Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
File:                     eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json)
Hash identifier:          SAc4qeJSxNyx2eVOoo2EDPmDtLHLzVn470956XTZUTc=
Subject key identifier:   40:A7:AE:D1:CC:BF:1D:0C:D9:C4:F4:22:85:60:FB:61:9D:77:26:2D
Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08
Certificate issuer:       /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
Certificate serial:       01935A674F3226BED01CB05A0E02D37F3477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
Manifest number:          68
Signing time:             Sat 23 Nov 2024 19:02:20 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:20 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:20 +0000
Files and hashes:         1: QqXhU-lBdYXqZvz-cgaHILQ3TfM.roa (hash: RrHeSjBXBLUwom4vgKVa94DN9nKAtgiED+L5EfDrWOM=)
                          2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: Gw87sOUQwVTJzfLZ3tmH/F+KnPUKNgwUAhSQu0db0jc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:4f:32:26:be:d0:1c:b0:5a:0e:02:d3:7f:34:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508
        Validity
            Not Before: Nov 23 19:02:20 2024 GMT
            Not After : Nov 24 19:02:20 2024 GMT
        Subject: CN=40a7aed1ccbf1d0cd9c4f4228560fb619d77262d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:bb:8c:a4:1d:ae:0e:35:7a:88:4d:33:9a:
                    f2:d9:64:59:8f:a8:f2:bc:58:46:72:bc:9a:f8:d0:
                    f9:23:df:ea:1a:ef:80:3c:78:32:ea:41:f8:60:01:
                    64:4c:3a:df:87:29:89:65:13:ec:26:29:a2:38:e5:
                    c0:82:53:56:da:cc:f2:bc:d0:7c:9f:3e:78:02:3d:
                    56:24:52:97:e4:cc:cc:46:83:03:21:a9:47:5e:e3:
                    a0:4e:2e:52:48:54:54:8e:a6:53:51:38:8b:f3:76:
                    fd:2f:ba:4c:4b:53:b5:32:54:df:b3:d7:4e:5e:f9:
                    ae:1d:68:e8:da:58:f9:56:b0:a4:fd:34:b2:65:3e:
                    8e:43:3d:c4:d5:12:19:49:32:7b:85:db:2b:37:31:
                    ce:f5:8a:06:40:77:f1:71:78:2c:47:b8:60:42:e8:
                    2e:ca:27:e4:a6:f8:be:b2:6d:e3:5b:32:98:4b:ea:
                    a4:8d:78:e3:bf:f0:40:0f:1e:ce:af:31:c2:0c:42:
                    8b:1b:00:b3:dc:82:f1:31:45:82:f1:80:16:ab:75:
                    5f:60:54:6e:f8:05:3a:8a:bd:01:5f:58:60:8e:05:
                    b6:2a:8f:37:37:e3:8c:61:7e:67:f9:b4:96:9e:1b:
                    0d:8a:97:65:52:de:3f:e9:0c:57:08:c0:66:4c:31:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:AE:D1:CC:BF:1D:0C:D9:C4:F4:22:85:60:FB:61:9D:77:26:2D
            X509v3 Authority Key Identifier:
                keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:32:d2:2b:56:03:af:ce:d4:12:a4:9b:49:5a:ff:a2:d0:29:
         59:a4:11:1b:1e:c9:dc:8d:d8:7f:79:1c:9e:67:91:34:ca:e1:
         d4:4f:02:49:50:f5:7c:20:90:e9:36:d4:85:7a:1f:e5:15:d1:
         95:02:e3:43:bf:c1:8d:55:e0:54:96:d9:27:1c:2b:80:2e:60:
         46:a0:bb:b7:93:0b:aa:0b:ab:94:f3:b7:a4:be:45:76:68:22:
         ca:08:21:c4:bb:b1:36:2d:4e:ba:72:4e:c5:06:82:cb:88:36:
         b7:cc:52:5a:55:55:bf:04:e3:2e:dc:78:8a:25:c7:9a:37:b0:
         36:d8:bc:0f:bf:0c:8c:e5:32:70:20:51:b4:c7:3c:2f:e2:42:
         74:97:4e:fc:ff:ff:c5:db:27:cb:15:8a:4c:5a:d2:f1:5c:a8:
         ac:04:d9:92:8c:8a:73:b1:af:fe:b5:41:ca:4e:99:9d:de:3f:
         1f:c3:93:93:94:5c:53:9b:49:35:a0:cf:04:03:b9:92:dd:44:
         2d:93:43:ae:c3:28:91:9b:60:59:48:5e:0c:ec:ce:0f:b4:6d:
         64:90:e0:15:21:7f:e8:c1:69:db:f2:85:f5:50:ef:84:e2:32:
         be:9c:5e:68:94:0a:99:aa:76:0a:47:4e:46:a3:08:9e:70:ed:
         12:42:d3:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNaZ08yJr7QHLBaDgLTfzR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODhkMzBkMzUwMmQxZGZiYWU5MzBkNWVhOWNjOWQ3MjYz
ZTk1MDgwHhcNMjQxMTIzMTkwMjIwWhcNMjQxMTI0MTkwMjIwWjAzMTEwLwYDVQQD
Eyg0MGE3YWVkMWNjYmYxZDBjZDljNGY0MjI4NTYwZmI2MTlkNzcyNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhS7jKQdrg41eohNM5ry2WRZj6jy
vFhGcrya+ND5I9/qGu+APHgy6kH4YAFkTDrfhymJZRPsJimiOOXAglNW2szyvNB8
nz54Aj1WJFKX5MzMRoMDIalHXuOgTi5SSFRUjqZTUTiL83b9L7pMS1O1MlTfs9dO
XvmuHWjo2lj5VrCk/TSyZT6OQz3E1RIZSTJ7hdsrNzHO9YoGQHfxcXgsR7hgQugu
yifkpvi+sm3jWzKYS+qkjXjjv/BADx7OrzHCDEKLGwCz3ILxMUWC8YAWq3VfYFRu
+AU6ir0BX1hgjgW2Ko83N+OMYX5n+bSWnhsNipdlUt4/6QxXCMBmTDGlNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECnrtHMvx0M2cT0IoVg+2GddyYtMB8GA1UdIwQY
MBaAFHqI0w01AtHfuukw1eqcydcmPpUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYt
MGExYzEzYTY4YmU0LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYtMGExYzEzYTY4YmU0
LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTLSK1YD
r87UEqSbSVr/otApWaQRGx7J3I3Yf3kcnmeRNMrh1E8CSVD1fCCQ6TbUhXof5RXR
lQLjQ7/BjVXgVJbZJxwrgC5gRqC7t5MLqgurlPO3pL5FdmgiygghxLuxNi1OunJO
xQaCy4g2t8xSWlVVvwTjLtx4iiXHmjewNti8D78MjOUycCBRtMc8L+JCdJdO/P//
xdsnyxWKTFrS8VyorATZkoyKc7Gv/rVByk6Znd4/H8OTk5RcU5tJNaDPBAO5kt1E
LZNDrsMokZtgWUheDOzOD7RtZJDgFSF/6MFp2/KF9VDvhOIyvpxeaJQKmap2CkdO
RqMInnDtEkLT3A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:45 2024 by rpki-client on console-fra.rpki-client.org