Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File:                     0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier:          a6CGECuY9XiCXS2jYcGsthVZ5w328mmR2erk6/8GyGo=
Subject key identifier:   55:D5:8B:5B:29:6B:5D:F2:13:96:3A:C7:63:2A:11:CC:1C:E4:5E:BA
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer:       /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial:       01936A466A7561355139452B7908A43001C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number:          127A
Signing time:             Tue 26 Nov 2024 21:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:19 +0000
Files and hashes:         1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: jLnFiLa+D1t9YCyiEvryx7Su0Y2XjhEt5igl0MzsqAw=)
                          2: 1RAvuZXh1T9dhwm7xWxHgrCQRto.roa (hash: UzMwILnQdFS4V/6Vtsizl42DGZ1zDfU1nuYsFQEdLpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:6a:75:61:35:51:39:45:2b:79:08:a4:30:01:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
        Validity
            Not Before: Nov 26 21:00:19 2024 GMT
            Not After : Nov 27 21:00:19 2024 GMT
        Subject: CN=55d58b5b296b5df213963ac7632a11cc1ce45eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:1a:f8:b9:bf:ad:92:f0:02:02:91:d8:9f:
                    e8:c5:94:ac:3f:6b:d2:13:f1:01:0b:ed:d3:df:9d:
                    29:29:48:38:eb:d0:b2:58:b3:af:9b:e2:97:73:ef:
                    31:01:b7:75:6a:4a:06:4b:fc:dd:df:4e:3b:6c:f4:
                    70:0b:8b:4d:7b:88:4f:be:d1:b4:c5:db:e3:14:c8:
                    40:b1:d8:57:1a:a3:10:ec:82:41:44:12:32:14:df:
                    f7:14:c2:16:11:8a:bb:cf:b2:bb:96:76:36:c0:23:
                    1b:7f:50:f3:9c:e5:b3:bf:86:fb:52:4d:26:73:9b:
                    7a:43:18:76:87:3a:af:4d:7e:f9:65:02:d5:cc:14:
                    30:e8:c3:e6:e8:60:f3:ac:9a:84:4f:06:f7:fb:83:
                    89:e6:eb:64:47:fc:e4:1c:4c:30:e7:d9:00:ee:07:
                    86:55:38:4c:0e:de:d8:d2:ca:7d:49:b3:85:5b:e7:
                    07:26:49:a6:fa:cc:ea:04:6a:02:8e:da:8a:ca:f4:
                    43:b4:2b:d8:3d:d4:e9:06:18:e1:43:d0:c0:88:b5:
                    83:80:ce:39:b1:c2:75:0e:c8:64:09:22:e8:f5:96:
                    fc:2c:48:c7:78:b0:f8:11:95:a7:68:8c:96:4b:ba:
                    71:0f:44:92:c1:77:44:08:44:01:fe:40:08:35:3b:
                    aa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:8B:5B:29:6B:5D:F2:13:96:3A:C7:63:2A:11:CC:1C:E4:5E:BA
            X509v3 Authority Key Identifier:
                keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:b7:c7:bc:3b:d5:8c:e9:62:e5:75:27:2f:0a:ee:27:0b:
         87:2e:83:b8:df:96:24:5f:54:02:83:54:f0:c0:82:37:18:9d:
         37:50:bc:b1:17:48:be:20:41:51:aa:d3:11:97:de:c1:0d:aa:
         fc:a4:6e:d8:4f:5c:78:87:d3:42:5b:c2:84:e1:67:4e:eb:34:
         04:01:6e:15:38:b0:77:44:79:28:d6:2c:17:34:26:84:2d:86:
         9e:11:be:a8:79:8d:32:a9:27:a1:be:d3:68:11:cb:8c:26:3d:
         21:31:c8:c1:be:03:b2:ec:ab:57:82:e1:0a:3f:1b:64:f9:ad:
         ea:b4:63:61:99:17:b1:ed:30:5e:4f:e3:b7:2d:9c:49:90:87:
         57:c5:13:d3:08:13:6d:9b:19:17:61:87:a7:6f:3f:e3:24:9c:
         64:01:1c:8d:63:3b:32:9e:b2:42:db:50:0b:1a:14:d8:87:68:
         33:70:7d:28:71:84:17:8a:fd:41:07:c1:95:36:c8:d5:ee:1b:
         31:fc:cf:d1:9b:0d:23:ea:63:d7:be:5e:3a:dd:8d:fb:f4:ac:
         0f:be:5f:72:37:d1:9a:60:8d:8b:d4:70:ac:af:04:51:7d:8c:
         4b:4a:a1:a7:8f:53:b5:c6:55:e5:44:e9:81:c9:67:5b:16:8b:
         47:49:01:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRmp1YTVROUUreQikMAHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjQxMTI2MjEwMDE5WhcNMjQxMTI3MjEwMDE5WjAzMTEwLwYDVQQD
Eyg1NWQ1OGI1YjI5NmI1ZGYyMTM5NjNhYzc2MzJhMTFjYzFjZTQ1ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnsa+Lm/rZLwAgKR2J/oxZSsP2vS
E/EBC+3T350pKUg469CyWLOvm+KXc+8xAbd1akoGS/zd3047bPRwC4tNe4hPvtG0
xdvjFMhAsdhXGqMQ7IJBRBIyFN/3FMIWEYq7z7K7lnY2wCMbf1DznOWzv4b7Uk0m
c5t6Qxh2hzqvTX75ZQLVzBQw6MPm6GDzrJqETwb3+4OJ5utkR/zkHEww59kA7geG
VThMDt7Y0sp9SbOFW+cHJkmm+szqBGoCjtqKyvRDtCvYPdTpBhjhQ9DAiLWDgM45
scJ1DshkCSLo9Zb8LEjHeLD4EZWnaIyWS7pxD0SSwXdECEQB/kAINTuq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXVi1spa13yE5Y6x2MqEcwc5F66MB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHK3x7w7
1YzpYuV1Jy8K7icLhy6DuN+WJF9UAoNU8MCCNxidN1C8sRdIviBBUarTEZfewQ2q
/KRu2E9ceIfTQlvChOFnTus0BAFuFTiwd0R5KNYsFzQmhC2GnhG+qHmNMqknob7T
aBHLjCY9ITHIwb4DsuyrV4LhCj8bZPmt6rRjYZkXse0wXk/jty2cSZCHV8UT0wgT
bZsZF2GHp28/4yScZAEcjWM7Mp6yQttQCxoU2IdoM3B9KHGEF4r9QQfBlTbI1e4b
MfzP0ZsNI+pj175eOt2N+/SsD75fcjfRmmCNi9RwrK8EUX2MS0qhp49TtcZV5UTp
gclnWxaLR0kBvA==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:06 2024 by rpki-client on console-ams.rpki-client.org