Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
File:                     FhaeT1b0AaROVKG9hr8svYa4hnM.mft (raw, json)
Hash identifier:          ZQm8/xpuZRUo+SvR5w/fYgnPCUu5yzmtAcF9WZPUfxA=
Subject key identifier:   B5:1E:E6:6B:D5:63:80:27:53:93:32:95:08:4A:50:58:CC:DC:5A:34
Authority key identifier: 16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73
Certificate issuer:       /CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
Certificate serial:       0193568AAAB6C7697C52CD4A8B453187C814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
Manifest number:          0FBE
Signing time:             Sat 23 Nov 2024 01:02:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:28 +0000
Files and hashes:         1: FhaeT1b0AaROVKG9hr8svYa4hnM.crl (hash: /sRBPELvfMD3zzDVlfzln/HCFISuQflpv4qQqCSpgDw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:aa:b6:c7:69:7c:52:cd:4a:8b:45:31:87:c8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16169e4f56f401a44e54a1bd86bf2cbd86b88673
        Validity
            Not Before: Nov 23 01:02:28 2024 GMT
            Not After : Nov 24 01:02:28 2024 GMT
        Subject: CN=b51ee66bd563802753933295084a5058ccdc5a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:ed:7e:c5:28:f1:c6:6d:8e:b3:3d:2c:39:
                    3c:9d:a5:17:55:3f:53:02:cb:52:84:a3:f1:53:4f:
                    ec:e4:ba:65:c7:35:fe:d6:d8:1e:dd:06:48:b8:ba:
                    7f:d5:17:ce:34:4e:e6:6e:76:27:d4:3e:a0:a4:c9:
                    c3:07:b5:e9:f1:d5:c8:9b:27:00:97:b7:66:bd:2a:
                    38:66:ec:a6:5e:b4:3c:2a:8d:eb:ec:04:d3:8c:b5:
                    5c:8b:60:55:26:50:37:07:e2:48:45:a9:e6:cc:41:
                    70:7a:52:8a:a6:d7:af:03:8e:e7:c6:28:ec:89:40:
                    de:b7:cc:c4:c3:23:16:73:cb:dd:30:52:72:36:d1:
                    9e:25:af:3e:ff:dd:ec:b7:d3:d8:38:d4:b0:41:0a:
                    9c:d8:09:e3:5f:70:0a:21:0b:12:8f:ee:57:a3:c8:
                    cf:b3:7f:7a:c9:43:56:18:c3:85:ad:7f:0b:d8:04:
                    a8:7f:b5:05:60:7e:a8:0e:25:f1:7c:12:86:16:f2:
                    9f:75:1b:58:df:67:1c:70:4d:7f:26:aa:31:43:ea:
                    27:bc:d0:6b:6a:75:9a:1c:ed:fb:98:ac:db:56:a3:
                    e4:f6:0d:f2:f4:c2:4f:53:7e:eb:bc:3e:29:8c:2f:
                    b0:73:6c:3e:e6:a8:7d:c9:3d:b2:ea:76:56:91:52:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:E6:6B:D5:63:80:27:53:93:32:95:08:4A:50:58:CC:DC:5A:34
            X509v3 Authority Key Identifier:
                keyid:16:16:9E:4F:56:F4:01:A4:4E:54:A1:BD:86:BF:2C:BD:86:B8:86:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhaeT1b0AaROVKG9hr8svYa4hnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/37efd2-5770-496a-b154-408e0f570fbd/1/FhaeT1b0AaROVKG9hr8svYa4hnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:e4:30:e4:04:56:fc:0b:f8:08:36:fa:ef:4c:3f:d9:8b:
