Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File:                     aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier:          h7iTIMdqOnk9CCgkQjV4kxIba1KCa4KMwu3tKGL0K2A=
Subject key identifier:   05:94:C4:80:D7:33:03:0F:4C:2C:C6:5D:37:E5:FB:C7:5B:C4:38:38
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer:       /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial:       019369D8B8D21E9BB6184AF27C629DFB5ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:30 +0000
Files and hashes:         1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: 6J/1susz27wfURvYVK1hMwpA6EJz85+7QRuY8MNELZA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:b8:d2:1e:9b:b6:18:4a:f2:7c:62:9d:fb:5a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
        Validity
            Not Before: Nov 26 19:00:30 2024 GMT
            Not After : Nov 27 19:00:30 2024 GMT
        Subject: CN=0594c480d733030f4c2cc65d37e5fbc75bc43838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:11:d5:72:64:6e:ca:0f:e5:eb:79:c5:5b:
                    2c:32:a7:9a:28:8c:99:2e:25:7a:e7:66:5e:ee:bf:
                    90:44:73:d0:71:85:59:3a:bd:ce:f1:08:2a:2b:8a:
                    29:f4:be:45:3b:e6:b0:f4:93:f9:cd:d0:c8:51:77:
                    b8:70:23:2a:08:12:f2:8d:1e:fc:78:b5:a3:be:b4:
                    3b:7d:16:ff:d0:43:bf:00:9f:5a:69:a4:76:54:f8:
                    1b:9b:bb:b9:2d:3b:06:6d:b4:20:a7:a0:3d:c0:12:
                    5a:47:54:11:d4:30:ad:e1:cc:c1:c6:ba:b6:cf:82:
                    de:81:7f:8d:68:82:b8:ea:75:03:a2:6f:e5:3a:59:
                    e3:f4:6d:f5:8b:ff:5e:61:bb:1d:f8:e1:aa:26:50:
                    da:3a:21:05:24:ae:17:64:79:95:53:25:f8:85:ba:
                    eb:b2:fb:87:18:18:be:95:b8:48:2c:f0:c9:19:d7:
                    5f:f8:ab:8a:56:1b:6f:d1:3c:66:fc:94:6c:04:20:
                    98:c8:ed:26:cf:a2:f5:06:e7:d7:92:c0:a1:b0:e0:
                    26:bc:eb:d4:96:24:63:15:9a:b5:e0:67:6b:a1:40:
                    37:f0:8d:97:61:d7:b6:68:6a:23:50:34:e0:a1:03:
                    03:4a:89:15:ee:37:cc:79:9a:23:99:ab:2e:16:4b:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:C4:80:D7:33:03:0F:4C:2C:C6:5D:37:E5:FB:C7:5B:C4:38:38
            X509v3 Authority Key Identifier:
                keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:5e:62:a0:c4:09:35:24:16:4e:33:78:94:00:04:7a:3e:
         fa:cc:f6:8d:7a:2a:4c:ea:fb:4d:28:8f:b7:02:80:62:f4:bd:
         d4:44:7e:8d:ab:c0:5e:cc:40:09:25:e8:5c:7e:04:27:bc:20:
         d0:e6:63:43:70:1a:96:cf:a4:50:3d:05:ec:28:7a:0d:db:5c:
         9b:03:c9:b5:9c:67:5e:df:2b:e2:91:85:85:01:f6:d6:02:b3:
         8f:28:4e:fc:88:b6:06:76:0d:a1:b5:83:22:60:7c:18:95:e5:
         66:db:cc:e6:21:e3:10:6e:5c:90:97:85:af:1c:9b:17:6b:18:
         28:c5:25:88:6d:24:42:d2:06:63:fc:d6:b8:51:57:32:39:34:
         7a:06:cf:89:2d:79:03:cc:16:bf:e1:6c:5b:98:46:85:3c:ec:
         3c:a2:45:29:df:b7:2d:95:0c:42:90:fe:9f:43:e9:dc:40:72:
         0f:65:b9:82:13:07:4c:32:61:7e:a9:f1:93:60:f2:29:91:79:
         fd:fd:65:9e:af:f1:1d:09:60:8a:fc:d4:b9:5e:59:d6:bd:b4:
         2a:8a:b0:d5:5c:61:fc:e9:9e:9e:0a:b7:86:3d:fd:58:80:5a:
         12:a1:e1:f8:4a:04:e0:e3:d5:a1:10:4b:3d:81:0f:74:98:55:
         55:7c:e3:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2LjSHpu2GEryfGKd+1rMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MDMxMWRmYjY1YjY1OTU2MjE4ZWZmNDcxOTdhOWViOTZh
NDA3ZGIwHhcNMjQxMTI2MTkwMDMwWhcNMjQxMTI3MTkwMDMwWjAzMTEwLwYDVQQD
EygwNTk0YzQ4MGQ3MzMwMzBmNGMyY2M2NWQzN2U1ZmJjNzViYzQzODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+gR1XJkbsoP5et5xVssMqeaKIyZ
LiV652Ze7r+QRHPQcYVZOr3O8QgqK4op9L5FO+aw9JP5zdDIUXe4cCMqCBLyjR78
eLWjvrQ7fRb/0EO/AJ9aaaR2VPgbm7u5LTsGbbQgp6A9wBJaR1QR1DCt4czBxrq2
z4LegX+NaIK46nUDom/lOlnj9G31i/9eYbsd+OGqJlDaOiEFJK4XZHmVUyX4hbrr
svuHGBi+lbhILPDJGddf+KuKVhtv0Txm/JRsBCCYyO0mz6L1BufXksChsOAmvOvU
liRjFZq14GdroUA38I2XYde2aGojUDTgoQMDSokV7jfMeZojmasuFkvgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWUxIDXMwMPTCzGXTfl+8dbxDg4MB8GA1UdIwQY
MBaAFGkDEd+2W2WVYhjv9HGXqeuWpAfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84MjY2YTYtMzlmMi00YTlmLWE0ZGQt
YTQ1NmUzNjRjYjBlLzEvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84MjY2YTYtMzlmMi00YTlmLWE0ZGQtYTQ1NmUzNjRjYjBl
LzEvYVFNUjM3WmJaWlZpR09fMGNaZXA2NWFrQjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLleYqDE
CTUkFk4zeJQABHo++sz2jXoqTOr7TSiPtwKAYvS91ER+javAXsxACSXoXH4EJ7wg
0OZjQ3Aals+kUD0F7Ch6DdtcmwPJtZxnXt8r4pGFhQH21gKzjyhO/Ii2BnYNobWD
ImB8GJXlZtvM5iHjEG5ckJeFrxybF2sYKMUliG0kQtIGY/zWuFFXMjk0egbPiS15
A8wWv+FsW5hGhTzsPKJFKd+3LZUMQpD+n0Pp3EByD2W5ghMHTDJhfqnxk2DyKZF5
/f1lnq/xHQlgivzUuV5Z1r20Koqw1Vxh/Omengq3hj39WIBaEqHh+EoE4OPVoRBL
PYEPdJhVVXzjKg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:12 2024 by rpki-client on console-fra.rpki-client.org