Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
File:                     S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json)
Hash identifier:          0GNlVq7CEd0s3x3BdL9Se3rW7Ziq0/MlR7UPmUfteXk=
Subject key identifier:   15:C0:96:EC:29:22:14:DC:4E:4F:B7:53:03:C1:5D:47:87:BC:6A:86
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Certificate issuer:       /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial:       019331D76886595F1D9278D5BD687956C212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
Manifest number:          0AF8
Signing time:             Fri 15 Nov 2024 22:00:20 +0000
Manifest this update:     Fri 15 Nov 2024 22:00:20 +0000
Manifest next update:     Sat 16 Nov 2024 22:00:20 +0000
Files and hashes:         1: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: HtNq8v3tqEs7npSOIhHxZiDqXnHzFnITT9CbCuJneMI=)
                          2: Yw6l_P9rY_tggXSTNKzrS86CVOs.roa (hash: 5ceHKCkqatcLnJdaJ6dPFikfCczmS9fuAUb/lqwlaPw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:31:d7:68:86:59:5f:1d:92:78:d5:bd:68:79:56:c2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
        Validity
            Not Before: Nov 15 22:00:20 2024 GMT
            Not After : Nov 16 22:00:20 2024 GMT
        Subject: CN=15c096ec292214dc4e4fb75303c15d4787bc6a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:ea:d0:bd:da:17:d3:7e:43:6c:90:18:44:
                    c4:d1:33:bb:0a:30:a5:1f:3b:63:39:e3:3b:d7:04:
                    6b:d5:80:8f:1b:8b:8b:ae:66:48:82:ee:9a:0e:4d:
                    82:92:47:8e:64:4d:18:14:b2:82:cf:ce:84:9d:28:
                    d0:65:dc:ef:25:aa:d4:5c:c2:4a:31:b7:7f:fb:06:
                    c9:db:d7:71:30:7d:bd:97:af:52:11:81:91:73:81:
                    24:64:f9:bb:fb:9b:64:cd:a7:9c:5f:9d:6a:40:27:
                    23:a5:d8:ef:ec:eb:15:52:77:af:f5:8a:78:e9:84:
                    7c:8d:64:ed:68:cb:f1:20:8e:24:33:e5:5e:ce:39:
                    cc:52:ab:15:87:24:5a:c4:e4:21:13:e0:81:c1:a7:
                    75:71:f6:c1:db:32:41:67:47:99:3e:8d:1b:82:c8:
                    d8:f0:84:b2:61:f3:5e:fb:4c:10:9d:ee:04:8a:3d:
                    fc:be:79:11:53:d3:10:1e:8a:b0:a3:46:dc:c4:88:
                    20:47:67:22:7c:92:43:9b:b6:6c:96:9f:dd:72:ea:
                    74:07:be:8d:a1:89:d8:78:e7:62:5a:cd:37:b8:da:
                    40:48:03:06:0c:97:34:61:52:df:e3:7d:69:ac:a8:
                    bf:65:7b:af:c8:7a:a6:46:10:d7:5a:d1:ce:54:67:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:96:EC:29:22:14:DC:4E:4F:B7:53:03:C1:5D:47:87:BC:6A:86
            X509v3 Authority Key Identifier:
                keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:b3:d7:1e:29:3a:18:97:91:70:f0:d5:7f:71:a9:f3:5f:
         02:da:47:c8:6a:5d:55:c7:68:b2:12:7d:c8:ac:6b:b2:bd:c6:
         06:9b:ac:8f:7f:d1:be:33:01:ff:e9:45:79:5b:ed:6c:6b:b4:
         8f:95:4a:d1:0f:32:34:f9:77:ae:02:62:8e:e7:14:01:09:a9:
         41:8c:18:b0:3c:f5:93:b7:30:10:97:54:b4:3d:af:f0:d1:8e:
         ca:3a:4d:b4:6d:dc:ea:d2:9d:75:7a:51:c7:59:26:e3:d4:71:
         16:87:44:7d:03:15:5a:f1:b3:20:5c:7c:8f:2c:75:10:21:44:
         3b:85:7c:e4:25:1e:09:32:27:d4:e4:95:0d:e5:b1:64:6b:de:
         ee:c6:89:d4:dc:17:fe:4e:e9:a5:c2:ca:f3:1d:81:a6:16:87:
         c9:f5:36:55:98:f4:24:d7:a5:91:35:c0:49:f5:f5:bb:91:8f:
         5b:a2:ec:14:d2:7e:7e:c6:28:23:8c:fe:a5:6b:86:48:70:6b:
         36:6f:c1:85:bd:6f:c9:f4:5f:01:98:0f:8e:95:9e:ec:e8:c3:
         df:fe:ec:05:63:8a:04:82:22:42:1c:cb:de:2f:7f:2d:45:5b:
         bd:c6:97:ec:8a:da:66:84:6f:4e:1e:9f:a8:20:28:01:77:93:
         80:81:13:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMx12iGWV8dknjVvWh5VsISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYmQwNDYxOWEyZTE2OGFjOTU3NTIyZWRmZjAyMmY5MGJj
MGE0ZGYwHhcNMjQxMTE1MjIwMDIwWhcNMjQxMTE2MjIwMDIwWjAzMTEwLwYDVQQD
EygxNWMwOTZlYzI5MjIxNGRjNGU0ZmI3NTMwM2MxNWQ0Nzg3YmM2YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAvq0L3aF9N+Q2yQGETE0TO7CjCl
HztjOeM71wRr1YCPG4uLrmZIgu6aDk2CkkeOZE0YFLKCz86EnSjQZdzvJarUXMJK
Mbd/+wbJ29dxMH29l69SEYGRc4EkZPm7+5tkzaecX51qQCcjpdjv7OsVUnev9Yp4
6YR8jWTtaMvxII4kM+VezjnMUqsVhyRaxOQhE+CBwad1cfbB2zJBZ0eZPo0bgsjY
8ISyYfNe+0wQne4Eij38vnkRU9MQHoqwo0bcxIggR2cifJJDm7Zslp/dcup0B76N
oYnYeOdiWs03uNpASAMGDJc0YVLf431prKi/ZXuvyHqmRhDXWtHOVGfD+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXAluwpIhTcTk+3UwPBXUeHvGqGMB8GA1UdIwQY
MBaAFEu9BGGaLhaKyVdSLt/wIvkLwKTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgt
MmZhZjUzODNiNTA1LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgtMmZhZjUzODNiNTA1
LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6Sz1x4p
OhiXkXDw1X9xqfNfAtpHyGpdVcdoshJ9yKxrsr3GBpusj3/RvjMB/+lFeVvtbGu0
j5VK0Q8yNPl3rgJijucUAQmpQYwYsDz1k7cwEJdUtD2v8NGOyjpNtG3c6tKddXpR
x1km49RxFodEfQMVWvGzIFx8jyx1ECFEO4V85CUeCTIn1OSVDeWxZGve7saJ1NwX
/k7ppcLK8x2BphaHyfU2VZj0JNelkTXASfX1u5GPW6LsFNJ+fsYoI4z+pWuGSHBr
Nm/Bhb1vyfRfAZgPjpWe7OjD3/7sBWOKBIIiQhzL3i9/LUVbvcaX7IraZoRvTh6f
qCAoAXeTgIETbg==
-----END CERTIFICATE-----
Generated at Fri Nov 15 23:32:28 2024 by rpki-client on console-fra.rpki-client.org