Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File:                     4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier:          YEiI1OrZbYbU0JWyEAJkoOFw3Zf5HeZ3CDFC6Mmyjcs=
Subject key identifier:   E8:3E:AF:A3:29:E9:85:29:31:54:C4:50:C1:14:E6:45:60:51:DE:50
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer:       /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial:       019406EA988B45654DA76B1F7E2BAE08CB29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 07:00:25 +0000
Manifest this update:     Fri 27 Dec 2024 07:00:25 +0000
Manifest next update:     Sat 28 Dec 2024 07:00:25 +0000
Files and hashes:         1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: HqRef0aG0PZKrMv/VigZtDJqW1r160KX0SzJQb3Ta/c=)
                          2: GxZvgHEXdH-35Y6dZJ7Vm3sf8kU.roa (hash: QWBg/VyFQib5CPJSfA8myIWjw2hVYghwkT9NOeHoopo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:ea:98:8b:45:65:4d:a7:6b:1f:7e:2b:ae:08:cb:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
        Validity
            Not Before: Dec 27 07:00:25 2024 GMT
            Not After : Dec 28 07:00:25 2024 GMT
        Subject: CN=e83eafa329e985293154c450c114e6456051de50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:c4:50:df:db:38:b4:5c:bb:e2:72:3e:84:
                    68:9b:5a:7b:8a:36:a8:a4:e7:2d:20:d4:f1:e2:02:
                    ea:42:9c:34:bd:3f:4a:b3:39:3d:b3:78:d0:a6:dd:
                    fd:bf:1d:82:cf:1e:0c:f3:78:7b:04:fc:03:88:e5:
                    01:4b:ed:fc:10:93:04:63:b3:80:1f:99:10:38:fe:
                    01:02:7a:fe:43:de:5b:a6:9d:9b:a2:15:c2:e9:dd:
                    f4:1e:50:a6:f8:c6:92:a9:9f:53:56:b6:02:13:0a:
                    09:fb:ed:7b:37:7c:64:1a:27:7e:53:a5:65:f8:75:
                    a5:62:6d:47:6d:ce:a6:8e:15:98:e7:ba:6f:f3:df:
                    c2:d7:20:70:47:e1:c8:31:a2:8d:d0:2e:e4:5e:8c:
                    e0:c2:14:44:90:b3:eb:c6:57:80:64:36:93:d6:a5:
                    24:22:90:51:2e:44:ba:3e:ca:26:10:a4:95:de:b6:
                    13:7a:5c:28:3d:2f:70:26:d4:59:cb:e8:8f:a2:3d:
                    5d:27:da:71:e9:44:36:fa:66:02:1f:52:90:9f:98:
                    90:9e:9a:79:da:1d:19:06:60:34:59:a6:14:be:8d:
                    d7:b5:0d:67:61:7d:d9:b8:bd:5c:9e:d9:33:dd:4e:
                    94:12:f1:fd:b5:b5:24:b1:b8:0f:09:81:10:f9:5e:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:AF:A3:29:E9:85:29:31:54:C4:50:C1:14:E6:45:60:51:DE:50
            X509v3 Authority Key Identifier:
                keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:93:25:06:ed:e8:dd:2e:45:e7:25:ef:b4:1f:f4:da:54:ca:
         7c:2f:d2:78:50:fd:45:98:7f:9b:11:29:4a:a6:b2:2b:b4:7c:
         b2:16:84:f0:21:be:55:8d:0c:f1:76:3c:a0:56:da:54:1c:d0:
         18:56:3e:38:51:df:f3:62:9d:97:b2:b1:b0:ec:b0:82:02:6e:
         d1:6f:f8:6c:b9:76:25:13:4a:5d:7b:1a:61:1e:3d:03:1a:93:
         a4:01:cc:f5:76:63:9f:04:83:fe:22:f4:1b:ed:57:e4:aa:87:
         f7:c0:23:19:ad:da:f1:54:d5:d0:fd:3d:87:d5:d4:f8:64:6d:
         8d:bf:c7:6c:13:d3:0f:f9:31:1d:04:41:dd:e3:35:59:7e:55:
         86:e5:01:13:4e:5e:73:8d:65:18:b4:39:e0:00:cb:d2:d8:84:
         bc:74:e6:b9:91:24:b3:24:4e:97:2f:6f:a4:3e:29:93:77:d5:
         91:08:18:ea:89:2a:07:32:f9:e1:07:a4:03:8f:60:b1:61:e3:
         cb:b7:27:15:a5:83:c5:3a:82:f7:b8:1f:0d:e8:9a:6c:97:7a:
         55:5e:7c:33:6c:eb:b5:ab:79:d3:de:8f:84:83:5e:a1:f1:6f:
         c0:f4:fd:35:72:ce:b1:d0:c4:35:4a:b9:76:d7:9a:8d:3d:ab:
         22:17:25:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQG6piLRWVNp2sffiuuCMspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3
YTY1ZTgwHhcNMjQxMjI3MDcwMDI1WhcNMjQxMjI4MDcwMDI1WjAzMTEwLwYDVQQD
EyhlODNlYWZhMzI5ZTk4NTI5MzE1NGM0NTBjMTE0ZTY0NTYwNTFkZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgbEUN/bOLRcu+JyPoRom1p7ijao
pOctINTx4gLqQpw0vT9Kszk9s3jQpt39vx2Czx4M83h7BPwDiOUBS+38EJMEY7OA
H5kQOP4BAnr+Q95bpp2bohXC6d30HlCm+MaSqZ9TVrYCEwoJ++17N3xkGid+U6Vl
+HWlYm1Hbc6mjhWY57pv89/C1yBwR+HIMaKN0C7kXozgwhREkLPrxleAZDaT1qUk
IpBRLkS6PsomEKSV3rYTelwoPS9wJtRZy+iPoj1dJ9px6UQ2+mYCH1KQn5iQnpp5
2h0ZBmA0WaYUvo3XtQ1nYX3ZuL1cntkz3U6UEvH9tbUksbgPCYEQ+V7e7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg+r6Mp6YUpMVTEUMEU5kVgUd5QMB8GA1UdIwQY
MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt
MjhlNzczZGI5MWMyLzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy
LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJMlBu3o
3S5F5yXvtB/02lTKfC/SeFD9RZh/mxEpSqayK7R8shaE8CG+VY0M8XY8oFbaVBzQ
GFY+OFHf82Kdl7KxsOywggJu0W/4bLl2JRNKXXsaYR49AxqTpAHM9XZjnwSD/iL0
G+1X5KqH98AjGa3a8VTV0P09h9XU+GRtjb/HbBPTD/kxHQRB3eM1WX5VhuUBE05e
c41lGLQ54ADL0tiEvHTmuZEksyROly9vpD4pk3fVkQgY6okqBzL54QekA49gsWHj
y7cnFaWDxTqC97gfDeiabJd6VV58M2zrtat5096PhINeofFvwPT9NXLOsdDENUq5
dteajT2rIhclhg==
-----END CERTIFICATE-----
Generated at Fri Dec 27 11:14:26 2024 by rpki-client on console-fra.rpki-client.org