Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
File:                     FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json)
Hash identifier:          pgaRk2QPbO28yvvSqipksbyDvEKle0S90C5IiwshLrg=
Subject key identifier:   18:30:97:B3:EA:6B:A8:E0:B9:79:2B:1C:5D:13:82:3D:BE:98:5C:04
Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1
Certificate issuer:       /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
Certificate serial:       019235126401D90AE9F95A9A28C8CDE454EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
Manifest number:          11D7
Signing time:             Fri 27 Sep 2024 20:00:50 +0000
Manifest this update:     Fri 27 Sep 2024 20:00:50 +0000
Manifest next update:     Sat 28 Sep 2024 20:00:50 +0000
Files and hashes:         1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: MFGSScwKhlXsV8/957mbVYXsmhKPFqBXpSxZcHydIYk=)
                          2: wIo7gRbp7iZb-2jeRG9lGC-Re6Y.roa (hash: c/R2Gc35kkHkhxpw6cMeoVLqiOGAlcAA0Z2M+GPKUTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:12:64:01:d9:0a:e9:f9:5a:9a:28:c8:cd:e4:54:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1
        Validity
            Not Before: Sep 27 20:00:50 2024 GMT
            Not After : Sep 28 20:00:50 2024 GMT
        Subject: CN=183097b3ea6ba8e0b9792b1c5d13823dbe985c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:93:ef:0c:1f:42:d7:54:c1:45:a1:d4:9f:
                    bf:11:f5:04:03:aa:e0:bb:df:dd:e6:c0:7b:f9:b8:
                    dc:9d:a8:16:1c:73:91:56:9e:cb:16:ee:b1:ad:90:
                    a5:7d:d8:87:fd:3c:be:e8:58:fa:fe:95:f9:23:3b:
                    fa:f3:e5:b0:6c:d0:c8:f0:39:20:fe:7f:81:bc:27:
                    9f:6e:e1:50:48:f4:86:aa:a6:b3:36:1d:b9:c4:d2:
                    3a:f6:8f:a3:e5:8b:90:c7:5b:d9:7b:28:e3:95:a8:
                    5e:e7:b2:8a:66:34:5a:1e:5a:1e:f6:6b:33:75:ce:
                    c3:ce:c6:d6:13:6b:cf:52:b8:92:cf:7c:07:45:a5:
                    fc:e9:a2:83:ca:2d:1f:f1:76:35:4b:56:64:c6:ef:
                    d8:9e:7a:dc:d3:74:ab:91:7e:f4:e6:94:44:36:d6:
                    bc:d0:40:8b:a4:9c:40:94:a6:80:83:2f:66:e9:12:
                    9f:e2:74:57:97:8d:e8:82:fe:12:08:cb:a0:6f:c9:
                    d9:84:43:bb:1e:6c:41:03:db:9d:6f:1e:66:5a:2a:
                    7f:69:68:fb:08:dc:b6:da:ba:fc:0d:01:39:cf:1e:
                    84:54:c4:ea:67:cd:72:8c:e7:96:bb:8f:15:b6:5b:
                    87:76:7e:2a:1f:29:6b:60:54:f3:d9:72:64:7e:cf:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:97:B3:EA:6B:A8:E0:B9:79:2B:1C:5D:13:82:3D:BE:98:5C:04
            X509v3 Authority Key Identifier:
                keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:91:fc:a6:c0:fa:c9:e3:06:e6:2e:37:a4:17:fc:d4:64:
         0f:b4:b8:b5:dc:bc:2c:3d:56:14:fb:a2:ab:24:d8:53:46:39:
         02:ce:a6:67:a2:e7:7f:67:c5:12:ec:d9:c6:77:37:24:6c:17:
         d6:b9:2d:d3:d0:e5:11:63:36:a6:1e:a9:f5:ff:70:93:d0:f3:
         dc:97:69:b2:63:f9:9b:02:3e:5b:92:23:9f:91:62:cb:6a:82:
         78:da:36:53:e6:69:ba:db:95:4a:cb:11:94:5d:c4:2f:73:e9:
         f2:68:2a:c4:86:4d:25:d6:00:e4:51:01:89:51:68:ab:d3:80:
         e2:9e:48:4e:50:7b:ff:eb:64:a7:ff:7b:c5:72:ee:e9:56:7e:
         31:84:19:47:57:5d:36:1a:80:ae:a3:d8:78:3a:97:9c:de:cf:
         48:31:ad:4d:8c:6e:44:15:d0:d1:16:2a:9c:30:99:c9:a0:88:
         e0:52:59:5b:31:28:3b:b7:6a:73:54:c7:83:ca:47:5f:47:e6:
         97:77:14:86:ba:9a:4e:f9:f0:6c:42:39:4c:15:ff:da:22:6c:
         9c:e2:82:32:5d:9c:7f:a8:fe:0e:7e:71:d1:50:82:7d:25:b7:
         88:ca:ea:bc:61:1d:56:bc:43:74:87:81:bf:90:27:f9:aa:0f:
         05:39:01:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI1EmQB2Qrp+VqaKMjN5FTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzg1YzA0OGNmM2Q1YjIxODY5ZjQ5NDM0ZjJkM2JiNDdk
NDNiYTEwHhcNMjQwOTI3MjAwMDUwWhcNMjQwOTI4MjAwMDUwWjAzMTEwLwYDVQQD
EygxODMwOTdiM2VhNmJhOGUwYjk3OTJiMWM1ZDEzODIzZGJlOTg1YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx26T7wwfQtdUwUWh1J+/EfUEA6rg
u9/d5sB7+bjcnagWHHORVp7LFu6xrZClfdiH/Ty+6Fj6/pX5Izv68+WwbNDI8Dkg
/n+BvCefbuFQSPSGqqazNh25xNI69o+j5YuQx1vZeyjjlahe57KKZjRaHloe9msz
dc7DzsbWE2vPUriSz3wHRaX86aKDyi0f8XY1S1Zkxu/Ynnrc03SrkX705pRENta8
0ECLpJxAlKaAgy9m6RKf4nRXl43ogv4SCMugb8nZhEO7HmxBA9udbx5mWip/aWj7
CNy22rr8DQE5zx6EVMTqZ81yjOeWu48VtluHdn4qHylrYFTz2XJkfs9u8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgwl7Pqa6jguXkrHF0Tgj2+mFwEMB8GA1UdIwQY
MBaAFBZ4XASM89WyGGn0lDTy07tH1DuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAt
YWIzN2ZlZDUyYTRkLzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAtYWIzN2ZlZDUyYTRk
LzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsKR/KbA
+snjBuYuN6QX/NRkD7S4tdy8LD1WFPuiqyTYU0Y5As6mZ6Lnf2fFEuzZxnc3JGwX
1rkt09DlEWM2ph6p9f9wk9Dz3JdpsmP5mwI+W5Ijn5Fiy2qCeNo2U+ZputuVSssR
lF3EL3Pp8mgqxIZNJdYA5FEBiVFoq9OA4p5ITlB7/+tkp/97xXLu6VZ+MYQZR1dd
NhqArqPYeDqXnN7PSDGtTYxuRBXQ0RYqnDCZyaCI4FJZWzEoO7dqc1THg8pHX0fm
l3cUhrqaTvnwbEI5TBX/2iJsnOKCMl2cf6j+Dn5x0VCCfSW3iMrqvGEdVrxDdIeB
v5An+aoPBTkBWg==
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:21:34 2024 by rpki-client on console-fra.rpki-client.org