Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File:                     ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier:          qxY1iqLFCgBklG9XuqHXDYDuu5oAejNqyep1xwnN8TY=
Subject key identifier:   AF:DB:BD:29:A2:23:81:81:7B:5E:6C:21:F0:5C:7F:BA:B6:61:63:4D
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer:       /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial:       01923625B7AA9BE52D853466CBAD00E06A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number:          074A
Signing time:             Sat 28 Sep 2024 01:01:34 +0000
Manifest this update:     Sat 28 Sep 2024 01:01:34 +0000
Manifest next update:     Sun 29 Sep 2024 01:01:34 +0000
Files and hashes:         1: WK-dS27G35AxWVVIGLPvIIeDn60.roa (hash: p24lkRsNQKzxv9yCaRoJp+A/ByFmRZPUjz5eWqifHfY=)
                          2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: tmpZXzjZHFSoObGS/nVulPLVDEYjeMCNxKfQFJfLDX8=)
                          3: pgjd9NjG8xS89lbrKWHJulQu2k8.roa (hash: D++T5vhQpPT1OnGP52ON1AJ2apECe2E3RvJWY5328EU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:25:b7:aa:9b:e5:2d:85:34:66:cb:ad:00:e0:6a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
        Validity
            Not Before: Sep 28 01:01:34 2024 GMT
            Not After : Sep 29 01:01:34 2024 GMT
        Subject: CN=afdbbd29a22381817b5e6c21f05c7fbab661634d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:3c:4e:8f:42:65:09:d4:9c:23:26:22:56:
                    26:f9:61:01:5d:53:7a:29:ab:ef:6a:cd:d4:79:7a:
                    ec:0e:79:8a:40:ff:e4:43:8b:b9:97:aa:f4:a0:3b:
                    ba:b5:a0:41:6f:f0:ea:17:19:f1:f8:06:e6:11:76:
                    a4:3a:23:9b:84:d2:d5:6c:75:ba:39:07:09:a6:a5:
                    41:f8:59:c6:47:f6:1f:2d:c7:c3:81:1d:84:7b:a4:
                    a8:f8:60:79:dd:f7:57:e0:4f:56:93:f7:46:6e:ed:
                    01:bf:e4:d7:3f:cd:03:95:6a:e9:39:a3:03:fc:89:
                    f1:4e:cd:55:9a:7e:df:00:7e:bd:e5:f2:d7:a8:c8:
                    b9:0f:6d:5c:6d:d6:aa:e7:40:77:c0:1f:3a:81:2e:
                    01:91:d2:dc:86:73:15:84:ef:75:53:e0:75:f6:42:
                    04:c5:1c:28:57:f3:bc:75:d6:71:8e:86:0c:22:26:
                    d6:a0:be:a0:b1:37:43:c8:f8:aa:ef:c4:ea:99:fa:
                    b3:6e:da:d1:23:d1:03:2d:10:78:fc:5a:bc:5f:5e:
                    f9:44:25:c3:06:a5:bf:30:89:3e:e4:60:36:49:9a:
                    f5:02:19:b6:36:99:cf:87:73:64:a7:46:a0:04:bd:
                    22:9f:ac:d8:a6:05:cf:56:e9:2d:96:9f:57:d8:6d:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DB:BD:29:A2:23:81:81:7B:5E:6C:21:F0:5C:7F:BA:B6:61:63:4D
