Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
File:                     rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft (raw, json)
Hash identifier:          hXnB3PgStGs80q4RIEtc5il0qCDMNnb0txJ1urYD3nI=
Subject key identifier:   53:C0:25:B0:A1:82:11:26:33:A6:95:C3:2B:7A:0E:55:51:37:B0:A0
Authority key identifier: AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38
Certificate issuer:       /CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
Certificate serial:       01935688CBA58E5AAC4E2D0C6ABCFD854D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
Manifest number:          0319
Signing time:             Sat 23 Nov 2024 01:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:25 +0000
Files and hashes:         1: GYVrkvpPj6G5upYsh5eD-Oa3vng.roa (hash: vb+NZdnjVTJmib/Gxv6t/0TCk/1UwODf88Lo2anomHQ=)
                          2: rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl (hash: kGyfQdJps+/XvBzuPY7+8lDq3oLYXr7j5IdN5EAsYp0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:cb:a5:8e:5a:ac:4e:2d:0c:6a:bc:fd:85:4d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
        Validity
            Not Before: Nov 23 01:00:25 2024 GMT
            Not After : Nov 24 01:00:25 2024 GMT
        Subject: CN=53c025b0a182112633a695c32b7a0e555137b0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:2a:5e:2f:17:17:43:a2:d5:a5:1a:ed:a8:
                    ae:33:5a:31:67:d1:1d:d9:68:01:b8:d1:8a:3c:15:
                    2b:ed:7d:04:75:dd:c7:ab:c3:59:ab:1b:9b:d3:54:
                    a9:6d:f3:37:9e:df:db:31:73:b3:d0:81:d3:cc:90:
                    12:04:ad:36:6c:4d:51:ea:03:bd:6f:0d:8b:12:d4:
                    6f:62:1c:9e:1c:14:b5:9f:67:f4:49:e5:50:15:95:
                    be:9f:e9:37:37:4a:c7:48:59:3b:b7:21:4f:92:87:
                    f5:df:31:4c:1a:23:1a:a3:01:54:7a:06:62:71:2d:
                    24:6b:67:b2:f8:06:d6:41:09:ed:34:cd:5c:52:db:
                    c2:46:47:ea:23:9a:c7:28:04:84:01:fe:87:20:32:
                    d5:37:d3:a8:c1:96:cf:70:36:ca:d2:ff:eb:ae:3d:
                    31:ae:3a:dd:16:3e:b1:43:4c:21:e6:52:df:71:e0:
                    60:08:5a:67:ee:2c:0f:05:d1:88:1c:2a:05:aa:2a:
                    e6:9c:b9:da:bd:34:0c:f4:fa:a4:e3:41:56:d0:e7:
                    fb:22:88:4e:f9:c4:bd:70:4c:a5:34:a7:fb:04:e3:
                    3e:58:a2:88:da:25:86:51:4e:1e:93:88:d9:b6:3a:
                    d0:72:83:1f:f3:94:76:e7:ee:65:7b:59:ef:00:f8:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C0:25:B0:A1:82:11:26:33:A6:95:C3:2B:7A:0E:55:51:37:B0:A0
            X509v3 Authority Key Identifier:
