwkWM/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuiLyQ2K2Bqfx0bgHeOphYFMik4MB8GA1UdIwQY
MBaAFOhbIa/hsJFvVe6m1b3B2/LnOjxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTkt
MGI0MTIzNGNiMGNlLzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC80YjQ3NDgtNWFmMC00NTEzLWFjYTktMGI0MTIzNGNiMGNl
LzEvNkZzaHItR3drVzlWN3FiVnZjSGI4dWM2UEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClLr58H4
SfLonYgBzohZmnQtpMR0qFXmIByEo4yFZuanMkD1huTFiFfmX7V8KAysXpAdirPH
wk8G0T1LyM8eiWFpPDsglsyYxnDev55FOc5g3PP7nvXi1Qi9WgXOoVDDrcfSieqh
HUMKAhUCk1Bf2oo/T1vlSxePbEQm//Vnn4uxX6e9zVunwzZosAMFFIsGPz07fHbQ
L7cjsTr5SRMIYrpqzZDQSgnW/QB514VrHmZe3I8k28kSgj9StHMTnwBpjD1VLjQz
OlXxd/Jcz6IPpBypOMY/gRNrpBU5X0VbUCHW9fbPayEJP/MRM38pKfRsNp7mU98V
p8e4ccA2tptycQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:58 2024 by rpki-client on console-ams.rpki-client.org