         5f:b5:6e:6a:98:c1:a4:51:48:b5:ac:f1:64:38:f6:24:e6:8c:
         7e:a0:c0:36:ec:8a:38:8b:64:18:a9:86:8a:33:be:79:2a:1a:
         14:04:cc:90:e5:72:4a:b7:84:35:7d:05:db:27:8f:92:39:19:
         41:94:b7:3e:33:e6:d0:9c:09:54:63:30:d3:06:77:98:87:89:
         12:79:c2:df:e2:da:e6:fe:20:96:04:26:51:69:d7:cb:05:16:
         44:a4:40:fd:e4:34:aa:2d:ad:a1:85:7b:aa:97:9c:3d:06:7a:
         cb:df:16:4b:b4:a7:83:fc:bc:90:fd:50:1e:e2:07:22:c5:38:
         93:ef:17:48:3d:cf:16:d0:af:de:52:e4:b7:b7:ad:4e:53:fa:
         b5:e3:e9:67:0b:9a:20:10:7b:f6:46:b6:97:5a:b0:01:98:40:
         ee:74:e2:30:8f:84:7e:cf:a3:dd:f4:60:a1:ea:22:e7:75:af:
         36:2b:61:59:2b:d3:53:7c:e5:b2:fc:4b:29:f0:0c:e6:a4:d7:
         39:fa:00:87:e6:29:6f:75:3a:28:3b:b2:48:26:b5:f0:39:4d:
         a5:8e:90:09:7c:46:bf:d0:fd:68:95:40:f9:ab:96:3a:bf:68:
         a2:79:b1:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiqq2x2l8Us1Ki0Uxh8gUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MTY5ZTRmNTZmNDAxYTQ0ZTU0YTFiZDg2YmYyY2JkODZi
ODg2NzMwHhcNMjQxMTIzMDEwMjI4WhcNMjQxMTI0MDEwMjI4WjAzMTEwLwYDVQQD
EyhiNTFlZTY2YmQ1NjM4MDI3NTM5MzMyOTUwODRhNTA1OGNjZGM1YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG/tfsUo8cZtjrM9LDk8naUXVT9T
AstShKPxU0/s5LplxzX+1tge3QZIuLp/1RfONE7mbnYn1D6gpMnDB7Xp8dXImycA
l7dmvSo4ZuymXrQ8Ko3r7ATTjLVci2BVJlA3B+JIRanmzEFwelKKptevA47nxijs
iUDet8zEwyMWc8vdMFJyNtGeJa8+/93st9PYONSwQQqc2AnjX3AKIQsSj+5Xo8jP
s396yUNWGMOFrX8L2ASof7UFYH6oDiXxfBKGFvKfdRtY32cccE1/JqoxQ+onvNBr
anWaHO37mKzbVqPk9g3y9MJPU37rvD4pjC+wc2w+5qh9yT2y6nZWkVIj1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUe5mvVY4AnU5MylQhKUFjM3Fo0MB8GA1UdIwQY
MBaAFBYWnk9W9AGkTlShvYa/LL2GuIZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmhhZVQxYjBBYVJPVktHOWhyOHN2WWE0aG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zN2VmZDItNTc3MC00OTZhLWIxNTQt
NDA4ZTBmNTcwZmJkLzEvRmhhZVQxYjBBYVJPVktHOWhyOHN2WWE0aG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zN2VmZDItNTc3MC00OTZhLWIxNTQtNDA4ZTBmNTcwZmJk
LzEvRmhhZVQxYjBBYVJPVktHOWhyOHN2WWE0aG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLDkMOQE
VvwL+Ag2+u9MP9mLX7VuapjBpFFItazxZDj2JOaMfqDANuyKOItkGKmGijO+eSoa
FATMkOVySreENX0F2yePkjkZQZS3PjPm0JwJVGMw0wZ3mIeJEnnC3+La5v4glgQm
UWnXywUWRKRA/eQ0qi2toYV7qpecPQZ6y98WS7Sng/y8kP1QHuIHIsU4k+8XSD3P
FtCv3lLkt7etTlP6tePpZwuaIBB79ka2l1qwAZhA7nTiMI+Efs+j3fRgoeoi53Wv
NithWSvTU3zlsvxLKfAM5qTXOfoAh+Ypb3U6KDuySCa18DlNpY6QCXxGv9D9aJVA
+auWOr9oonmxrQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:16 2024 by rpki-client on console-fra.rpki-client.org