Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File:                     Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier:          ENYj7hAixwWMQozreuVUTJ168xZbA85c3Rfh5JUjZH0=
Subject key identifier:   EA:20:BF:A8:00:C9:30:03:7B:79:09:32:69:F8:AF:E1:7D:62:54:2C
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer:       /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial:       019369D9B008820F0F02AA006AAF3B5DCF6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number:          0343
Signing time:             Tue 26 Nov 2024 19:01:34 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:34 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:34 +0000
Files and hashes:         1: NJUeQRFEt3F-7A-9gI1cilrq7XE.roa (hash: gTWfLJjFGi8EkyBtLeJkNnU11kh97GXLQH53CUNgVjU=)
                          2: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: UktxKJc2ba1Q7dWO9FMSVWhT/OWESUy0++UTrUkK6v0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b0:08:82:0f:0f:02:aa:00:6a:af:3b:5d:cf:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
        Validity
            Not Before: Nov 26 19:01:34 2024 GMT
            Not After : Nov 27 19:01:34 2024 GMT
        Subject: CN=ea20bfa800c930037b79093269f8afe17d62542c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:47:79:34:fc:aa:99:c2:47:00:8c:5a:33:54:
                    39:a7:f0:f2:f9:cb:30:5e:7e:cc:80:58:dd:5a:db:
                    a8:61:74:77:d0:ae:bd:99:c6:fb:10:de:6d:72:19:
                    14:0a:9a:0d:6b:eb:c4:69:16:fa:b4:67:fc:99:19:
                    a8:20:c4:d7:cb:93:95:ba:35:4d:a8:93:38:44:6a:
                    f1:2a:78:51:cc:e3:03:22:3b:74:f8:b8:4d:ee:ae:
                    ef:48:1a:ea:77:63:25:52:af:97:d9:c5:1b:00:84:
                    2a:f8:ea:a6:6f:53:4e:40:55:cc:4c:9b:66:fa:e7:
                    d3:30:d4:bc:8b:a0:e4:4f:f3:26:af:7d:06:a2:8c:
                    f9:c1:e7:8f:60:d7:c4:30:af:59:79:e7:d7:e6:e5:
                    46:47:bf:50:f9:8b:d1:57:68:c3:8e:e0:05:e1:3a:
                    ff:60:80:11:da:26:f2:a0:a6:84:c3:9d:e6:64:a2:
                    a7:1b:ce:81:2d:54:33:d9:51:ed:bb:21:f4:70:d7:
                    56:10:05:14:17:6f:16:7d:64:2e:a9:35:cb:c9:db:
                    54:44:eb:67:22:89:3c:9c:95:d3:b2:f0:3c:ce:44:
                    55:bb:21:46:33:7b:d7:3d:9d:1b:25:43:d9:08:41:
                    b6:04:ac:b8:dc:7f:26:57:01:19:01:e9:f3:cf:15:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:20:BF:A8:00:C9:30:03:7B:79:09:32:69:F8:AF:E1:7D:62:54:2C
            X509v3 Authority Key Identifier:
                keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:44:3a:a4:fd:7b:c1:0b:d3:af:4e:28:7d:58:ca:0d:d5:
         14:03:ec:cc:9e:72:9b:c9:53:d9:df:6c:86:6f:f3:7c:28:37:
         30:73:03:8f:7d:35:79:25:d6:f6:74:09:3f:42:34:8a:8b:d7:
         4d:4d:0c:98:55:c3:ba:72:d2:86:a2:14:5d:47:32:2c:07:e9:
         22:71:a5:4f:01:8d:2a:03:c4:a2:24:12:18:99:1c:17:9f:9f:
         28:9f:b2:5c:e7:64:52:97:1b:ca:06:eb:74:4b:9a:c5:c1:c1:
         eb:b0:6b:c9:a2:43:5e:5e:40:8f:a9:5a:61:3a:0e:34:24:b0:
         f6:c1:77:3a:33:c7:f1:40:54:45:e6:84:88:28:d1:a9:80:f4:
         88:ec:1b:27:06:0b:96:c2:d2:59:a7:c3:ea:1e:b7:d2:6b:a0:
         b6:93:ad:3a:cc:0b:7c:78:aa:5a:fe:3b:58:d2:e9:56:d2:86:
         5a:65:60:ad:85:cc:86:36:2d:1c:f6:27:98:72:04:79:c7:26:
         18:1f:d0:e4:21:95:d1:37:16:bb:6b:1a:70:01:bc:07:01:ea:
         0d:d7:14:0f:01:9b:72:83:a3:60:52:67:c8:92:fa:96:82:76:
         7b:a2:78:68:cf:9f:88:bc:96:88:bd:78:51:3e:29:b4:b4:c9:
         b5:82:d3:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2bAIgg8PAqoAaq87Xc9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjUwNzJhMDcwMTIyMWUxZDI5MWYwMmRlYjhjZDUxNjll
NmFjMzIwHhcNMjQxMTI2MTkwMTM0WhcNMjQxMTI3MTkwMTM0WjAzMTEwLwYDVQQD
EyhlYTIwYmZhODAwYzkzMDAzN2I3OTA5MzI2OWY4YWZlMTdkNjI1NDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUd5NPyqmcJHAIxaM1Q5p/Dy+csw
Xn7MgFjdWtuoYXR30K69mcb7EN5tchkUCpoNa+vEaRb6tGf8mRmoIMTXy5OVujVN
qJM4RGrxKnhRzOMDIjt0+LhN7q7vSBrqd2MlUq+X2cUbAIQq+Oqmb1NOQFXMTJtm
+ufTMNS8i6DkT/Mmr30Gooz5weePYNfEMK9ZeefX5uVGR79Q+YvRV2jDjuAF4Tr/
YIAR2ibyoKaEw53mZKKnG86BLVQz2VHtuyH0cNdWEAUUF28WfWQuqTXLydtUROtn
Iok8nJXTsvA8zkRVuyFGM3vXPZ0bJUPZCEG2BKy43H8mVwEZAenzzxWJUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOogv6gAyTADe3kJMmn4r+F9YlQsMB8GA1UdIwQY
MBaAFGO1ByoHASIeHSkfAt64zVFp5qwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEt
ZjM5MWRjMTE3ZmU5LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYzhjYjQtY2U4NC00M2U0LWFhMmEtZjM5MWRjMTE3ZmU5
LzEvWTdVSEtnY0JJaDRkS1I4QzNyak5VV25tckRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoxEOqT9
e8EL069OKH1Yyg3VFAPszJ5ym8lT2d9shm/zfCg3MHMDj301eSXW9nQJP0I0iovX
TU0MmFXDunLShqIUXUcyLAfpInGlTwGNKgPEoiQSGJkcF5+fKJ+yXOdkUpcbygbr
dEuaxcHB67BryaJDXl5Aj6laYToONCSw9sF3OjPH8UBUReaEiCjRqYD0iOwbJwYL
lsLSWafD6h630mugtpOtOswLfHiqWv47WNLpVtKGWmVgrYXMhjYtHPYnmHIEeccm
GB/Q5CGV0TcWu2sacAG8BwHqDdcUDwGbcoOjYFJnyJL6loJ2e6J4aM+fiLyWiL14
UT4ptLTJtYLTLg==
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:44 2024 by rpki-client on console-fra.rpki-client.org