Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File:                     dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier:          gziYp79zXlkB1VCC7CexKN1zilSTM7cbWHLIf/x3i6Q=
Subject key identifier:   9B:25:1E:8E:8E:E9:54:3E:AA:A1:36:E8:DC:C6:3E:73:3D:BC:38:9B
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer:       /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial:       01936A7DC74A0854AEB024759A0331BCD795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number:          034E
Signing time:             Tue 26 Nov 2024 22:00:48 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:48 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:48 +0000
Files and hashes:         1: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: vqbMkzyz6SHgbc/1mp6jFcLF3Hmm1tfIhC7xJ1xW9c8=)
                          2: wP0GIImcmmFio1P8kXWsboJ4Vjk.roa (hash: QVNKs1kVYe8dlARsVk3fqVJh0p/IiDoBNwUfFMRZkWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:c7:4a:08:54:ae:b0:24:75:9a:03:31:bc:d7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
        Validity
            Not Before: Nov 26 22:00:48 2024 GMT
            Not After : Nov 27 22:00:48 2024 GMT
        Subject: CN=9b251e8e8ee9543eaaa136e8dcc63e733dbc389b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:97:e7:d2:64:5b:7a:fd:cd:0a:6b:71:96:
                    10:f7:1b:a8:8c:e5:0e:67:39:9d:2d:01:51:19:d4:
                    1d:46:bf:f4:e7:73:64:0b:bb:cb:8b:7a:74:66:2a:
                    d7:97:f6:0d:e1:cb:e4:d1:47:e4:6e:61:02:28:77:
                    12:5e:0b:f9:44:19:c9:86:da:c3:39:11:18:3c:ad:
                    0e:84:b8:e2:7f:a9:a5:a4:38:82:93:38:f7:c6:b2:
                    65:55:56:d3:ee:85:f2:4f:00:e0:93:79:0f:ae:e2:
                    8a:b0:4b:ea:e6:3d:c4:3b:f3:6a:57:b1:e0:25:ce:
                    72:57:da:cd:31:11:de:ef:0a:83:ba:6d:e7:ac:c4:
                    8c:a8:df:fd:b8:b4:67:f7:15:e7:09:ea:6d:f2:ed:
                    f9:dd:34:3b:d8:30:f6:39:a2:0f:87:98:1f:b5:1e:
                    b6:c0:b5:d9:fa:a0:a3:53:95:26:2b:d7:eb:28:f7:
                    f6:87:eb:a9:15:14:a9:78:0f:46:c6:ed:6c:36:cc:
                    2d:e9:b1:d9:bb:58:95:86:f2:8b:d5:21:c2:26:bc:
                    93:92:79:fe:72:69:9b:e3:11:c8:9c:d8:d8:e8:df:
                    e4:01:b0:17:9a:59:42:5a:ad:8d:87:88:2d:d7:68:
                    09:a5:5e:b0:0b:e4:1d:04:b9:e9:b3:08:9f:a9:d5:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:1E:8E:8E:E9:54:3E:AA:A1:36:E8:DC:C6:3E:73:3D:BC:38:9B
            X509v3 Authority Key Identifier:
                keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:b9:ac:15:e2:05:90:aa:20:58:66:6b:f4:9c:19:32:08:
         e1:e6:1e:3c:d2:50:a3:d2:96:b4:14:8b:63:7b:16:c7:d7:5a:
         b0:73:2d:4a:c2:5f:89:1c:f9:17:23:75:ae:e3:4d:37:4f:60:
         f6:79:49:d7:2c:8e:3b:88:b9:92:23:ed:27:85:13:40:87:b6:
         ac:67:a7:9c:95:13:e3:1a:ad:77:fa:74:44:51:8f:1a:23:18:
         8a:d1:1c:6f:77:24:88:26:24:5a:b2:51:ea:91:58:1f:71:51:
         a7:61:c2:dc:b5:ee:17:9f:b0:00:2d:77:79:44:c2:a4:f4:29:
         0d:6c:ec:a2:08:51:24:c3:27:09:04:d8:3f:fd:c8:db:60:07:
         35:61:d7:10:b5:c2:d9:12:c1:17:41:d2:db:f7:b5:2d:5b:16:
         21:c6:9b:0d:b6:0e:ab:06:54:03:a2:f4:d1:45:09:64:59:62:
         60:70:56:ff:d0:1a:5e:e7:12:3d:23:91:4c:2f:4f:0f:c6:d7:
         9f:16:98:90:21:11:5c:31:df:12:b7:41:88:d2:ed:85:5b:a9:
         27:0c:6b:7e:22:b4:f3:46:c0:e5:5c:d8:94:76:f6:23:04:cd:
         ec:a5:9b:2a:7f:c8:38:70:3d:7c:df:6b:cf:2d:bd:48:9f:c3:
         31:02:e0:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfcdKCFSusCR1mgMxvNeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjQxMTI2MjIwMDQ4WhcNMjQxMTI3MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg5YjI1MWU4ZThlZTk1NDNlYWFhMTM2ZThkY2M2M2U3MzNkYmMzODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5GX59JkW3r9zQprcZYQ9xuojOUO
ZzmdLQFRGdQdRr/053NkC7vLi3p0ZirXl/YN4cvk0UfkbmECKHcSXgv5RBnJhtrD
OREYPK0OhLjif6mlpDiCkzj3xrJlVVbT7oXyTwDgk3kPruKKsEvq5j3EO/NqV7Hg
Jc5yV9rNMRHe7wqDum3nrMSMqN/9uLRn9xXnCept8u353TQ72DD2OaIPh5gftR62
wLXZ+qCjU5UmK9frKPf2h+upFRSpeA9Gxu1sNswt6bHZu1iVhvKL1SHCJryTknn+
cmmb4xHInNjY6N/kAbAXmllCWq2Nh4gt12gJpV6wC+QdBLnpswifqdWYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJslHo6O6VQ+qqE26NzGPnM9vDibMB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/K5rBXi
BZCqIFhma/ScGTII4eYePNJQo9KWtBSLY3sWx9dasHMtSsJfiRz5FyN1ruNNN09g
9nlJ1yyOO4i5kiPtJ4UTQIe2rGennJUT4xqtd/p0RFGPGiMYitEcb3ckiCYkWrJR
6pFYH3FRp2HC3LXuF5+wAC13eUTCpPQpDWzsoghRJMMnCQTYP/3I22AHNWHXELXC
2RLBF0HS2/e1LVsWIcabDbYOqwZUA6L00UUJZFliYHBW/9AaXucSPSORTC9PD8bX
nxaYkCERXDHfErdBiNLthVupJwxrfiK080bA5VzYlHb2IwTN7KWbKn/IOHA9fN9r
zy29SJ/DMQLgzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:06 2024 by rpki-client on console-ams.rpki-client.org