Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File:                     5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier:          zW6RGIOjqchAXpudg/5Z5PXNorFhfGtdcYdC53VrgPA=
Subject key identifier:   1A:47:53:B3:D7:A3:87:23:40:3B:53:21:C8:40:EC:90:52:50:BF:38
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer:       /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial:       019353BED14472DDA22B1E1E6A711A687E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number:          0682
Signing time:             Fri 22 Nov 2024 12:00:34 +0000
Manifest this update:     Fri 22 Nov 2024 12:00:34 +0000
Manifest next update:     Sat 23 Nov 2024 12:00:34 +0000
Files and hashes:         1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: 1sQkaKGm1/OqWdNfJ+GlhMX7749VEgZzbwyMy07okIo=)
                          2: I5UjJWNzL-1F3RPSj3VSh7LUYvg.roa (hash: 8OocOTUSG7SC3ULn+bhcYwOBi64Mz4b6KgcWOtMnqwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:be:d1:44:72:dd:a2:2b:1e:1e:6a:71:1a:68:7e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
        Validity
            Not Before: Nov 22 12:00:34 2024 GMT
            Not After : Nov 23 12:00:34 2024 GMT
        Subject: CN=1a4753b3d7a38723403b5321c840ec905250bf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:16:16:1a:a2:47:7e:2a:11:c3:a3:79:74:
                    ec:2f:79:15:b8:2f:7f:a6:99:a9:be:99:fe:ef:87:
                    ff:4e:14:e8:a6:36:1c:df:c7:d5:46:a7:21:fb:53:
                    3d:ef:66:7d:8c:d3:03:26:14:73:87:d4:5d:9d:a8:
                    93:fc:ed:4a:a4:4a:66:22:05:4b:4e:51:3f:90:5a:
                    ac:86:10:3b:2b:02:7b:d9:f5:05:a2:2b:a6:c4:b1:
                    2f:d8:bf:44:f2:c4:13:70:75:6a:9c:65:29:ef:b2:
                    e4:71:52:82:7e:c8:9c:ec:71:ae:7a:1c:b1:3c:df:
                    30:cf:7a:1a:cd:e9:13:6d:28:53:32:50:0d:00:1b:
                    72:c9:2f:7f:78:08:94:4f:5d:aa:1c:dd:cd:9f:1b:
                    4f:32:4b:6b:eb:d2:60:e3:77:b0:4d:10:2a:e5:dc:
                    69:9f:6b:03:c4:e0:d9:56:0c:4f:33:15:ba:c4:27:
                    24:1f:15:3c:aa:fa:2d:20:2a:e4:42:7a:0f:bd:74:
                    57:c1:b3:9d:ff:4f:5e:eb:44:a9:bb:7f:a1:d0:a8:
                    d2:4d:cc:10:c3:e8:7f:3b:66:0b:64:d0:9a:fd:4b:
                    09:e4:42:53:80:09:ee:cf:9a:7d:38:fb:0f:9e:cd:
                    33:b2:85:14:cc:42:17:2c:7c:35:da:c0:b0:50:ec:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:47:53:B3:D7:A3:87:23:40:3B:53:21:C8:40:EC:90:52:50:BF:38
            X509v3 Authority Key Identifier:
                keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:31:6a:1f:0a:cd:92:65:23:e7:78:36:1d:db:70:74:0f:01:
         46:68:54:0c:b2:15:25:69:f3:66:c8:ef:cb:aa:7b:60:cf:ba:
         f2:25:80:5e:c7:dd:c1:fc:a7:ed:33:9b:d3:a5:34:38:8e:2c:
         37:0e:cd:19:55:ae:1c:e6:7b:de:36:94:09:8d:92:a4:bf:60:
         f5:2c:f5:8c:94:0e:e5:c2:3e:07:af:bc:75:20:b3:24:a7:87:
         1d:07:f1:f6:b6:b1:bb:85:cf:2b:69:f6:90:c4:e3:cc:92:14:
         df:83:f7:cd:f9:03:75:88:1a:10:b3:4b:d1:0c:49:a8:16:06:
         50:fe:1b:91:eb:56:a4:e2:b9:33:db:f8:88:bf:c8:db:41:0f:
         c7:e8:2a:ad:28:7a:7d:1b:4e:a0:91:50:29:24:3a:83:54:15:
         ea:74:96:c1:77:cf:1c:cf:56:ef:30:94:4f:fd:39:6d:fc:79:
         d3:f8:b3:82:9a:54:c3:e1:e8:73:8e:c5:5c:e4:aa:8b:f5:75:
         63:02:8a:eb:86:cb:69:e1:aa:7e:e0:50:5c:40:d8:d3:0d:4e:
         6a:33:69:bb:50:97:1c:30:b6:bd:73:50:e0:e0:86:50:a6:3b:
         1b:5b:6b:f2:90:94:73:d0:05:4c:72:5d:e5:22:c5:02:f2:cf:
         d4:8e:26:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTvtFEct2iKx4eanEaaH5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDMyYTNlMThiODRlZTNjNTRlMzRmYTY3ZGM2OGVmMTlk
MmI3YjMwHhcNMjQxMTIyMTIwMDM0WhcNMjQxMTIzMTIwMDM0WjAzMTEwLwYDVQQD
EygxYTQ3NTNiM2Q3YTM4NzIzNDAzYjUzMjFjODQwZWM5MDUyNTBiZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LMWFhqiR34qEcOjeXTsL3kVuC9/
ppmpvpn+74f/ThTopjYc38fVRqch+1M972Z9jNMDJhRzh9RdnaiT/O1KpEpmIgVL
TlE/kFqshhA7KwJ72fUFoiumxLEv2L9E8sQTcHVqnGUp77LkcVKCfsic7HGuehyx
PN8wz3oazekTbShTMlANABtyyS9/eAiUT12qHN3NnxtPMktr69Jg43ewTRAq5dxp
n2sDxODZVgxPMxW6xCckHxU8qvotICrkQnoPvXRXwbOd/09e60Spu3+h0KjSTcwQ
w+h/O2YLZNCa/UsJ5EJTgAnuz5p9OPsPns0zsoUUzEIXLHw12sCwUOzFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpHU7PXo4cjQDtTIchA7JBSUL84MB8GA1UdIwQY
MBaAFOTTKj4YuE7jxU40+mfcaO8Z0rezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQt
ODdjMmU4ZjM5MTRlLzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lMDM4MDgtZDJkYi00MGQ5LTgxZjQtODdjMmU4ZjM5MTRl
LzEvNU5NcVBoaTRUdVBGVGpUNlo5eG83eG5TdDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTFqHwrN
kmUj53g2HdtwdA8BRmhUDLIVJWnzZsjvy6p7YM+68iWAXsfdwfyn7TOb06U0OI4s
Nw7NGVWuHOZ73jaUCY2SpL9g9Sz1jJQO5cI+B6+8dSCzJKeHHQfx9raxu4XPK2n2
kMTjzJIU34P3zfkDdYgaELNL0QxJqBYGUP4bketWpOK5M9v4iL/I20EPx+gqrSh6
fRtOoJFQKSQ6g1QV6nSWwXfPHM9W7zCUT/05bfx50/izgppUw+Hoc47FXOSqi/V1
YwKK64bLaeGqfuBQXEDY0w1OajNpu1CXHDC2vXNQ4OCGUKY7G1tr8pCUc9AFTHJd
5SLFAvLP1I4mFw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:59:52 2024 by rpki-client on console-ams.rpki-client.org