                keyid:AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:84:e2:fc:6c:96:84:a9:d4:ec:54:6e:6f:ff:2d:29:19:c8:
         16:34:0f:a9:87:fd:03:b6:9f:fa:d8:80:ba:a9:d1:8f:7e:cb:
         a5:d5:21:ed:aa:68:c7:80:68:f2:0c:9b:8b:99:0b:20:ca:e3:
         d6:d3:6e:c3:7e:16:41:11:89:91:8f:a3:5b:32:02:ee:c1:40:
         30:69:1d:f3:b5:df:3a:d7:01:24:41:8c:52:f5:09:eb:56:7a:
         7d:4c:16:a1:ba:8d:b0:98:e5:6c:a2:a5:0a:dc:2e:db:01:50:
         41:5f:75:e8:0d:fa:e5:3a:d3:5f:54:86:69:3b:04:54:4c:6e:
         84:00:54:2d:e8:98:64:73:eb:47:6d:b8:65:be:43:e0:51:bc:
         e3:3c:0d:52:c5:3b:f2:1a:e1:e7:b6:8a:6d:11:ff:20:ba:25:
         1e:a5:de:9f:df:f1:e2:c6:1d:2b:dc:83:a5:e9:89:15:a3:e0:
         ef:2a:de:df:7e:9f:7e:53:92:5d:6c:87:a5:83:93:af:a6:2b:
         16:cc:6d:cc:94:ef:9c:3d:7a:b5:8c:db:42:fb:2e:1a:c2:14:
         6d:e4:fb:a5:23:33:0a:61:b1:bd:29:35:6d:f4:a0:1c:45:8e:
         e4:9b:7b:93:6e:84:e3:9d:56:db:a2:46:2a:61:9c:15:94:f3:
         a7:42:04:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiMuljlqsTi0Marz9hU2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzI3YWU3ZjViM2ZjMDA4MjY0OTcxZmE4MWE1OTBhOWJk
ZjIyMzgwHhcNMjQxMTIzMDEwMDI1WhcNMjQxMTI0MDEwMDI1WjAzMTEwLwYDVQQD
Eyg1M2MwMjViMGExODIxMTI2MzNhNjk1YzMyYjdhMGU1NTUxMzdiMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y0qXi8XF0Oi1aUa7aiuM1oxZ9Ed
2WgBuNGKPBUr7X0Edd3Hq8NZqxub01SpbfM3nt/bMXOz0IHTzJASBK02bE1R6gO9
bw2LEtRvYhyeHBS1n2f0SeVQFZW+n+k3N0rHSFk7tyFPkof13zFMGiMaowFUegZi
cS0ka2ey+AbWQQntNM1cUtvCRkfqI5rHKASEAf6HIDLVN9OowZbPcDbK0v/rrj0x
rjrdFj6xQ0wh5lLfceBgCFpn7iwPBdGIHCoFqirmnLnavTQM9Pqk40FW0Of7IohO
+cS9cEylNKf7BOM+WKKI2iWGUU4ek4jZtjrQcoMf85R25+5le1nvAPi3JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPAJbChghEmM6aVwyt6DlVRN7CgMB8GA1UdIwQY
MBaAFK0yeuf1s/wAgmSXH6gaWQqb3yI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRKNjVfV3pfQUNDWkpjZnFCcFpDcHZmSWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ODNkM2QtZjM2Mi00Y2I1LTkyZDkt
NWJkMWE3MTY3OWMxLzEvclRKNjVfV3pfQUNDWkpjZnFCcFpDcHZmSWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82ODNkM2QtZjM2Mi00Y2I1LTkyZDktNWJkMWE3MTY3OWMx
LzEvclRKNjVfV3pfQUNDWkpjZnFCcFpDcHZmSWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYTi/GyW
hKnU7FRub/8tKRnIFjQPqYf9A7af+tiAuqnRj37LpdUh7apox4Bo8gybi5kLIMrj
1tNuw34WQRGJkY+jWzIC7sFAMGkd87XfOtcBJEGMUvUJ61Z6fUwWobqNsJjlbKKl
Ctwu2wFQQV916A365TrTX1SGaTsEVExuhABULeiYZHPrR224Zb5D4FG84zwNUsU7
8hrh57aKbRH/ILolHqXen9/x4sYdK9yDpemJFaPg7yre336fflOSXWyHpYOTr6Yr
FsxtzJTvnD16tYzbQvsuGsIUbeT7pSMzCmGxvSk1bfSgHEWO5Jt7k26E451W26JG
KmGcFZTzp0IEdA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:36 2024 by rpki-client on console-fra.rpki-client.org