Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
File:                     MGwIZtwlII5sB9SiHX2AULUI1qI.mft (raw, json)
Hash identifier:          xMt5szMO/Elz17qMY3RwF+jUjzJPFf+WL+WyTNCuaNc=
Subject key identifier:   B1:69:0E:69:10:50:B2:85:EC:2D:DA:48:5C:38:02:F7:3F:85:08:FA
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Certificate issuer:       /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial:       019355767BAE1D15C146F53A1105FEDAD27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
Manifest number:          11E4
Signing time:             Fri 22 Nov 2024 20:00:48 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:48 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:48 +0000
Files and hashes:         1: C3Ye8BVWunhqKy1Z9BgtJL5ksLU.roa (hash: 5mxTDuhv0CraTCOesKU7o3VosKd5TSTLIwnqGo4xImo=)
                          2: K3Wvf3XmdLMqrlWfYbePyjBHK1w.roa (hash: EMMz4eaEGLqGG4r2u4VHbJVqxsPqY1niA4AYfsezy20=)
                          3: MGwIZtwlII5sB9SiHX2AULUI1qI.crl (hash: fDwqki6JRXBUXT+3ceHgjSh7M5NuMXDYSQYAE7xMg7M=)
                          4: OrXEzF07F83yOXH0_XsIijPi6cE.roa (hash: /9iknE1ZNGzsOiY7oHUfm62dqBiW3ajB4hGDuIYqwgI=)
                          5: cyeA6nty9fcxVXjbQKFC5m2JOwo.roa (hash: mOI8UmravXYrx49069STG/MxM1DYlFDpHDvw05uRaPw=)
                          6: dcdif1aPOuOvOs-Wv-7vox4UdOU.roa (hash: bDeRFbVwNu4DDzSpUV1RmsRn7sAtCXzoD30RoGoMxx8=)
                          7: f8rAhnUskT4IrPDU7TIiF8cyzug.roa (hash: Dlww2pgNZoys3A40Ac1mOPQVZ+HY/PBRYLbd0tDpHik=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:7b:ae:1d:15:c1:46:f5:3a:11:05:fe:da:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
        Validity
            Not Before: Nov 22 20:00:48 2024 GMT
            Not After : Nov 23 20:00:48 2024 GMT
        Subject: CN=b1690e691050b285ec2dda485c3802f73f8508fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:8d:62:e1:26:63:82:17:96:b3:67:a4:c4:
                    71:4b:66:86:95:fb:f4:13:74:f2:a2:2b:81:2c:44:
                    d7:2e:88:1c:7a:bd:c3:83:22:f5:9c:01:27:a2:3c:
                    a6:5b:8a:33:cd:af:8a:1a:36:f2:3b:7b:60:20:2e:
                    58:5a:ac:5a:ba:07:00:28:02:ab:64:5a:5f:82:33:
                    ba:c1:25:cd:04:a6:f8:65:eb:8f:e5:88:29:9b:b9:
                    67:1b:37:92:76:15:dc:26:20:a6:21:f6:ee:0c:37:
                    b9:02:1a:d4:b2:34:97:93:6f:dc:a8:62:d5:04:cf:
                    f7:b4:66:4b:c7:6d:67:c8:41:31:3d:23:34:94:c7:
                    b1:0e:05:93:c4:ee:c0:12:40:c7:36:58:47:bc:76:
                    36:b5:d0:7d:ea:59:db:eb:36:e0:72:65:78:16:7d:
                    36:07:f9:ed:0b:0a:1e:ad:c3:16:7b:c3:2b:34:0a:
                    f2:23:d9:0f:1e:2c:7a:18:f7:03:59:7d:82:7d:d2:
                    e6:51:43:e4:c6:af:0b:c1:45:d1:ae:04:29:b4:4f:
                    6b:22:a3:f2:63:38:f7:3e:16:31:94:9e:88:f5:f9:
