Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File:                     FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier:          jy0V4mBB/Fgyn54tbHcL1r4w7gBBmmAGzO7OqN5Dg2Q=
Subject key identifier:   F4:16:0F:CB:D8:6A:96:8A:7F:0C:56:0D:D5:FF:E4:1D:80:27:3A:E3
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer:       /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial:       01936B22B47DEE4FB97A14917BF737B8318D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number:          0333
Signing time:             Wed 27 Nov 2024 01:00:56 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:56 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:56 +0000
Files and hashes:         1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: 5Eb1JdsULZtRIg7cv/aEFMfj5GMONpeVS0GzM5HnL5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b4:7d:ee:4f:b9:7a:14:91:7b:f7:37:b8:31:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
        Validity
            Not Before: Nov 27 01:00:56 2024 GMT
            Not After : Nov 28 01:00:56 2024 GMT
        Subject: CN=f4160fcbd86a968a7f0c560dd5ffe41d80273ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:d2:ac:6a:a9:8c:f1:9d:8e:8f:f7:8e:09:
                    bf:29:83:9f:9f:14:fe:d7:fd:8b:c2:b5:c2:32:0e:
                    b4:53:6a:03:40:b2:74:1a:90:03:a9:dc:9e:38:e0:
                    d5:ac:bd:47:06:4f:86:bb:59:77:1a:29:aa:1b:42:
                    6c:d0:55:aa:23:b4:02:0a:66:67:b3:b5:60:8a:97:
                    66:b7:05:58:ba:53:27:93:da:a8:48:9e:00:2c:35:
                    82:fa:40:09:c7:06:ba:cc:d8:90:55:a5:17:51:5b:
                    ba:61:2c:65:c5:37:27:57:7d:bf:60:1f:ad:8a:1d:
                    d5:80:a0:2f:f3:cc:e9:aa:ac:b2:d4:77:58:c7:f7:
                    4b:c7:c5:1d:b5:6c:44:c0:39:13:bb:51:8c:08:95:
                    47:3a:60:b2:ce:49:4a:8f:bd:3b:8d:a8:42:d4:9e:
                    c4:97:32:a2:e9:18:09:d0:5e:d9:7a:0c:5c:41:35:
                    b3:2b:0d:e7:05:33:60:c6:8c:20:a4:9e:3c:3c:2d:
                    07:06:b7:b2:37:de:a5:4e:8f:4d:50:ac:7d:8b:61:
                    13:46:a0:10:ea:75:8f:66:9b:27:02:37:5c:28:21:
                    70:5d:0c:57:f2:ba:3b:0d:bf:0a:54:77:a7:2f:ad:
                    2e:8c:e0:a3:1e:36:14:a5:bf:ec:be:b1:fd:25:bd:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:16:0F:CB:D8:6A:96:8A:7F:0C:56:0D:D5:FF:E4:1D:80:27:3A:E3
            X509v3 Authority Key Identifier:
                keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:58:a1:9f:a6:77:ef:fd:f9:0c:d0:4d:eb:19:1e:12:b6:9b:
         51:18:73:9c:31:48:47:0d:98:5d:dd:b4:ad:4d:47:48:4f:dc:
         92:d9:7d:2b:91:3c:38:bc:7f:93:82:ab:ef:61:4a:32:55:6f:
         82:78:de:d6:58:9a:dd:79:dc:79:62:8f:4e:08:0b:9b:7f:30:
         e0:57:99:22:8d:b0:f8:3f:64:61:03:5a:77:14:b1:0c:c9:bb:
         16:5c:bb:8d:ed:5a:02:2c:83:a9:87:9e:f0:db:99:76:91:e6:
         a3:b9:bb:2b:f1:f6:ae:d5:61:39:b2:8b:39:21:da:32:de:3b:
         66:30:3f:7f:c2:d2:11:40:bd:f5:e6:20:5c:1a:29:61:97:32:
         e5:9e:6f:69:e9:2e:9e:f2:e1:61:f9:6a:0c:b1:81:1c:29:a4:
         16:83:47:09:a1:cf:78:ce:e6:b1:f2:f3:2d:9d:10:bb:55:11:
         f8:3b:e9:49:7c:20:83:b5:63:bf:4e:0c:52:6f:4c:be:45:e1:
         60:2c:fd:21:ab:fa:04:ae:69:1f:83:d6:ac:34:a3:86:8b:7b:
         ea:60:bf:6f:11:d6:2f:c9:65:d4:e2:28:8a:bc:b0:c2:18:de:
         3d:71:84:3b:5b:2a:e6:22:b9:38:f0:30:6b:ad:1d:82:b3:e4:
         c1:56:9d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIrR97k+5ehSRe/c3uDGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDI2ODViMWE0ZWY2Y2QzMTM5ODBhNDJmZmQ5NWVlZDEz
OTc3MmMwHhcNMjQxMTI3MDEwMDU2WhcNMjQxMTI4MDEwMDU2WjAzMTEwLwYDVQQD
EyhmNDE2MGZjYmQ4NmE5NjhhN2YwYzU2MGRkNWZmZTQxZDgwMjczYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwnSrGqpjPGdjo/3jgm/KYOfnxT+
1/2LwrXCMg60U2oDQLJ0GpADqdyeOODVrL1HBk+Gu1l3GimqG0Js0FWqI7QCCmZn
s7VgipdmtwVYulMnk9qoSJ4ALDWC+kAJxwa6zNiQVaUXUVu6YSxlxTcnV32/YB+t
ih3VgKAv88zpqqyy1HdYx/dLx8UdtWxEwDkTu1GMCJVHOmCyzklKj707jahC1J7E
lzKi6RgJ0F7ZegxcQTWzKw3nBTNgxowgpJ48PC0HBreyN96lTo9NUKx9i2ETRqAQ
6nWPZpsnAjdcKCFwXQxX8ro7Db8KVHenL60ujOCjHjYUpb/svrH9Jb2ZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQWD8vYapaKfwxWDdX/5B2AJzrjMB8GA1UdIwQY
MBaAFBcCaFsaTvbNMTmApC/9le7ROXcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndKb1d4cE85czB4T1lDa0xfMlY3dEU1ZHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYThmMmYtMTZjNC00Zjk0LWFmNDkt
NjllMWZmYWZiMTZlLzEvRndKb1d4cE85czB4T1lDa0xfMlY3dEU1ZHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jYThmMmYtMTZjNC00Zjk0LWFmNDktNjllMWZmYWZiMTZl
LzEvRndKb1d4cE85czB4T1lDa0xfMlY3dEU1ZHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1ihn6Z3
7/35DNBN6xkeErabURhznDFIRw2YXd20rU1HSE/cktl9K5E8OLx/k4Kr72FKMlVv
gnje1lia3XnceWKPTggLm38w4FeZIo2w+D9kYQNadxSxDMm7Fly7je1aAiyDqYee
8NuZdpHmo7m7K/H2rtVhObKLOSHaMt47ZjA/f8LSEUC99eYgXBopYZcy5Z5vaeku
nvLhYflqDLGBHCmkFoNHCaHPeM7msfLzLZ0Qu1UR+DvpSXwgg7Vjv04MUm9MvkXh
YCz9Iav6BK5pH4PWrDSjhot76mC/bxHWL8ll1OIoirywwhjePXGEO1sq5iK5OPAw
a60dgrPkwVadgQ==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:17 2024 by rpki-client on console-fra.rpki-client.org