Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
File:                     6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft (raw, json)
Hash identifier:          dSx7z9ZyQ8DKjz9Ln6ft50beuy+hSbBPgaV4QBO13dw=
Subject key identifier:   2B:B7:4A:D4:C9:1A:B7:5D:97:EB:EA:26:25:57:AA:E4:B6:C7:E3:DA
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Certificate issuer:       /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial:       019406B3D328A16B6CFF3087DA201D4EC617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
Manifest number:          13CC
Signing time:             Fri 27 Dec 2024 06:00:35 +0000
Manifest this update:     Fri 27 Dec 2024 06:00:35 +0000
Manifest next update:     Sat 28 Dec 2024 06:00:35 +0000
Files and hashes:         1: 6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl (hash: OwTVAeS5QVW/uYFdsfCckww2/jiNXTZryaPplfEYwVI=)
                          2: g5KaZ3_5LmBczY4f49JF2UUQb1k.roa (hash: zVDVVb75Wz0Bghitp5G/TSRfDQjVGRNOpTgz0n1Zeyg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:b3:d3:28:a1:6b:6c:ff:30:87:da:20:1d:4e:c6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
        Validity
            Not Before: Dec 27 06:00:35 2024 GMT
            Not After : Dec 28 06:00:35 2024 GMT
        Subject: CN=2bb74ad4c91ab75d97ebea262557aae4b6c7e3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:06:4b:bc:94:20:f6:96:db:17:3b:30:2f:
                    84:c2:ae:88:be:7a:f2:36:1e:39:1d:66:85:67:53:
                    b9:44:04:71:da:3b:cb:84:10:8e:3f:2c:0d:a6:a9:
                    34:b6:05:87:18:01:60:44:9c:4c:8b:86:0f:e2:2c:
                    ef:7c:91:3e:fc:74:1a:7f:3b:7b:ad:09:9b:3c:77:
                    8d:e0:72:7b:44:16:16:08:40:2b:d0:1f:c0:bc:a1:
                    df:16:45:15:31:e9:49:60:7a:64:7b:4e:b0:32:5a:
                    a0:f8:31:df:66:ba:1d:cc:fc:53:35:fe:0c:5d:db:
                    18:d1:4a:fb:92:1f:91:5e:57:a2:5d:fb:de:f6:0a:
                    7b:69:c1:d4:39:01:ac:b9:29:19:c3:6b:8d:23:e9:
                    4f:d2:fd:f2:d6:98:d8:3d:7c:27:36:b9:01:e7:2c:
                    17:36:4b:f3:b1:cb:26:10:7f:9b:62:37:c9:e8:a6:
                    97:b7:70:35:32:e8:cf:cc:2e:f6:69:5f:b6:ab:55:
                    73:0d:c1:f2:8c:97:3c:87:15:fb:01:81:cf:59:fd:
                    85:60:16:75:41:02:6c:c4:cb:72:be:66:8c:ad:6a:
                    f3:94:be:da:b4:f5:7b:d7:9b:1c:fa:52:d1:5c:a8:
                    f7:c2:07:ff:7c:3d:2f:b0:66:8f:96:b8:4c:5e:99:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B7:4A:D4:C9:1A:B7:5D:97:EB:EA:26:25:57:AA:E4:B6:C7:E3:DA
            X509v3 Authority Key Identifier:
                keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:39:02:71:17:4a:c2:a9:f6:8c:bc:5a:85:e9:55:bd:55:78:
         ee:fb:89:b4:b6:1e:4c:f1:75:74:03:ca:6f:3f:85:1d:dc:14:
         f7:df:fc:56:b4:2e:0f:0c:c7:4e:47:71:19:06:c5:72:77:40:
         46:86:42:56:1c:b7:ed:76:c3:33:d9:a2:2b:7c:9f:7b:45:11:
         80:ae:30:f5:f9:4b:21:58:d1:4f:80:e9:f3:4e:3d:67:f8:d0:
         9b:72:68:d6:4f:23:ef:39:c8:2f:c7:6d:72:23:4e:5e:6c:f2:
         cc:bf:db:ee:a7:2b:c2:2f:52:36:1b:9e:ed:5b:7c:aa:65:43:
         9c:8e:77:1e:01:9e:ac:f7:c1:01:f6:fb:08:2e:00:c1:ea:49:
         36:37:60:08:cc:67:7a:d0:1e:9e:b5:9a:ff:9f:8d:91:88:71:
         2d:4d:df:5c:a4:12:76:0c:36:72:8d:b5:7d:30:5c:a2:bd:16:
         65:11:c7:1d:eb:aa:02:81:88:28:7b:9d:2b:ff:10:2d:78:63:
         35:49:69:d2:0f:1e:79:64:de:9a:d7:f3:87:eb:66:ac:09:4f:
         c8:e9:93:f3:1b:11:d2:cb:5f:e7:bc:49:89:3d:03:b8:45:b5:
         d2:3e:d0:b4:78:5b:a6:62:9b:47:56:fa:8b:1b:2d:a0:fe:25:
         70:b2:e0:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGs9MooWts/zCH2iAdTsYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTE3NjljZTg2NzJjNTZkMTY1MmJmOTBhNWFlZmNhODE5
YjQ4OGEwHhcNMjQxMjI3MDYwMDM1WhcNMjQxMjI4MDYwMDM1WjAzMTEwLwYDVQQD
EygyYmI3NGFkNGM5MWFiNzVkOTdlYmVhMjYyNTU3YWFlNGI2YzdlM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsGS7yUIPaW2xc7MC+Ewq6Ivnry
Nh45HWaFZ1O5RARx2jvLhBCOPywNpqk0tgWHGAFgRJxMi4YP4izvfJE+/HQafzt7
rQmbPHeN4HJ7RBYWCEAr0B/AvKHfFkUVMelJYHpke06wMlqg+DHfZrodzPxTNf4M
XdsY0Ur7kh+RXleiXfve9gp7acHUOQGsuSkZw2uNI+lP0v3y1pjYPXwnNrkB5ywX
NkvzscsmEH+bYjfJ6KaXt3A1MujPzC72aV+2q1VzDcHyjJc8hxX7AYHPWf2FYBZ1
QQJsxMtyvmaMrWrzlL7atPV715sc+lLRXKj3wgf/fD0vsGaPlrhMXpkgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu3StTJGrddl+vqJiVXquS2x+PaMB8GA1UdIwQY
MBaAFOpRdpzoZyxW0WUr+Qpa78qBm0iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGIt
ODJlMmQ1ZWU5YzkwLzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kYmY4YmUtNjhhMi00YjNkLTk3ZGItODJlMmQ1ZWU5Yzkw
LzEvNmxGMm5PaG5MRmJSWlN2NUNscnZ5b0diU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDkCcRdK
wqn2jLxahelVvVV47vuJtLYeTPF1dAPKbz+FHdwU99/8VrQuDwzHTkdxGQbFcndA
RoZCVhy37XbDM9miK3yfe0URgK4w9flLIVjRT4Dp8049Z/jQm3Jo1k8j7znIL8dt
ciNOXmzyzL/b7qcrwi9SNhue7Vt8qmVDnI53HgGerPfBAfb7CC4AwepJNjdgCMxn
etAenrWa/5+NkYhxLU3fXKQSdgw2co21fTBcor0WZRHHHeuqAoGIKHudK/8QLXhj
NUlp0g8eeWTemtfzh+tmrAlPyOmT8xsR0stf57xJiT0DuEW10j7QtHhbpmKbR1b6
ixstoP4lcLLgSQ==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:14:04 2024 by rpki-client on console-fra.rpki-client.org