Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          B7ifu7+ywR0KASC0BoJeBbVER2kuHGP3cjRx2CsMKac=
Subject key identifier:   0E:B3:8B:87:31:7C:4E:FD:AD:DF:03:58:4C:AD:35:89:F2:89:BB:21
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       01935878B6CA4021F5E2A0A95B7AD9A68672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 10:02:06 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:06 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:06 +0000
Files and hashes:         1: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: NbOL4sImS3CXBca+T3DH/HEYx/dK/ZH3Yv/+yQcI2Ic=)
                          2: uOHLoMuE8T-H-y_h_9kWqt1NM_M.roa (hash: d+aNC1Ajdty9J6dI6kNYZAO5ni/NoQLjnL7xx5pKRbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:b6:ca:40:21:f5:e2:a0:a9:5b:7a:d9:a6:86:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Nov 23 10:02:06 2024 GMT
            Not After : Nov 24 10:02:06 2024 GMT
        Subject: CN=0eb38b87317c4efdaddf03584cad3589f289bb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:2a:cc:f9:e5:69:e5:5a:60:24:43:c4:b0:
                    8d:ef:8b:79:5d:8d:88:99:94:03:8a:57:81:e9:a2:
                    22:56:0e:d7:b9:be:93:97:38:54:d4:b1:71:35:5f:
                    a7:43:75:ce:67:9f:d2:56:5f:e4:38:d1:51:c9:44:
                    fe:26:33:12:73:29:d7:58:39:01:a2:ab:bd:f4:fb:
                    47:20:a8:2f:cc:c6:91:a7:15:93:8d:d8:1d:00:b5:
                    9a:2d:06:8c:2e:61:65:e3:bf:0f:8e:3d:62:f3:79:
                    8e:ad:a9:a1:3a:59:41:f9:77:a6:7e:a8:ed:96:8f:
                    7e:60:8b:9c:5c:0d:e2:3d:4e:c3:3b:aa:e0:79:97:
                    0c:60:36:d5:03:62:68:2f:b1:5b:3a:d4:c8:ba:a8:
                    cd:b5:a6:d9:14:a3:27:45:67:e8:e3:73:19:f1:af:
                    02:80:25:fa:27:e3:b5:18:9c:33:8e:16:4a:5a:df:
                    49:bc:f8:ae:07:19:88:04:44:d0:59:b6:f8:41:be:
                    7a:01:3a:47:4b:43:4e:5c:a7:d0:54:b9:0b:99:95:
                    61:7b:a6:8e:0b:49:5e:4d:4e:81:b9:3c:cc:35:a0:
                    23:0f:30:4b:79:4d:0d:c7:2d:05:9d:77:e3:f0:73:
                    cd:3f:93:a1:c9:a3:e9:57:7f:97:85:99:50:25:5c:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B3:8B:87:31:7C:4E:FD:AD:DF:03:58:4C:AD:35:89:F2:89:BB:21
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:8a:b4:d3:90:f4:d4:f7:84:01:44:96:3c:79:ac:68:cc:
         98:8a:98:93:bb:8d:6a:dd:35:d4:a9:68:9c:d0:ff:ff:c8:82:
         7e:6f:cb:68:df:41:3b:64:63:2f:03:95:50:06:0f:8a:e6:7b:
         ec:2d:25:ec:41:86:69:bc:b3:8c:82:6e:da:09:f0:7c:7a:22:
         5c:7c:c7:11:45:ae:80:30:07:e3:bc:f5:30:78:ad:e9:ac:5c:
         24:8d:28:e1:b5:fa:c3:33:40:22:bd:20:46:70:84:48:43:7f:
         d0:28:e6:ca:62:a9:22:2e:67:eb:1e:f7:a3:1b:03:91:5d:55:
         db:d9:4e:32:0b:a3:d4:d5:72:2c:71:91:61:9d:d9:5b:b9:6c:
         7f:19:13:67:9e:76:b3:ab:3e:2d:f9:3b:fa:69:6a:5b:b1:e8:
         02:1d:f7:d2:a3:03:16:62:44:ef:46:52:b8:56:d5:79:1a:c4:
         e8:0c:45:b0:63:53:b4:e9:01:46:84:20:1d:57:b9:78:28:2e:
         6a:10:f4:9e:1c:8e:15:c9:fc:50:f7:ef:52:ae:cd:03:2b:84:
         13:70:d7:5e:57:ae:29:33:70:94:ea:5c:71:a2:0f:73:de:47:
         16:10:14:9a:d9:d8:92:87:7e:c1:bf:a9:97:ae:e4:f5:76:b7:
         5d:9f:c7:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYeLbKQCH14qCpW3rZpoZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjQxMTIzMTAwMjA2WhcNMjQxMTI0MTAwMjA2WjAzMTEwLwYDVQQD
EygwZWIzOGI4NzMxN2M0ZWZkYWRkZjAzNTg0Y2FkMzU4OWYyODliYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspYqzPnlaeVaYCRDxLCN74t5XY2I
mZQDileB6aIiVg7Xub6TlzhU1LFxNV+nQ3XOZ5/SVl/kONFRyUT+JjMScynXWDkB
oqu99PtHIKgvzMaRpxWTjdgdALWaLQaMLmFl478Pjj1i83mOramhOllB+Xemfqjt
lo9+YIucXA3iPU7DO6rgeZcMYDbVA2JoL7FbOtTIuqjNtabZFKMnRWfo43MZ8a8C
gCX6J+O1GJwzjhZKWt9JvPiuBxmIBETQWbb4Qb56ATpHS0NOXKfQVLkLmZVhe6aO
C0leTU6BuTzMNaAjDzBLeU0Nxy0FnXfj8HPNP5OhyaPpV3+XhZlQJVyiKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6zi4cxfE79rd8DWEytNYnyibshMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSiKtNOQ
9NT3hAFEljx5rGjMmIqYk7uNat011KlonND//8iCfm/LaN9BO2RjLwOVUAYPiuZ7
7C0l7EGGabyzjIJu2gnwfHoiXHzHEUWugDAH47z1MHit6axcJI0o4bX6wzNAIr0g
RnCESEN/0CjmymKpIi5n6x73oxsDkV1V29lOMguj1NVyLHGRYZ3ZW7lsfxkTZ552
s6s+Lfk7+mlqW7HoAh330qMDFmJE70ZSuFbVeRrE6AxFsGNTtOkBRoQgHVe5eCgu
ahD0nhyOFcn8UPfvUq7NAyuEE3DXXleuKTNwlOpccaIPc95HFhAUmtnYkod+wb+p
l67k9Xa3XZ/HHw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:18 2024 by rpki-client on console-fra.rpki-client.org