Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
File:                     6Y4gI4HByI2C87cPO-Booao3K50.mft (raw, json)
Hash identifier:          Bm5EYTlWtZ/74a4LulmxCJJ76HrsufStZ4a3EDyUDZM=
Subject key identifier:   72:96:AD:18:76:7B:89:60:4B:2F:DE:63:9F:47:50:C6:41:A9:9A:AA
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019406468CB7554955211540B070EFCE7264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
Manifest number:          13CA
Signing time:             Fri 27 Dec 2024 04:01:14 +0000
Manifest this update:     Fri 27 Dec 2024 04:01:14 +0000
Manifest next update:     Sat 28 Dec 2024 04:01:14 +0000
Files and hashes:         1: 6Y4gI4HByI2C87cPO-Booao3K50.crl (hash: aQ3E9J/+fm1ihKz8xYRmG3kksnH9C8WD6RbhDFIOeCM=)
                          2: cN2OP3d04pShgUvMTJ0CgR39Mfw.roa (hash: ckoQeKKTlK5mUGBloIQyI8gUTF9wfvJzvnDf0AkyXec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:8c:b7:55:49:55:21:15:40:b0:70:ef:ce:72:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Dec 27 04:01:14 2024 GMT
            Not After : Dec 28 04:01:14 2024 GMT
        Subject: CN=7296ad18767b89604b2fde639f4750c641a99aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:a2:c0:04:05:5d:81:fd:76:58:a0:8e:7f:
                    7e:e5:2e:4d:d6:9c:ab:a1:e3:37:49:3f:c0:f9:4c:
                    a8:e2:28:65:40:83:cf:c1:a6:c0:31:0b:46:00:45:
                    e8:a4:f2:32:fd:f8:1a:bf:22:88:96:33:5e:6e:26:
                    bf:8a:7d:91:9a:81:19:03:6c:16:85:2a:0c:e9:59:
                    5e:c4:58:56:89:6b:d6:7b:5e:62:30:30:cb:fd:79:
                    38:79:82:fe:bd:f5:68:dc:43:ba:5d:70:52:8b:e1:
                    22:ee:2e:93:8a:f7:68:b4:bc:af:0c:27:1b:70:65:
                    5b:04:31:52:0e:c1:b9:cf:b1:7d:aa:d0:f6:30:c4:
                    a8:7a:a2:b2:6c:78:ed:0e:6b:b3:e8:13:e5:d8:7f:
                    fa:95:8c:4b:6c:77:96:09:7c:f5:8c:63:b4:3f:57:
                    46:de:d9:d6:18:64:00:cb:71:7f:97:f7:ec:65:f4:
                    13:6f:7c:78:58:64:5c:05:61:0e:d5:16:c9:64:e1:
                    63:b0:99:eb:78:36:37:3c:1e:a8:c9:4b:28:1e:d9:
                    1c:fc:26:63:76:92:e0:f3:ec:46:d4:06:0f:77:da:
                    78:e5:cb:04:e4:94:af:45:90:7b:d3:79:f0:ba:7b:
                    ce:76:89:69:95:f5:42:a2:7f:16:66:53:4f:45:4e:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:AD:18:76:7B:89:60:4B:2F:DE:63:9F:47:50:C6:41:A9:9A:AA
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:de:fe:84:2e:9a:23:66:c4:89:4a:7b:14:25:56:af:65:9d:
         57:6b:08:2e:8d:81:14:03:d1:97:70:cd:ef:2c:10:c0:da:5d:
         b7:68:dc:52:a2:4d:49:7b:d9:f6:99:e2:bc:ff:87:30:94:cb:
         8b:b7:91:28:37:bd:b3:9c:c1:1c:6f:e8:55:b4:52:a8:a2:f0:
         30:cd:e9:05:5e:78:ae:ad:51:1b:35:78:e4:1f:e2:88:a0:52:
         3d:9f:59:3b:ac:ea:af:97:d9:c7:ac:27:46:25:88:bf:5b:fb:
         3a:04:cc:05:8b:ef:d6:67:29:b8:61:90:da:4e:29:ed:d8:6e:
         16:88:d4:0b:ee:27:24:ae:c5:5a:9a:af:e5:2b:e9:50:81:c2:
         a8:29:55:f9:0b:24:19:dc:b1:77:f9:69:46:be:57:b3:cc:a8:
         9f:8e:d8:7c:b4:2b:87:67:42:59:ee:a7:68:18:2a:e2:9a:77:
         b3:8c:df:0e:d6:82:8b:13:c0:fe:19:b2:3c:82:bd:f9:55:0b:
         f7:9a:45:8e:1d:e7:1e:5d:d3:88:ac:81:60:19:a5:0d:b1:c9:
         68:03:0c:2a:2b:f9:fb:3d:67:d9:73:18:57:11:d6:f7:74:9c:
         bd:ea:bf:3c:0f:ba:8d:81:83:65:26:56:74:62:46:56:f8:08:
         74:4a:82:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGRoy3VUlVIRVAsHDvznJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OGUyMDIzODFjMWM4OGQ4MmYzYjcwZjNiZTA2OGExYWEz
NzJiOWQwHhcNMjQxMjI3MDQwMTE0WhcNMjQxMjI4MDQwMTE0WjAzMTEwLwYDVQQD
Eyg3Mjk2YWQxODc2N2I4OTYwNGIyZmRlNjM5ZjQ3NTBjNjQxYTk5YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApraiwAQFXYH9dligjn9+5S5N1pyr
oeM3ST/A+Uyo4ihlQIPPwabAMQtGAEXopPIy/fgavyKIljNebia/in2RmoEZA2wW
hSoM6VlexFhWiWvWe15iMDDL/Xk4eYL+vfVo3EO6XXBSi+Ei7i6TivdotLyvDCcb
cGVbBDFSDsG5z7F9qtD2MMSoeqKybHjtDmuz6BPl2H/6lYxLbHeWCXz1jGO0P1dG
3tnWGGQAy3F/l/fsZfQTb3x4WGRcBWEO1RbJZOFjsJnreDY3PB6oyUsoHtkc/CZj
dpLg8+xG1AYPd9p45csE5JSvRZB703nwunvOdolplfVCon8WZlNPRU6GYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKWrRh2e4lgSy/eY59HUMZBqZqqMB8GA1UdIwQY
MBaAFOmOICOBwciNgvO3DzvgaKGqNyudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQt
YzgzMmVkN2Q1ZmVjLzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mNzg5MzctYWVkMy00YjZmLWFhMmQtYzgzMmVkN2Q1ZmVj
LzEvNlk0Z0k0SEJ5STJDODdjUE8tQm9vYW8zSzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt7+hC6a
I2bEiUp7FCVWr2WdV2sILo2BFAPRl3DN7ywQwNpdt2jcUqJNSXvZ9pnivP+HMJTL
i7eRKDe9s5zBHG/oVbRSqKLwMM3pBV54rq1RGzV45B/iiKBSPZ9ZO6zqr5fZx6wn
RiWIv1v7OgTMBYvv1mcpuGGQ2k4p7dhuFojUC+4nJK7FWpqv5SvpUIHCqClV+Qsk
Gdyxd/lpRr5Xs8yon47YfLQrh2dCWe6naBgq4pp3s4zfDtaCixPA/hmyPIK9+VUL
95pFjh3nHl3TiKyBYBmlDbHJaAMMKiv5+z1n2XMYVxHW93Scveq/PA+6jYGDZSZW
dGJGVvgIdEqCgw==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:13:37 2024 by rpki-client on console-fra.rpki-client.org