Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
File:                     F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json)
Hash identifier:          qJ0VbLdg+FmrlKOhyFGsV0WVJ9wt+yBgNDdiudBkFzY=
Subject key identifier:   9D:09:3F:2A:01:3D:9E:11:00:CF:6D:3D:9B:CD:F0:D0:1F:5A:06:6D
Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A
Certificate issuer:       /CN=176eb71bd55576f45763badeb676ed59990d396a
Certificate serial:       01940721C243DDB4C4E5D5BB65FBA868912A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
Manifest number:          0ADC
Signing time:             Fri 27 Dec 2024 08:00:40 +0000
Manifest this update:     Fri 27 Dec 2024 08:00:40 +0000
Manifest next update:     Sat 28 Dec 2024 08:00:40 +0000
Files and hashes:         1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: 9BftDKibma69MBfchDPhaQRdRIstc2l3KlpkxyW7mq4=)
                          2: GHM4IUIjOj_tsoeCNgYofw6DtuU.roa (hash: qRnm/8l0P4Te8/vsK3teyoRCXWisU+fKINgdlIqkNRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:21:c2:43:dd:b4:c4:e5:d5:bb:65:fb:a8:68:91:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a
        Validity
            Not Before: Dec 27 08:00:40 2024 GMT
            Not After : Dec 28 08:00:40 2024 GMT
        Subject: CN=9d093f2a013d9e1100cf6d3d9bcdf0d01f5a066d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:20:16:c2:c4:d7:a6:2f:c1:33:59:fc:74:
                    36:06:68:be:7b:a8:72:fb:8f:12:c8:f9:bc:75:7f:
                    5f:18:40:bc:6b:4f:86:d8:e3:53:47:81:56:16:61:
                    81:36:e5:6d:b1:1c:3f:6d:28:3f:c8:d5:00:d0:74:
                    b7:61:fc:39:69:a1:cf:da:78:24:82:87:76:ad:61:
                    62:a0:8f:75:9c:3c:f8:3c:55:72:f1:a8:bb:db:6b:
                    1b:6c:0d:a7:d6:8f:33:d4:ad:79:c0:a1:f1:62:31:
                    fa:b1:1c:63:e8:bf:11:58:79:d0:6b:c0:e5:92:67:
                    e6:f3:6e:d2:53:dd:69:59:cb:9d:56:c7:e6:ac:08:
                    d9:dc:1f:24:25:69:75:e9:57:70:89:1d:2a:2a:41:
                    a1:3c:9d:58:0f:a1:be:8d:a1:ed:51:73:d3:90:58:
                    71:f3:03:a5:af:a5:30:17:7b:04:51:6f:c2:34:44:
                    80:72:bb:fb:cb:1c:de:b0:fa:8b:0f:65:36:c6:da:
                    2e:62:86:db:d7:13:08:95:d3:b5:83:bc:62:fe:6f:
                    a2:c4:9b:f8:62:73:8f:8e:e5:21:2c:bc:3a:6d:35:
                    44:d5:4e:90:9d:eb:61:77:a3:c1:11:b6:d5:43:b0:
                    98:4f:dc:be:1b:62:d5:35:60:e8:5f:d1:68:27:ca:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:09:3F:2A:01:3D:9E:11:00:CF:6D:3D:9B:CD:F0:D0:1F:5A:06:6D
            X509v3 Authority Key Identifier:
                keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:7c:ec:73:0b:c7:c7:4d:36:1f:99:ba:e9:49:93:26:6a:
         8c:00:2c:6f:f7:41:09:ff:6a:79:06:71:88:6b:3d:f2:22:0e:
         ac:b4:a2:39:72:2a:4c:22:87:fb:0e:eb:a7:4e:df:3e:5d:32:
         0a:36:6c:ff:46:e6:cf:22:b6:a6:4f:c0:33:00:eb:6d:92:fd:
         47:b7:c1:1a:e4:73:27:ad:c5:05:18:92:24:1b:42:0d:51:9b:
         76:ba:99:24:7d:7e:ed:c3:62:d5:0d:ad:8b:51:ee:b0:fe:07:
         9c:fb:67:2f:c2:7b:31:c7:8f:61:50:51:5b:68:4f:b3:f6:de:
         47:bf:16:5a:48:9e:28:ff:78:d8:cb:f5:38:8a:b7:c0:f5:1e:
         4c:41:45:06:e7:35:33:59:5f:60:6e:06:4b:b7:31:bf:c5:3c:
         e3:c1:90:1a:ae:f5:5a:ba:03:e6:d9:40:10:2d:b5:38:70:65:
         e4:61:9f:44:19:72:d4:56:27:52:38:f1:f5:73:ea:bd:e3:54:
         a3:40:48:c2:e6:a5:b1:11:31:74:d0:33:b3:ac:4a:ef:20:3f:
         18:02:4a:a3:13:cd:4f:d9:d6:95:2e:2b:fc:0c:b4:30:38:ca:
         b2:90:f0:9b:4e:37:b1:1a:a3:5b:1d:48:3a:04:f7:0b:57:53:
         d3:da:c8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHIcJD3bTE5dW7ZfuoaJEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmViNzFiZDU1NTc2ZjQ1NzYzYmFkZWI2NzZlZDU5OTkw
ZDM5NmEwHhcNMjQxMjI3MDgwMDQwWhcNMjQxMjI4MDgwMDQwWjAzMTEwLwYDVQQD
Eyg5ZDA5M2YyYTAxM2Q5ZTExMDBjZjZkM2Q5YmNkZjBkMDFmNWEwNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeIgFsLE16YvwTNZ/HQ2Bmi+e6hy
+48SyPm8dX9fGEC8a0+G2ONTR4FWFmGBNuVtsRw/bSg/yNUA0HS3Yfw5aaHP2ngk
god2rWFioI91nDz4PFVy8ai722sbbA2n1o8z1K15wKHxYjH6sRxj6L8RWHnQa8Dl
kmfm827SU91pWcudVsfmrAjZ3B8kJWl16VdwiR0qKkGhPJ1YD6G+jaHtUXPTkFhx
8wOlr6UwF3sEUW/CNESAcrv7yxzesPqLD2U2xtouYobb1xMIldO1g7xi/m+ixJv4
YnOPjuUhLLw6bTVE1U6Qnethd6PBEbbVQ7CYT9y+G2LVNWDoX9FoJ8otXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0JPyoBPZ4RAM9tPZvN8NAfWgZtMB8GA1UdIwQY
MBaAFBdutxvVVXb0V2O63rZ27VmZDTlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTIt
OWRkM2QyMTkwN2EzLzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTItOWRkM2QyMTkwN2Ez
LzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbh87HML
x8dNNh+ZuulJkyZqjAAsb/dBCf9qeQZxiGs98iIOrLSiOXIqTCKH+w7rp07fPl0y
CjZs/0bmzyK2pk/AMwDrbZL9R7fBGuRzJ63FBRiSJBtCDVGbdrqZJH1+7cNi1Q2t
i1HusP4HnPtnL8J7McePYVBRW2hPs/beR78WWkieKP942Mv1OIq3wPUeTEFFBuc1
M1lfYG4GS7cxv8U848GQGq71WroD5tlAEC21OHBl5GGfRBly1FYnUjjx9XPqveNU
o0BIwualsRExdNAzs6xK7yA/GAJKoxPNT9nWlS4r/Ay0MDjKspDwm043sRqjWx1I
OgT3C1dT09rI6g==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:12:23 2024 by rpki-client on console-fra.rpki-client.org