            X509v3 Authority Key Identifier:
                keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:31:b5:1b:13:2f:b2:de:d3:2c:55:09:64:3a:a0:58:c1:71:
         80:ba:68:c0:6a:7e:92:38:c3:c0:bd:ce:c8:da:82:b4:78:2b:
         fb:e1:66:40:f4:52:2a:bb:35:cf:8a:1d:03:cb:fb:26:48:19:
         b5:ad:b6:b2:53:2c:88:e2:f5:e2:a4:f9:1a:65:58:1c:e8:0b:
         f0:04:3d:05:a3:d7:54:65:b5:fb:09:73:63:41:8b:b4:bc:48:
         2c:e8:ab:12:f1:c4:c6:a6:95:40:2b:33:b6:31:18:50:6b:91:
         dc:3e:02:5a:46:32:c1:b1:f9:c5:a8:51:a9:e6:df:73:f8:e5:
         92:bf:9b:a9:b3:ab:5a:55:1d:b9:b8:55:24:c5:1d:60:49:ff:
         91:86:de:c9:fd:f8:7b:7d:13:16:46:76:c3:6d:8a:10:a7:4a:
         37:f9:9d:20:e2:df:06:9f:2c:08:27:f5:38:20:37:ab:d4:3f:
         a3:ce:a3:9b:af:e6:f0:3f:95:c5:7a:75:cd:27:f8:6e:92:d6:
         7c:cc:65:32:77:e8:ab:5d:77:e5:94:5c:dd:11:1d:3c:ba:96:
         86:d8:7c:af:12:eb:88:7f:9a:b1:9d:0b:2c:14:a9:f7:06:f5:
         d5:cf:1a:96:34:51:d5:96:38:7f:d4:ee:1e:ff:bd:95:e0:bb:
         f3:2c:73:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI2Jbeqm+UthTRmy60A4GpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZWRmYTQxNDk0NGQwMTBhYzY5ZWU1YmZiMjI3NzNiMjRi
MjdlZmIwHhcNMjQwOTI4MDEwMTM0WhcNMjQwOTI5MDEwMTM0WjAzMTEwLwYDVQQD
EyhhZmRiYmQyOWEyMjM4MTgxN2I1ZTZjMjFmMDVjN2ZiYWI2NjE2MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVI8To9CZQnUnCMmIlYm+WEBXVN6
Kavvas3UeXrsDnmKQP/kQ4u5l6r0oDu6taBBb/DqFxnx+AbmEXakOiObhNLVbHW6
OQcJpqVB+FnGR/YfLcfDgR2Ee6So+GB53fdX4E9Wk/dGbu0Bv+TXP80DlWrpOaMD
/InxTs1Vmn7fAH695fLXqMi5D21cbdaq50B3wB86gS4BkdLchnMVhO91U+B19kIE
xRwoV/O8ddZxjoYMIibWoL6gsTdDyPiq78TqmfqzbtrRI9EDLRB4/Fq8X175RCXD
BqW/MIk+5GA2SZr1Ahm2NpnPh3Nkp0agBL0in6zYpgXPVuktlp9X2G0kEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/bvSmiI4GBe15sIfBcf7q2YWNNMB8GA1UdIwQY
MBaAFInt+kFJRNAQrGnuW/sidzsksn77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYt
ZmViYzFlZDNjZWJhLzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85MzZjYmItYmFjNC00ZmRlLThkZWYtZmViYzFlZDNjZWJh
LzEvaWUzNlFVbEUwQkNzYWU1Yi15SjNPeVN5ZnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDG1GxMv
st7TLFUJZDqgWMFxgLpowGp+kjjDwL3OyNqCtHgr++FmQPRSKrs1z4odA8v7JkgZ
ta22slMsiOL14qT5GmVYHOgL8AQ9BaPXVGW1+wlzY0GLtLxILOirEvHExqaVQCsz
tjEYUGuR3D4CWkYywbH5xahRqebfc/jlkr+bqbOrWlUdubhVJMUdYEn/kYbeyf34
e30TFkZ2w22KEKdKN/mdIOLfBp8sCCf1OCA3q9Q/o86jm6/m8D+VxXp1zSf4bpLW
fMxlMnfoq1135ZRc3REdPLqWhth8rxLriH+asZ0LLBSp9wb11c8aljRR1ZY4f9Tu
Hv+9leC78yxzgg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:04:54 2024 by rpki-client on console-fra.rpki-client.org