Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File:                     S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier:          sr1jv9PQ5tIkP33eC5pV5QqkTPcL3UKcB4HEOvZrG3U=
Subject key identifier:   28:18:42:61:C7:73:33:1D:6B:CC:FE:57:0D:8D:42:FB:97:F6:FA:DC
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer:       /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial:       01935688B12C230CC69C2B598D1DEF92581B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number:          0A04
Signing time:             Sat 23 Nov 2024 01:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:19 +0000
Files and hashes:         1: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: aCtXWYWo92mjGNWGbpSqA4ppgnhwEWBXdIzM/nSCM5w=)
                          2: uC5TEGXJzvoYqvSCqGIpcxeHtdI.roa (hash: zN/rOkLJLxJasR4g5LJ3KehEUtZm517W9P+ALndSQZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:b1:2c:23:0c:c6:9c:2b:59:8d:1d:ef:92:58:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
        Validity
            Not Before: Nov 23 01:00:19 2024 GMT
            Not After : Nov 24 01:00:19 2024 GMT
        Subject: CN=28184261c773331d6bccfe570d8d42fb97f6fadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:ae:c4:80:ec:e8:c7:26:be:47:c6:4a:4e:
                    55:f0:f8:6d:06:0c:0f:e2:fd:f5:63:7e:e6:09:c2:
                    8f:06:0f:86:bb:5a:e7:0c:7f:a0:57:b0:fb:d6:b1:
                    aa:cb:49:b9:69:f5:34:54:be:58:91:28:ed:96:a3:
                    77:d3:ea:0c:d4:9d:09:e8:b8:4c:aa:89:b2:b2:96:
                    06:75:70:09:ae:56:da:80:ce:57:1e:51:b8:c0:01:
                    fd:c8:0a:ed:5a:c8:69:26:a6:8c:e4:3c:ce:4e:a5:
                    ee:6c:fc:69:3e:ef:be:a2:b6:b1:e2:1d:d2:de:f4:
                    01:7b:cd:d7:73:66:3f:7a:c0:23:b9:59:50:ad:18:
                    f3:9c:f0:fe:53:df:14:63:fe:67:90:51:bb:34:52:
                    32:a7:e7:a3:64:de:0d:27:34:a2:29:19:a9:82:ef:
                    af:55:bd:2a:72:fb:11:6b:c3:ae:67:de:f9:7d:38:
                    00:1e:9a:c2:8d:bc:ff:04:4b:13:19:03:34:5e:eb:
                    13:d8:0e:86:fd:a9:9e:9e:4a:a3:b5:f0:da:39:47:
                    08:ed:f2:7d:50:b3:bc:02:3a:44:43:3b:87:5a:d3:
                    1a:0c:ef:f2:6f:6b:8c:8a:f9:36:bd:fd:40:9e:45:
                    d0:f8:fa:dc:30:32:da:87:47:57:84:3a:6e:34:b6:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:18:42:61:C7:73:33:1D:6B:CC:FE:57:0D:8D:42:FB:97:F6:FA:DC
            X509v3 Authority Key Identifier:
                keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bd:5e:d8:d6:b4:6d:71:c4:3d:9b:2d:03:32:de:39:67:42:
         b0:5f:f6:9a:85:82:ff:13:73:e5:fc:fc:d1:a8:1a:90:18:72:
         2a:cd:ae:46:f2:53:5e:12:ee:3c:15:3b:ef:8f:80:0e:1a:f1:
         16:b6:ba:5a:7f:21:4a:f6:1d:01:b1:4e:3e:c2:c5:f8:04:e5:
         3c:a2:5d:cd:33:f2:9e:6c:e2:ca:b8:6c:e0:6c:a3:9e:cd:e7:
         43:be:d2:c7:93:0c:0c:a0:10:48:71:c2:69:57:ef:60:7e:32:
         0d:4e:30:2e:5e:c3:2f:63:64:94:d2:6e:42:90:d4:03:74:5f:
         a1:71:01:44:fc:bb:b8:05:98:b2:57:64:94:53:cf:fd:aa:9d:
         a0:9b:59:7c:ee:02:f9:e7:6e:99:2e:65:96:0e:d0:d0:55:4a:
         ba:d9:23:ca:b7:17:f9:e7:47:19:79:b8:0a:d2:42:c7:78:a4:
         3c:a0:c8:41:65:ef:5a:65:13:1e:b5:34:da:e5:86:3d:48:c1:
         a3:8a:70:21:35:8b:2b:8b:f8:74:e5:62:f7:09:19:02:0d:f9:
         74:e3:1e:0e:be:a5:8b:e2:64:27:14:af:4f:09:c3:b3:a8:5b:
         57:dd:a8:36:46:e2:5e:f3:01:09:b0:98:c5:f7:34:99:a6:fc:
         eb:a5:82:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiLEsIwzGnCtZjR3vklgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh
Yzk5YzUwHhcNMjQxMTIzMDEwMDE5WhcNMjQxMTI0MDEwMDE5WjAzMTEwLwYDVQQD
EygyODE4NDI2MWM3NzMzMzFkNmJjY2ZlNTcwZDhkNDJmYjk3ZjZmYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YauxIDs6McmvkfGSk5V8PhtBgwP
4v31Y37mCcKPBg+Gu1rnDH+gV7D71rGqy0m5afU0VL5YkSjtlqN30+oM1J0J6LhM
qomyspYGdXAJrlbagM5XHlG4wAH9yArtWshpJqaM5DzOTqXubPxpPu++orax4h3S
3vQBe83Xc2Y/esAjuVlQrRjznPD+U98UY/5nkFG7NFIyp+ejZN4NJzSiKRmpgu+v
Vb0qcvsRa8OuZ975fTgAHprCjbz/BEsTGQM0XusT2A6G/amenkqjtfDaOUcI7fJ9
ULO8AjpEQzuHWtMaDO/yb2uMivk2vf1AnkXQ+PrcMDLah0dXhDpuNLYymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgYQmHHczMda8z+Vw2NQvuX9vrcMB8GA1UdIwQY
MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt
NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi
LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb1e2Na0
bXHEPZstAzLeOWdCsF/2moWC/xNz5fz80agakBhyKs2uRvJTXhLuPBU774+ADhrx
Fra6Wn8hSvYdAbFOPsLF+ATlPKJdzTPynmziyrhs4Gyjns3nQ77Sx5MMDKAQSHHC
aVfvYH4yDU4wLl7DL2NklNJuQpDUA3RfoXEBRPy7uAWYsldklFPP/aqdoJtZfO4C
+edumS5llg7Q0FVKutkjyrcX+edHGXm4CtJCx3ikPKDIQWXvWmUTHrU02uWGPUjB
o4pwITWLK4v4dOVi9wkZAg35dOMeDr6li+JkJxSvTwnDs6hbV92oNkbiXvMBCbCY
xfc0mab866WCxw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:19 2024 by rpki-client on console-fra.rpki-client.org