Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File:                     8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier:          SCqY8tRyXDPrSassBSrVlSWeN4MoiGAnZwDiJpBjxiA=
Subject key identifier:   CE:EA:68:23:8F:24:EB:D4:51:24:43:92:B8:73:2D:AB:84:F4:B1:DC
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer:       /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial:       01936B22BCE34EACF62F744C79DF023B1C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number:          06FE
Signing time:             Wed 27 Nov 2024 01:00:58 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:58 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:58 +0000
Files and hashes:         1: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: ZV1nHAOYVHuh99EbF2O7ztDqY/g9m04tvR6UUn32YTw=)
                          2: GG5qqaTRrpGVNS0-nzsQT6YZYPs.roa (hash: E+FMqJBNxSz9JyrQ9MPwUYzePFSB03Uy6LoaMbCYyl0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:bc:e3:4e:ac:f6:2f:74:4c:79:df:02:3b:1c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
        Validity
            Not Before: Nov 27 01:00:58 2024 GMT
            Not After : Nov 28 01:00:58 2024 GMT
        Subject: CN=ceea68238f24ebd451244392b8732dab84f4b1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:39:3b:f1:39:cf:bd:a1:69:12:5c:0e:0a:
                    32:56:79:a0:da:20:0f:3d:c5:fe:fa:f6:cb:9c:34:
                    30:4d:b0:c4:56:99:08:5a:b1:d1:c1:f6:d9:f9:ce:
                    27:22:e3:9c:6f:da:bf:d0:fd:71:e1:78:70:d3:d3:
                    e2:cf:dd:0d:4b:ed:21:73:2d:a3:6d:6b:2c:4b:6b:
                    7b:f9:cc:2f:87:f5:4b:28:51:cb:d0:55:f4:8a:ee:
                    48:f5:1c:16:37:85:24:81:91:eb:3d:27:82:c6:40:
                    4f:94:b5:d4:3b:70:0a:48:df:da:4d:03:93:7e:7c:
                    99:4e:c4:30:c6:59:68:2a:fe:7c:da:19:d6:9e:a6:
                    6a:63:14:e9:81:9e:85:cf:dc:9e:4a:05:42:ff:1b:
                    52:8e:06:3d:cf:4f:6c:b3:50:3b:f5:ea:e5:10:56:
                    25:6c:a9:10:1f:66:83:a1:98:8f:75:8c:c4:c5:61:
                    c8:0d:de:02:d4:1e:99:de:91:94:be:9c:0d:ec:00:
                    aa:d8:9c:44:84:16:8b:38:83:4b:4c:6b:de:ea:97:
                    fa:a5:1a:16:0a:63:dc:fc:78:dc:28:6b:c4:a7:73:
                    d8:75:25:fa:1c:09:97:82:b2:18:d3:33:6e:13:4f:
                    87:56:0e:ff:03:92:db:98:a8:d1:a4:55:b0:5e:67:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EA:68:23:8F:24:EB:D4:51:24:43:92:B8:73:2D:AB:84:F4:B1:DC
            X509v3 Authority Key Identifier:
                keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:33:2c:7e:cb:c9:eb:75:24:f3:ca:6b:ba:dd:71:55:f3:f6:
         5b:2e:d4:4c:42:12:58:25:21:02:cb:ba:df:66:77:6a:8b:9b:
         26:16:e6:b3:02:d9:b6:18:ae:6c:0e:6a:07:9c:89:59:fc:4e:
         e3:db:4a:fa:91:2b:af:6b:57:a4:5f:51:4a:38:01:cf:06:d9:
         cd:a1:1e:82:1e:7e:9b:cc:23:1c:fa:95:f2:69:b0:a2:cb:d5:
         22:37:5c:ea:a4:8b:35:e9:2f:bc:b0:95:42:d7:62:b1:be:fd:
         29:aa:ec:e7:6c:9a:91:8d:10:d3:46:ee:a9:e6:ae:12:e0:6c:
         72:b4:3a:8d:1e:83:66:9f:a7:c5:5a:e9:b6:ae:05:5f:00:f8:
         03:f6:41:56:38:21:98:65:c0:47:4e:fd:53:2f:c2:22:ed:8f:
         90:7d:47:03:ec:dd:ea:28:41:f0:df:d9:68:2e:11:ef:38:5d:
         0a:e0:8c:54:c5:ce:13:ed:db:c4:9c:33:77:44:04:70:4f:08:
         ab:ad:1c:01:d4:6f:24:4e:38:0d:05:74:d3:97:7e:2d:b6:a3:
         e7:5c:9d:55:71:6f:c4:76:c0:20:3b:cc:74:2a:a1:3d:36:99:
         3c:9b:ee:fc:de:f7:f3:31:95:c3:a9:8f:9a:b4:b2:ad:72:fb:
         9f:05:d8:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIrzjTqz2L3RMed8COxxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmMxMWU2ZWNkM2EwYWYzZWU0Mzk0ZGNiYjdiM2VmOTAx
ODdkMzAwHhcNMjQxMTI3MDEwMDU4WhcNMjQxMTI4MDEwMDU4WjAzMTEwLwYDVQQD
EyhjZWVhNjgyMzhmMjRlYmQ0NTEyNDQzOTJiODczMmRhYjg0ZjRiMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnA5O/E5z72haRJcDgoyVnmg2iAP
PcX++vbLnDQwTbDEVpkIWrHRwfbZ+c4nIuOcb9q/0P1x4Xhw09Piz90NS+0hcy2j
bWssS2t7+cwvh/VLKFHL0FX0iu5I9RwWN4UkgZHrPSeCxkBPlLXUO3AKSN/aTQOT
fnyZTsQwxlloKv582hnWnqZqYxTpgZ6Fz9yeSgVC/xtSjgY9z09ss1A79erlEFYl
bKkQH2aDoZiPdYzExWHIDd4C1B6Z3pGUvpwN7ACq2JxEhBaLOINLTGve6pf6pRoW
CmPc/HjcKGvEp3PYdSX6HAmXgrIY0zNuE0+HVg7/A5LbmKjRpFWwXmfMswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7qaCOPJOvUUSRDkrhzLauE9LHcMB8GA1UdIwQY
MBaAFPK8Eebs06CvPuQ5Tcu3s++QGH0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYt
N2M0MjQ3YWU1YzFiLzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wZDIzNDQtOTlkNy00MzEzLWIxYjYtN2M0MjQ3YWU1YzFi
LzEvOHJ3UjV1elRvSzgtNURsTnk3ZXo3NUFZZlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzMsfsvJ
63Uk88prut1xVfP2Wy7UTEISWCUhAsu632Z3aoubJhbmswLZthiubA5qB5yJWfxO
49tK+pErr2tXpF9RSjgBzwbZzaEegh5+m8wjHPqV8mmwosvVIjdc6qSLNekvvLCV
Qtdisb79Kars52yakY0Q00buqeauEuBscrQ6jR6DZp+nxVrptq4FXwD4A/ZBVjgh
mGXAR079Uy/CIu2PkH1HA+zd6ihB8N/ZaC4R7zhdCuCMVMXOE+3bxJwzd0QEcE8I
q60cAdRvJE44DQV005d+Lbaj51ydVXFvxHbAIDvMdCqhPTaZPJvu/N738zGVw6mP
mrSyrXL7nwXY9w==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:36:51 2024 by rpki-client on console-ams.rpki-client.org