                    ec:7d:bf:07:ce:59:d4:6f:ae:de:6d:43:17:f4:9c:
                    7c:45:b3:b6:36:ef:20:30:4e:33:dc:6c:0f:fa:cb:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:0E:69:10:50:B2:85:EC:2D:DA:48:5C:38:02:F7:3F:85:08:FA
            X509v3 Authority Key Identifier:
                keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:66:d1:fd:cf:90:3a:da:0e:6b:d8:de:65:28:89:01:66:
         1e:04:bf:3b:ad:58:68:4d:9a:b6:2c:d6:ec:5c:2d:75:49:6c:
         7e:1a:11:cb:40:5b:a0:87:9d:cd:f8:a8:7c:d1:36:4c:e4:ba:
         4e:70:81:65:29:32:f7:93:28:d6:de:f8:30:88:f5:2f:4e:5b:
         24:44:4a:b7:0c:1b:b7:69:af:03:a6:f3:c8:0c:2e:42:27:77:
         3f:2a:28:83:f8:d2:16:10:9a:3d:c2:6e:b6:14:5a:17:33:0f:
         ae:cd:eb:23:3c:7d:1d:cf:61:5c:f7:07:d4:cd:9d:98:39:57:
         00:f8:b1:51:06:87:68:70:30:ac:07:64:0a:9c:6b:04:1b:12:
         93:e9:35:d8:a8:d5:98:81:5e:6c:1a:58:31:36:7b:81:25:e5:
         71:7c:e5:1d:75:ba:15:0e:64:d1:90:74:3b:72:fd:f6:09:c8:
         fa:b0:e0:1c:11:ea:23:0c:2e:05:05:f1:88:fb:55:68:82:7d:
         f9:06:e3:65:52:ed:20:ba:ad:d0:29:a9:8f:90:cb:78:9a:e2:
         cd:b0:6f:10:29:9c:ca:80:19:78:07:5e:f2:08:52:30:d7:8e:
         80:3a:6b:ea:78:98:36:b0:c1:4b:75:f2:cb:9d:82:b9:79:ae:
         c2:31:97:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdnuuHRXBRvU6EQX+2tJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmMwODY2ZGMyNTIwOGU2YzA3ZDRhMjFkN2Q4MDUwYjUw
OGQ2YTIwHhcNMjQxMTIyMjAwMDQ4WhcNMjQxMTIzMjAwMDQ4WjAzMTEwLwYDVQQD
EyhiMTY5MGU2OTEwNTBiMjg1ZWMyZGRhNDg1YzM4MDJmNzNmODUwOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZqNYuEmY4IXlrNnpMRxS2aGlfv0
E3TyoiuBLETXLogcer3DgyL1nAEnojymW4ozza+KGjbyO3tgIC5YWqxaugcAKAKr
ZFpfgjO6wSXNBKb4ZeuP5Ygpm7lnGzeSdhXcJiCmIfbuDDe5AhrUsjSXk2/cqGLV
BM/3tGZLx21nyEExPSM0lMexDgWTxO7AEkDHNlhHvHY2tdB96lnb6zbgcmV4Fn02
B/ntCwoercMWe8MrNAryI9kPHix6GPcDWX2CfdLmUUPkxq8LwUXRrgQptE9rIqPy
Yzj3PhYxlJ6I9fnsfb8HzlnUb67ebUMX9Jx8RbO2Nu8gME4z3GwP+svS2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFpDmkQULKF7C3aSFw4Avc/hQj6MB8GA1UdIwQY
MBaAFDBsCGbcJSCObAfUoh19gFC1CNaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUt
MTBlZGI1NDFlNmZmLzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYWRlZGYtZDBlOS00NWE5LWFmNzUtMTBlZGI1NDFlNmZm
LzEvTUd3SVp0d2xJSTVzQjlTaUhYMkFVTFVJMXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8Bm0f3P
kDraDmvY3mUoiQFmHgS/O61YaE2atizW7FwtdUlsfhoRy0BboIedzfiofNE2TOS6
TnCBZSky95Mo1t74MIj1L05bJERKtwwbt2mvA6bzyAwuQid3Pyoog/jSFhCaPcJu
thRaFzMPrs3rIzx9Hc9hXPcH1M2dmDlXAPixUQaHaHAwrAdkCpxrBBsSk+k12KjV
mIFebBpYMTZ7gSXlcXzlHXW6FQ5k0ZB0O3L99gnI+rDgHBHqIwwuBQXxiPtVaIJ9
+QbjZVLtILqt0Cmpj5DLeJrizbBvECmcyoAZeAde8ghSMNeOgDpr6niYNrDBS3Xy
y52CuXmuwjGXmA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:21 2024 by rpki-client on console-fra.rpki-client.org